1 Topic by zeta (edited by zeta 2018-08-29 08:56:17)

  • zeta
  • Member
  • Offline
  • Registered: 2018-08-29
  • Posts: 12

Topic: How to set server example to use a specific cipher suite?

I mean the server example that comes with source code. Not the echoserver, but the root/examples/server/server file.
I tried to use -l option.
It didn't work.
How can I set a cipher suite to use in server example.
I want to use DHE-RSA-AES-128-SHA.

Share

  • From: Bozeman
  • Registered: 2017-07-06
  • Posts: 29

Re: How to set server example to use a specific cipher suite?

Hi zeta,

Thanks for reaching out with this error. After looking at it, it seems like the examples/server/server application can't recognize 

DHE-RSA-AES-128-SHA

It does, however, recognize 

DHE-RSA-AES128-SHA

(this was found in src/internal.c, line 15570).

Please let me know if this solves your issue.

Thank you!

Share

  • zeta
  • Member
  • Offline
  • Registered: 2018-08-29
  • Posts: 12

Re: How to set server example to use a specific cipher suite?

Thank you very much.
It did work.
Thank you again.
May I ask some general informations about TLS here?

Share

  • From: Bozeman
  • Registered: 2017-07-06
  • Posts: 29

Re: How to set server example to use a specific cipher suite?

Hi zeta,

I'm glad to hear that it worked out for you! And yes, you can ask questions regarding general information about TLS here, but you will tend see best response times if you email support@wolfssl.com!

Share

5 Reply by Bitgid (edited by Bitgid 2018-08-29 23:03:09)

  • Registered: 2018-02-19
  • Posts: 3

Re: How to set server example to use a specific cipher suite?

Hey,
this example we want to test Deffie Hellman on random server
exactly this : DH-RSA-AES128-GCM-SHA256
we use this command line and we see wireshark :
openssl s_client -cipher DH -connect yoursite.com:443 -msg -debug treadmills.
Bitg

Share

  • From: Bozeman
  • Registered: 2014-05-09
  • Posts: 777

Re: How to set server example to use a specific cipher suite?

Bitgid,

wolfSSL does not support that cipher suite, the options that are similar and supported are:

ECDH-RSA-AES128-GCM-SHA256
DHE-RSA-AES128-GCM-SHA256
ECDHE-RSA-AES128-GCM-SHA256

Is it possible you meant one of those cipher suites instead?

Regards,

K

Kaleb J. Himes's Website

Share