Forum Discussion
Blue_whale
Cirrocumulus
can you please tell me what exactly --ciphers ' ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:!DH:@STRENGTH' this command does ..
chrros95
Feb 14, 2022Altostratus
With this command the ciphers that curl is allowed to use are selected. First all possible ciphers are selected (ALL) and then some weak ciphers (!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4) are excluded. By excluding all Diffie-Hellman ciphers (!DH) we address the issue that curl is mentioning. The last thing (@STRENGTH) is to sort the ciphers according to their strength.
For more information about building cipher string read, for example https://www.openssl.org/docs/man1.0.2/man1/ciphers.html