<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000099" bgcolor="#FFFFFF">
On 26/07/2017 20:58, Jakob Bohm wrote:<br>
<blockquote type="cite"
cite="mid:91f20dc5-4061-4f17-66d6-2475c1739a86@wisemo.com">On
25/07/2017 19:00, Salz, Rich via openssl-users wrote:
<br>
<blockquote type="cite">
<br>
If you want to use those ciphers, you need to set SECLEVEL=0
when you specify the ciphers.
<br>
</blockquote>
<br>
When did TLS_RSA_WITH_AES_128_CBC_SHA256 and higher become
<br>
"low security"?
<br>
<br>
It looks like the client is an older product (ECDH only offered
<br>
for ECDSA certs, classic DH not offered, no algorithms above
<br>
128 bits).
<br>
<br>
So I guess the OP just needs to check if he is using an empty
<br>
cipher string or something silly like that.
<br>
</blockquote>
<br>
The OP said he was testing his "Tls Client that supports TLS
starting from version 1.2 and all the cipher suites". Perhaps he's
found his first bug, since the client isn't offering all the TLS 1.2
cipher suites ...<br>
<pre class="moz-signature" cols="72">--
J. J. Farrell
Not speaking for Oracle</pre>
</body>
</html>