Re: [exim] TLS Cipher list - sorting?

Top Page
Delete this message
Reply to this message
Author: Tony Finch
Date:  
To: Matthias Hank
CC: exim-users
Subject: Re: [exim] TLS Cipher list - sorting?
Matthias Hank <mh-exim@???> wrote:
>
> Is there a possibility how i can sort the cipher list to announce 256 bit
> ciphers on client side first?


Set tls_require_ciphers in your SMTP transport, and try put SECURE256 at
the start. I think that should do what you want, though I could not
immediately see how to get gnutls-cli to expand a priority list to check
that it would do the right thing.

Tony.
--
<fanf@???> <dot@???> http://dotat.at/ ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}