From 0cac6f1f911590850e90894e14b3ecd0226cfa12 Mon Sep 17 00:00:00 2001
From: Peter Wu <lekensteyn@gmail.com>
Date: Tue, 10 Dec 2013 23:58:08 +0100
Subject: More ciphers support

* generate-wireshark-cs: fix key sizes for export ciphers
* notes, openssl-{connect,listen}: support more cipher suites,
  including NULL.
---
 openssl-connect | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'openssl-connect')

diff --git a/openssl-connect b/openssl-connect
index 23ebc47..77ba857 100755
--- a/openssl-connect
+++ b/openssl-connect
@@ -78,7 +78,8 @@ s_client_client_random() {
 
 # When stdin is a TTY, try all ciphers
 if [ -t 0 ]; then
-    openssl ciphers -V
+    # Use only SSLv3 and TLSv1 ciphers, do not use SSLv2
+    openssl ciphers -V -tls1 ALL:NULL
 else
     # otherwise if not TTY, pass-through (useful for grep)
     cat
-- 
cgit v1.2.1