Is there any way I could change the default/preferred cipher for SSL, so that any application/process in Linux which uses SSL would have to use that specific cipher (RC4-SHA for example) for it's connection to the outside world?

I am using Xen hypervisor in Ubuntu 14.04 and I have installed openssl. Xen can use SSL in order to "securely" migrate (transfer) a VM to another host in the LAN. I need to be able to change the preferred/default SSL cipher and do some tests.


There are various SSL stacks used in Linux: NSS for the Firefox and Chrome and usually OpenSSL for the rest. While OpenSSL has its DEFAULT ciphers which are compiled into the library several users of OpenSSL use their own cipher sets. Notably languages like Python, Perl, Ruby have all their own preferred cipher sets coded into their various libraries.

Which means, that there is no central place where you could change the ciphers used by all application. You have to do it mostly for each application separately.

  • This is what I was afraid of. Thanks for the help anyway – Ali Dec 15 '15 at 21:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.