[openssl-users] is there an API to list all the TLS 1.3 cipher suite names?

Viktor Dukhovni openssl-users at dukhovni.org
Wed Jan 9 03:10:13 UTC 2019


On Tue, Jan 08, 2019 at 02:23:27PM -0800, Sam Roberts wrote:

> node.js has an API that lists all the cipher suite names that can be
> validly passed to set_cipher_list(), but I don't see how to get them
> for TLS1.3 to list the valid inputs to set_cipher_suites().

The intent is that you SHOULD NOT generally customize the list.
All the ciphers in question are quite safe, and if the default
changes, you should probably go with that, rather than a frozen
time-capsule version.

Is there a good reason to want to change or freeze them at this
time?

-- 
	Viktor.


More information about the openssl-users mailing list