Ciphersuites configuration: unknown command

[Andrew Clayton]

On Mon, 7 Oct 2024 10:22:03 +0200
Ariel Goyeneche <agoyeneche at gmail.com> wrote:

> Hi Team,

Hello,

[...]

> *Issue*
> When I am trying to add the following option:
> 
>     "tls": {
>         "certificate": "bundle",
>         "conf_commands": {
>             "ciphersuites": "ECDHE-RSA-AES256-GCM-SHA384",
>             "minprotocol": "TLSv1.2"
>         }
>     }
> I get an error saying: *unknown command "ciphersuites" in "conf_commands"
> option (386: unknown cmd name)*

Hmm, looking at the SSL_CONF_cmd(3ossl) man-page, I'm wondering if you
simply need to prefix the command with "-"?, i.e.

  "-ciphersuites": ...

'minprotocol' however looks a little different...

  "MinProtocol": ...

Hope that helps...

Cheers,
Andrew