"SSL: error:0A0000B9:SSL routines::no cipher match" with Mozilla modern ciphers v5.5

Jeffrey Walton noloader at gmail.com
Fri Feb 18 15:18:46 UTC 2022


On Fri, Feb 18, 2022 at 6:57 AM petecooper <nginx-forum at forum.nginx.org> wrote:
>
> I am following up with fresh eyes.The 3x ciphers that cause problems are:
>
> TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
>
> I have just noticed each cipher name above has an underscore `_` character
> as a separator. The working ciphers all use a dash `-` as a separator.
>
> Might that be a factor in Nginx rejecting the cipher names?

The cipher suite names look Ok, see
https://www.openssl.org/docs/man1.1.1/man1/ciphers.html.

It's probably a downlevel version of OpenSSL.

Jeff



More information about the nginx mailing list