Skip to content

is this parameter ssl_cipher_list in struct lws_context_creation_info only work when the backend ssl library is openssl? how about the mbedtls? does it accept iana format string? #3533

@pppaulpeter

Description

@pppaulpeter

Hi Andy @lws-team ,

'''	const char *ssl_cipher_list;
	/**< VHOST: List of valid ciphers to use ON TLS1.2 AND LOWER ONLY (eg,
	 * "RC4-MD5:RC4-SHA:AES128-SHA:AES256-SHA:HIGH:!DSS:!aNULL"
	 * or you can leave it as NULL to get "DEFAULT" (For backwards
	 * compatibility, this can also be used to pass the client cipher
	 * list when setting up a vhost client SSL context,
	 * but it is preferred to use .client_ssl_cipher_list for that.)
	 * SEE .tls1_3_plus_cipher_list and .client_tls_1_3_plus_cipher_list
	 * for the equivalent for tls1.3.
	 */''' 

how to set the cipher suit when the ssl library is mbetls? do i need call mbedtls api (mbedtls_ssl_conf_ciphersuites)in my code? Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions