Re: priority strings behavior

[Nikos Mavrogiannopoulos]

On 07/05/2011 08:41 AM, ben thielsen wrote:
> hi-
> 
> i'm experimenting a bit with setting specific priority strings.
> i've been reading some of the documentation, namely gnutls.pdf from 
> http://www.gnu.org/software/gnutls/documentation.html and man 1 
> gnutls-cli, but i think some of the nuances are escaping me.  i get 
> the feeling that specifying certain things [specifically, cipher 
> suites] will inherently also enable other certain things - is this 
> true?  are the cipher suites just shorthand methods for enabling 
> multiple other specific things at once?  is there somewhere 
> documented which settings turn on other settings, and what they are?
> 
> more specifically, i'd like to enable only the following:
[...]
> ...it seems like there's some contradiction between the list of 
> cipher suites and the list of MACs?  i can somehow use sha512, but 
> none of the cipher suites can?

Gnutls priority strings are flexible and might allow more combinations
than the actual ciphersuites. If you want to pick a specific set of
algorithms it is better to pick a ciphersuite and use the algorithms it
consists from.

regards,
Nikos