[openssl-users] Is RC4-MD5 disabled on Openssl-1.0.1h

[Viktor Dukhovni]

On Thu, Mar 26, 2015 at 07:56:38PM +0530, Mukesh Yadav wrote:

> :~/openssl-0.9.8d_install/usr/local/bin# ./openssl ciphers RC4-MD5+RC4-SHA
> -v
> 
> RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5
> 
> RC4-MD5                 SSLv2 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5
> 
> RC4-SHA                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1

That's a bug.  Between two ciphers "+" means "AND".  Right after
":" a "+" means "move to the end".  No cipher is both RC4-MD5 AND
RC4-SHA.

-- 
	Viktor.