Are DHE_DSS cipher suites not supported?

John Jiang john.sha.jiang at gmail.com
Fri Oct 25 07:33:43 UTC 2019


Hi,
I'm using OpenSSL 1.1.1d.
Just want to confirm if DHE_DSS cipher suites are not supported by this
version.

Please consider the below simple case,
1. s_server uses a DSA certifcate
2. force s_client to use TLS 1.2 and TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
(DHE-DSS-AES256-GCM-SHA384)
the connection failed, and s_server reported: no shared
cipher:ssl/statem/statem_srvr.c:2259

But I still can see this cipher suite in the below doc,
https://www.openssl.org/docs/man1.1.1/man1/ciphers.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20191025/ca94a85d/attachment.html>


More information about the openssl-users mailing list