-
Notifications
You must be signed in to change notification settings - Fork 2.3k
Closed
Description
Hi all,
In OpenSSL version of NetSSL, you are using SSL_CTX_set_cipher_list
method to set cipher list:
poco/NetSSL_OpenSSL/src/Context.cpp
Line 192 in 1edabc1
SSL_CTX_set_cipher_list(_pSSLContext, params.cipherList.c_str()); |
But the point is that this method only affects TLSv1.2 and below, and for TLSv1.3 you need to use
SSL_CTX_set_ciphersuites()
method based on OpenSSL documentation here: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_cipher_list.htmlMetadata
Metadata
Assignees
Type
Projects
Status
Done