[openssl-users] Dumb question about DES

Viktor Dukhovni openssl-users at dukhovni.org
Thu May 11 19:36:11 UTC 2017


> On May 11, 2017, at 2:13 PM, Scott Neugroschl <scott_n at xypro.com> wrote:
> 
> OK.  Are the 3DES CBC ciphers still part of DEFAULT?

Normal builds of OpenSSL 1.1.0 disable the TLS 3DES ciphersuites at
compile time.  To make use of 3DES in TLS you need to configure your
OpenSSL 1.1.0 build with the "enable-weak-ssl-ciphers" option.

-- 
-- 
	Viktor.



More information about the openssl-users mailing list