1

(3 replies, posted in wolfSSL)

Thanks Kareem,
I'll try this and let you know if I still have problems.
cheers,
Simon

2

(3 replies, posted in wolfSSL)

Hi,
We are using wolfSSL 5.7.0 to create a TLS 1.3 server.  After initialising the server I then add a single cipher suite (TLS_AES_128_GCM_SHA256) using SSL_CTX_set_ciphersuites.

When I query the server using NMAP I see that two cipher suites are reported:

| ssl-enum-ciphers:
|   TLSv1.3:
|     ciphers:
|       TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|       TLS_AKE_WITH_AES_128_CCM_8_SHA256 (secp256r1) - A

How do I get rid of the CCM_8 cipher suite - while still retaining support for TLS_AES_128_GCN_SHA256 and TLS_AES_256_GCN_SHA384?

thanks,
Simon