[openssl-dev] Cipher Suites

[Richard Moore]

On 16 December 2014 at 10:53, <Satish.KumarYarru at cognizant.com> wrote:
>
>   But when I check the "Client Hello" packet, 2 cipher suites are going
>
> Can any one tell me why this 0x00FF cipher suite is going in ClientHello?
>
> I want to block this Unknown cipher (0x00FF) going to server during
> handshake.
>
> Can anyone help me on how to block this 0xFF cipher suite?
>
>
> It's not a cipher suite. It's the  TLS_EMPTY_RENEGOTIATION_INFO_SCSV from
RFC 5746. It will never be negotiated.

Rich.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.opensslfoundation.net/pipermail/openssl-dev/attachments/20141216/47ea0b6f/attachment-0001.html>