CURLOPT_SSL_CIPHER_LIST(3)

1CURLOPT_SSL_CIPHER_LIST(3) curl_easy_setopt options CURLOPT_SSL_CIPHER_LIST(3)
2
3
4

NAME

6       CURLOPT_SSL_CIPHER_LIST - specify ciphers to use for TLS
7

SYNOPSIS

9       #include <curl/curl.h>
10
11       CURLcode  curl_easy_setopt(CURL  *handle, CURLOPT_SSL_CIPHER_LIST, char
12       *list);
13

DESCRIPTION

15       Pass a char *, pointing to a zero terminated string holding the list of
16       ciphers  to  use for the SSL connection. The list must be syntactically
17       correct, it consists of one or more cipher strings separated by colons.
18       Commas or spaces are also acceptable separators but colons are normally
19       used, !, - and + can be used as operators.
20
21       For  OpenSSL  and  GnuTLS  valid  examples  of  cipher  lists   include
22       'RC4-SHA',  ´SHA1+DES´, 'TLSv1' and 'DEFAULT'. The default list is nor‐
23       mally set when you compile OpenSSL.
24
25       You'll find more details about cipher lists on this URL:
26
27        https://curl.haxx.se/docs/ssl-ciphers.html
28
29       For NSS, valid examples  of  cipher  lists  include  'rsa_rc4_128_md5',
30       ´rsa_aes_128_sha´,  etc.  With NSS you don't add/remove ciphers. If one
31       uses this option then all known ciphers are  disabled  and  only  those
32       passed in are enabled.
33
34       For  WolfSSL,  valid  examples  of  cipher  lists  include  ´ECDHE-RSA-
35       RC4-SHA´, 'AES256-SHA:AES256-SHA256', etc.
36
37       The application does not have to keep the string around  after  setting
38       this option.
39

DEFAULT

41       NULL, use internal default
42

PROTOCOLS

44       All TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc.
45

EXAMPLE

47       CURL *curl = curl_easy_init();
48       if(curl) {
49         curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/");
50         curl_easy_setopt(curl, CURLOPT_SSL_CIPHER_LIST, "TLSv1");
51         ret = curl_easy_perform(curl);
52         curl_easy_cleanup(curl);
53       }
54

AVAILABILITY

56       If built TLS enabled.
57

RETURN VALUE

59       Returns  CURLE_OK  if TLS is supported, CURLE_UNKNOWN_OPTION if not, or
60       CURLE_OUT_OF_MEMORY if there was insufficient heap space.
61