<div dir="ltr">Greetings,<div><br></div><div>I'm using OpenSSL for testing and recently compiled 1.1.0g and h. I'm seeing the same behaviour in both. </div><div><br></div><div>openssl ciphers -v list the NULL ciphers, but when I try to use NULL or NULL-MD5 I get the same result: No ciphers available.</div><div><br></div><div>I've tried several compile options to no avail.</div><div><br></div><div>Can anyone point me in the right direction?</div><div><br></div><div>Thanks!</div><div><br></div><div><br></div><div>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">./openssl s_client -connect x.x.x.x:443 -cipher NULL</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">CONNECTED(00000003)</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">140735917126464:error:141640B5:SSL routines:tls_construct_client_hello:no ciphers available:ssl/statem/statem_clnt.c:800:</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">---</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">no peer certificate available</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">---</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">No client certificate CA names sent</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">---</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">SSL handshake has read 0 bytes and written 0 bytes</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">Verification: OK</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">---</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">New, (NONE), Cipher is (NONE)</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">Secure Renegotiation IS NOT supported</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">Compression: NONE</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">Expansion: NONE</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">No ALPN negotiated</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">SSL-Session:</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Protocol<span class="inbox-inbox-Apple-converted-space"> </span>: TLSv1.2</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Cipher<span class="inbox-inbox-Apple-converted-space"> </span>: 0000</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Session-ID:<span class="inbox-inbox-Apple-converted-space"> </span></span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Session-ID-ctx:<span class="inbox-inbox-Apple-converted-space"> </span></span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Master-Key:<span class="inbox-inbox-Apple-converted-space"> </span></span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>PSK identity: None</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>PSK identity hint: None</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>SRP username: None</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Start Time: 1522278574</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Timeout <span class="inbox-inbox-Apple-converted-space"> </span>: 7200 (sec)</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Verify return code: 0 (ok)</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><span class="inbox-inbox-Apple-converted-space"> </span>Extended master secret: no</span></p>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1">---</span></p></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;line-height:normal">Eric Jacksch, CPP, CISM, CISSP</span><div class="gmail_signature" style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;line-height:normal"><div dir="ltr">+1 613 482-7650<br><a href="mailto:eric@jacksch.com" style="color:rgb(17,85,204)">eric@jacksch.com</a><br>Twitter: @EricJacksch<br><a href="https://securityshelf.com/" style="color:rgb(17,85,204)">https://SecurityShelf.com</a></div></div></div></div>