curl failed setting cipher list
I'm trying to make curl use GOST2001-GOST89-GOST89 cipher which is available and usable by OpenSSL but keep getting failed setting cipher list error despite the fact that curl sees gost engine and can use GOST client certificates. How can I fix this? All the libraries are compiled from source.
$ openssl ciphers | grep -o '(GOST[[:digit:]]+-?)+'
GOST2001-GOST89-GOST89
GOST94-GOST89-GOST89
$ openssl engine | grep gost
(gost) Reference implementation of GOST engine
$ openssl version
OpenSSL 1.0.1 14 Mar 2012
$ curl -V
curl 7.25.0 (x86_64-apple-darwin11.3.0) libcurl/7.25.0 OpenSSL/1.0.1 zlib/1.2.5
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smtp smtps telnet tftp
Features: IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP
$ curl --engine gost --ciphers GOST2001-GOST89-GOST89 https://localhost:4433
curl: (59) failed setting cipher list
curl openssl
asked Apr 13 '12 at 9:32
synapse
1381210
add a comment |
I'm trying to make curl use GOST2001-GOST89-GOST89 cipher which is available and usable by OpenSSL but keep getting failed setting cipher list error despite the fact that curl sees gost engine and can use GOST client certificates. How can I fix this? All the libraries are compiled from source.
$ openssl ciphers | grep -o '(GOST[[:digit:]]+-?)+'
GOST2001-GOST89-GOST89
GOST94-GOST89-GOST89
$ openssl engine | grep gost
(gost) Reference implementation of GOST engine
$ openssl version
OpenSSL 1.0.1 14 Mar 2012
$ curl -V
curl 7.25.0 (x86_64-apple-darwin11.3.0) libcurl/7.25.0 OpenSSL/1.0.1 zlib/1.2.5
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smtp smtps telnet tftp
Features: IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP
$ curl --engine gost --ciphers GOST2001-GOST89-GOST89 https://localhost:4433
curl: (59) failed setting cipher list
curl openssl
asked Apr 13 '12 at 9:32
synapse
1381210
add a comment |
I'm trying to make curl use GOST2001-GOST89-GOST89 cipher which is available and usable by OpenSSL but keep getting failed setting cipher list error despite the fact that curl sees gost engine and can use GOST client certificates. How can I fix this? All the libraries are compiled from source.
$ openssl ciphers | grep -o '(GOST[[:digit:]]+-?)+'
GOST2001-GOST89-GOST89
GOST94-GOST89-GOST89
$ openssl engine | grep gost
(gost) Reference implementation of GOST engine
$ openssl version
OpenSSL 1.0.1 14 Mar 2012
$ curl -V
curl 7.25.0 (x86_64-apple-darwin11.3.0) libcurl/7.25.0 OpenSSL/1.0.1 zlib/1.2.5
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smtp smtps telnet tftp
Features: IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP
$ curl --engine gost --ciphers GOST2001-GOST89-GOST89 https://localhost:4433
curl: (59) failed setting cipher list
curl openssl
asked Apr 13 '12 at 9:32
synapse
1381210
I'm trying to make curl use GOST2001-GOST89-GOST89 cipher which is available and usable by OpenSSL but keep getting failed setting cipher list error despite the fact that curl sees gost engine and can use GOST client certificates. How can I fix this? All the libraries are compiled from source.
$ openssl ciphers | grep -o '(GOST[[:digit:]]+-?)+'
GOST2001-GOST89-GOST89
GOST94-GOST89-GOST89
$ openssl engine | grep gost
(gost) Reference implementation of GOST engine
$ openssl version
OpenSSL 1.0.1 14 Mar 2012
$ curl -V
curl 7.25.0 (x86_64-apple-darwin11.3.0) libcurl/7.25.0 OpenSSL/1.0.1 zlib/1.2.5
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smtp smtps telnet tftp
Features: IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP
$ curl --engine gost --ciphers GOST2001-GOST89-GOST89 https://localhost:4433
curl: (59) failed setting cipher list
curl openssl
curl openssl
asked Apr 13 '12 at 9:32
synapse
1381210
asked Apr 13 '12 at 9:32
synapse
1381210
asked Apr 13 '12 at 9:32
synapse
1381210
asked Apr 13 '12 at 9:32
synapse
1381210
asked Apr 13 '12 at 9:32
synapse
1381210
1381210
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
This is not really an answer, but might help some.
Error code 59 means "Couldn't use specified SSL cipher" (from here).
Evidently curl can't use this cipher.
The error might be misleading, since the problem might actually be that your localhost server has rejected the cipher as unsupported during handshaking.
It might work better with a better-known cipher.
answered Apr 17 '12 at 8:30
harrymc
253k12259560
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f412001%2fcurl-failed-setting-cipher-list%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
This is not really an answer, but might help some.
Error code 59 means "Couldn't use specified SSL cipher" (from here).
Evidently curl can't use this cipher.
The error might be misleading, since the problem might actually be that your localhost server has rejected the cipher as unsupported during handshaking.
It might work better with a better-known cipher.
answered Apr 17 '12 at 8:30
harrymc
253k12259560
add a comment |
This is not really an answer, but might help some.
Error code 59 means "Couldn't use specified SSL cipher" (from here).
Evidently curl can't use this cipher.
The error might be misleading, since the problem might actually be that your localhost server has rejected the cipher as unsupported during handshaking.
It might work better with a better-known cipher.
answered Apr 17 '12 at 8:30
harrymc
253k12259560
add a comment |
This is not really an answer, but might help some.
Error code 59 means "Couldn't use specified SSL cipher" (from here).
Evidently curl can't use this cipher.
The error might be misleading, since the problem might actually be that your localhost server has rejected the cipher as unsupported during handshaking.
It might work better with a better-known cipher.
answered Apr 17 '12 at 8:30
harrymc
253k12259560
This is not really an answer, but might help some.
Error code 59 means "Couldn't use specified SSL cipher" (from here).
Evidently curl can't use this cipher.
The error might be misleading, since the problem might actually be that your localhost server has rejected the cipher as unsupported during handshaking.
It might work better with a better-known cipher.
answered Apr 17 '12 at 8:30
harrymc
253k12259560
answered Apr 17 '12 at 8:30
harrymc
253k12259560
answered Apr 17 '12 at 8:30
harrymc
253k12259560
answered Apr 17 '12 at 8:30
harrymc
253k12259560
253k12259560
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f412001%2fcurl-failed-setting-cipher-list%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
