Re: Unable to set Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
Date: Mon, 13 Apr 2020 14:37:30 -0700
On 4/13/20 1:52 PM, Jeffrey Walton via curl-library wrote:
>> Now I was wondering is it even possible to use this cipher anymore or am I just missing something?
3DES suites are disabled by default since 1.1.0 release in ~2016
cat openssl-1.1.1f/CHANGES
...
Changes between 1.0.2h and 1.1.0 [25 Aug 2016]
...
*) To mitigate the SWEET32 attack (CVE-2016-2183), 3DES cipher suites
have been disabled by default and removed from DEFAULT, just like RC4.
See the RC4 item below to re-enable both.
[Rich Salz]
...
so, check your package's build options. likely DISabled.
assuming it's STILL possible to re-enable it (haven't _seen_ a "gone for good" notice), you can build your own.
tho, not recommended, so caveat emptor.
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2020-04-13