2

I want to use a particular cipher for a HTTPS connection. The client (phantomjs) statically links openssl. The only way to do it is using environment variables, as there are no command line arguments for doing it.

Does anyone know of the environment variable that can cause a particular cipher to be used? SSL_CIPHER doesnt seem to work.

feroze
  • 245
  • 2
  • 8

1 Answers1

0

You can specify ciphers in the OpenSSL config file (usually /etc/ssl/openssl.cfn). Look for a string like CipherString = DEFAULT@SECLEVEL=2 in the [system_default_sect] section and change it as you need.

P.S. If there's no such a string or even section you can add it by yourself. In Debian 10 this section looks like:

[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=2
Roman Danyk
  • 1