[openssl-users] Is RC4-MD5 disabled on Openssl-1.0.1h

Viktor Dukhovni openssl-users at dukhovni.org
Thu Mar 26 14:54:52 UTC 2015

On Thu, Mar 26, 2015 at 07:56:38PM +0530, Mukesh Yadav wrote:

> :~/openssl-0.9.8d_install/usr/local/bin# ./openssl ciphers RC4-MD5+RC4-SHA
> -v
> RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5
> RC4-MD5                 SSLv2 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5
> RC4-SHA                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1

That's a bug.  Between two ciphers "+" means "AND".  Right after
":" a "+" means "move to the end".  No cipher is both RC4-MD5 AND


More information about the openssl-users mailing list