Topics
All
MacOS
(Only)
Windows
(Only)
Linux
(Only, Not)
iOS
(Only, Not)
Components
Crossplatform Mac & Win
Server
Client
Old
Deprecated
Guides
Examples
Videos
New in version:
12.1
12.2
12.3
12.4
12.5
13.0
13.1
13.2
13.3
13.4
Statistic
FMM
Blog
CURL.SetOptionSSLCipherList
Sets the list of ciphers to use for the SSL connection.
Component |
Version |
macOS |
Windows |
Linux |
Server |
iOS SDK |
CURL
|
2.5 |
✅ Yes |
✅ Yes |
✅ Yes |
✅ Yes |
✅ Yes |
MBS( "CURL.SetOptionSSLCipherList"; curl; Value { ; Encoding } )
More
MBS(
"CURL.SetOptionSSLCipherList"; /* Sets the list of ciphers to use for the SSL connection. */
$curl; /* The CURL session handle. */
$Value; /* The new text string with list of ciphers.e.g. "RC4-SHA:SHA1+DES" */
$Encoding) /* Optional; The text encoding for text parameter.
Default is UTF-8.e.g. "utf8" */
Less
Parameters
Parameter |
Description |
Example |
Flags |
curl |
The CURL session handle. |
$curl |
|
Value |
The new text string with list of ciphers. |
"RC4-SHA:SHA1+DES" |
|
Encoding |
The text encoding for text parameter.
Default is UTF-8. Possible encoding names: ANSI, ISO-8859-1, Latin1, Mac, Native, UTF-8, DOS, Hex, Base64 or Windows. More listed in the FAQ. |
"utf8" |
Optional |
Result
Returns "OK" on success.
Description
Sets the list of ciphers to use for the SSL connection.
The list must be syntactically correct, it consists of one or more cipher strings separated by colons. Commas or spaces are also acceptable separators but colons are normally used, !, - and + can be used as operators.
For OpenSSL and GnuTLS valid examples of cipher lists include 'RC4-SHA', ´SHA1+DES´, 'TLSv1' and 'DEFAULT'. The default list is normally set when you compile OpenSSL.
You'll find more details about cipher lists on this URL: http://www.openssl.org/docs/apps/ciphers.html
For NSS, valid examples of cipher lists include 'rsa_rc4_128_md5', ´rsa_aes_128_sha´, etc. With NSS you don't add/remove ciphers. If one uses this option then all known ciphers are disabled and only those passed in are enabled.
You'll find more details about the NSS cipher lists on this URL: http://directory.fedora.redhat.com/docs/mod_nss.html#Directives
See also SSL_CIPHER_LIST option in CURL manual.
Examples
Reduce security level:
Set Variable [ $result ; Value: MBS( "CURL.SetOptionSSLCipherList"; $curl; "DEFAULT@SECLEVEL=0") ]
See also
Blog Entries
Created 18th August 2014, last changed 13th July 2023
CURL.SetOptionSSLCertType
-
CURL.SetOptionSSLEnableALPN