OpenSSL::SSL::SSLContext#ciphers=

ctx.ciphers = "cipher1:cipher2:..."

ctx.ciphers = [name, ...]

ctx.ciphers = [[name, version, bits, alg_bits], ...]

static VALUE
ossl_sslctx_set_ciphers(VALUE self, VALUE v)
{
    SSL_CTX *ctx;
    VALUE str;

    rb_check_frozen(self);
    if (NIL_P(v))
        return v;

    str = build_cipher_string(v);

    GetSSLCTX(self, ctx);
    if (!SSL_CTX_set_cipher_list(ctx, StringValueCStr(str)))
        ossl_raise(eSSLError, "SSL_CTX_set_cipher_list");

    return v;
}

Sets the list of available cipher suites for this context. Note in a server context some ciphers require the appropriate certificates. For example, an RSA cipher suite can only be chosen when an RSA certificate is available.

See also #ciphers #ciphersuites= #add_certificate #ecdh_curves= also in 4.1 · 4.0 · 3.4 · 3.2 · 3.1 · 3.0

‹ prev#ciphers next ›#ciphersuites=