Download
Browse source Changelog
Documentation
Project   Bug Bounty   Help us   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Security   Version numbers   Vulnerabilities curl tool   man page   Tutorial   HTTP scripting Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users Mailing lists Book: Everything curl Video presentations Report a bug Paid support
Development
Autobuilds Code Style Contribute Deprecate Internals Release Notes Release Procedure Roadmap Run Tests Security Process Specifications Test curl
News
Changelog Release table
curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Unable to set Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)

From: Mark Windshield via curl-library <curl-library_at_cool.haxx.se>
Date: Mon, 13 Apr 2020 22:25:47 +0200

Hello,

I'm trying to include the Cipher Suite TLS_RSA_WITH_3DES_EDE_CBC_SHA
(0x000a) (DES-CBC3-SHA) in my request with the latest libcurl and openssl
1.1.1f, but I seem to be unable to do so, even tho cipher can be found in
libcurls (https://curl.haxx.se/docs/ssl-ciphers.html) aswell as openssl's
documentation (https://www.openssl.org/docs/man1.1.1/man1/ciphers.html).

I tried everything from just setting the Cipher:
curl_easy_setopt(curl, CURLOPT_SSL_CIPHER_LIST, "DES-CBC3-SHA");
which would return the error SSL_CIPHER | Couldn't use specified SSL cipher

to trying "ALL", "TLSv1" & "eNULL" aswell as using those with adding
:@SECLEVEL=0 like this "ALL:@SECLEVEL=0" but nothing would endup using the
cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a) in the Client Hello message.

(also tried everything above with and without ssl_options
"curlsslopt_allow_beast")

Now I was wondering is it even possible to use this cipher anymore or am I
just missing something?

-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2020-04-13