Need support on enabling AES-GCM ciphers as default ciphers in ACE (6.3.3) and OpenSSL (1.0.2u)

[Johnny Willemsen]

Hi,

That ACE version is ancient, have you tried to upgrade to the latest ACE 
release?

Support on the mailing lists is only best effort, no guarantees. When 
you need guaranteed support I would recommend you to contact one of the 
commercial support providers, see 
https://github.com/DOCGroup/ACE_TAO/wiki/ACE-and-TAO-Commercial-support 
for an overview.

Best regards,

Johnny Willemsen
Remedy IT
https://www.remedy.nl

On 8/2/23 11:13, Tholeti, Sireesh kumar wrote:
> Hello,
> 
> In our project, we are utilizing ACE (6.3.3) and OpenSSL (1.0.2u) 
> versions. Our goal is to make AES-GCM ciphers as default ciphers for 
> encryption in the project. However, after adding AES-GCM ciphers to the 
> default list and restricting TLS to use only AES-GCM for encryption, 
> then the communication/handshake breaks between client and server.
> 
> OpenSSL claims AES-GCM ciphers are supported by default, we need 
> assistance from ACE in properly configuring AES-GCM ciphers as the 
> default without encountering any errors, Additionally, we would like to 
> know which APIs are responsible for handling this configuration.
> 
> Prior we made support for the DH ciphers in our project by referring the 
> following links-
> 
> https://en.wikibooks.org/wiki/OpenSSL/Diffie-Hellman_parameters 
> <https://en.wikibooks.org/wiki/OpenSSL/Diffie-Hellman_parameters> ,
> 
> https://wiki.openssl.org/index.php/Elliptic_Curve_Diffie_Hellman 
> <https://wiki.openssl.org/index.php/Elliptic_Curve_Diffie_Hellman>,
> 
> Similarly do we have any references to achieve this ?
> 
> Regards,
> 
> Sireesh
>