Azet found a way to include the ephermeral handshakes which work in older openssl...
authorAaron Kaplan <aaron@lo-res.org>
Tue, 3 Jun 2014 20:39:33 +0000 (22:39 +0200)
committerAaron Kaplan <aaron@lo-res.org>
Tue, 3 Jun 2014 20:39:33 +0000 (22:39 +0200)
See also: http://lists.cert.at/pipermail/ach/2014-May/001355.html

src/common/cipherStringB.tex

index ec9eb7c..b1c122d 100644 (file)
@@ -1 +1 @@
-\seqsplit{EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA}
+\seqsplit{EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA}