[openssl-users] Missing ciphers
openssl-users at dukhovni.org
Thu Nov 5 00:01:31 UTC 2015
On Wed, Nov 04, 2015 at 03:53:27PM -0800, Steve Topletz wrote:
> I find that I'm missing many ciphers when I interrogate my openssl service.
> Running v1.0.2d 'openssl s_server -cert my.cer -key my.key -accept 443
> -cipher TLSv1.2' offers only about 1/3 of the ciphers listed in 'openssl
> ciphers -V TLSv1.2'.
> How do I get the rest of these ciphers enabled?
Only ciphers found in the "DEFAULT" cipherlist that are compatible
with your server certificate algorithm will be enabled in your
For example, if you only configured an RSA certificate, you won't
be using ECDSA, DSA, kECDH, kDH, PSK or SRP ciphers. Nor eNULL or
So you should not expect to see many ciphers, and this is typically
for the best.
More information about the openssl-users