[openssl-users] Disable EXPORT cipher suites during compilation

[pratyush parimal]

Hi everyone,

I am trying to disable the EXPORT ciphers in my OpenSSL code, during
compile-time.

I'm able to do so at runtime by including '!EXP' in the string I use with
SSL_CTX_set_cipher_list(). However, I'm wondering is there an option (like
'no-rc5') that I can pass to Configure?

./Configure --help says that I can use no-<cipher> to disable stuff, so I
used no-exp, but I think that didn't work since the list of ciphers I get
from SSL_get_ciphers() still includes EXP-... ciphers.

So does anyone know of a way to compile them out?

Thanks,
Pratyush
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150716/8d19e3fc/attachment.html>