2

I want to use a particular cipher for a HTTPS connection. The client (phantomjs) statically links openssl. The only way to do it is using environment variables, as there are no command line arguments for doing it.

Does anyone know of the environment variable that can cause a particular cipher to be used? SSL_CIPHER doesnt seem to work.

2
  • PhantomJS has the --ssl-ciphers command line argument - how come this isn't sufficient? Jan 10, 2019 at 8:56
  • Tried it. Doesnt seem to have any effect.
    – feroze
    Jan 10, 2019 at 19:50

1 Answer 1

0

You can specify ciphers in the OpenSSL config file (usually /etc/ssl/openssl.cfn). Look for a string like CipherString = DEFAULT@SECLEVEL=2 in the [system_default_sect] section and change it as you need.

P.S. If there's no such a string or even section you can add it by yourself. In Debian 10 this section looks like:

[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=2

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .