Richard Hartmann | 25 Jun 16:45

List of supported CipherSuite and CompressionMethod

Hi all,

I was wondering if there is a list of all CipherSuite[s] and
CompressionMethod[s] supported by GNUTLS. At this point,
I would prefer not to go through the code to get an answer, but
if you guys would point me at a file name, I would gladly take
that, as well :)

Additionally, I am wondering if the compression API will likely
change at some point as is the case with OpenSSL.

Thanks,
Richard
Simon Josefsson | 25 Jun 17:24
Favicon
Gravatar

Re: List of supported CipherSuite and CompressionMethod

"Richard Hartmann" <richih.mailinglist <at> gmail.com> writes:

> Hi all,
>
> I was wondering if there is a list of all CipherSuite[s] and
> CompressionMethod[s] supported by GNUTLS. At this point,
> I would prefer not to go through the code to get an answer, but
> if you guys would point me at a file name, I would gladly take
> that, as well :)

Hi.  You can run 'gnutls-cli -l' to check what your particular
library/tool can support, but if you want to check the source see:

http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=blob;f=lib/gnutls_algorithms.c;hb=HEAD

The array with all supported ciphersuites is cs_algorithms.

Output from my 'gnutls-cli -l' is below.

> Additionally, I am wondering if the compression API will likely
> change at some point as is the case with OpenSSL.

The compression API is pretty minimal (get names of compression modes,
and to enable/disable whether to use it, etc).  Looking over the APIs
involved, I can say that these functions will continue to work the same
for many years the very least.  No changes in that area is planned that
I know of.  Finally, I don't recall any changes in this area as long as
I have been involved.  LZO compression was disabled in the last release,
but it doesn't affect the API, and you probably don't want LZO anyway
because it is non-standard.
(Continue reading)


Gmane