[gnutls-dev] Weak ciphers?

Nikos Mavroyanopoulos nmav at gnutls.org
Fri Oct 17 16:16:14 CEST 2003


On Fri, Oct 17, 2003 at 01:32:08PM +0200, Ivo Timmermans wrote:

> Hi,
> One of the users of the Debian GNU TLS package wants to use openldap
> (the Debian package now uses GNU TLS to setup SSL connections) to
> connect to a Netscape LDAP server, which only uses:
> nsssl2ciphers: +rc2export,+rc4export
> nsssl3ciphers: -rsa_null_md5,+rsa_rc2_40_md5,+rsa_rc4_40_md5
> Is there a way to make GNU TLS set up a connection to this server?

The ciphersuite TLS_RSA_EXPORT_ARCFOUR_40_MD5 is supported, so rsa_rc4_40_md5
seems to be common (RC2 is not supported in gnutls for TLS connections).

> 	Ivo
> -- 
> <tarzeau> the internet is so big, and full of nothing i want

-- 
Nikos Mavroyanopoulos




More information about the Gnutls-devel mailing list