From: Rafał Radecki radecki.rafal@gmail.com
In curl manual: --ciphers -> "(SSL) Specifies which ciphers to use in the connection. The list of ciphers must specify valid ciphers. Read up on SSL cipher list details on this URL:http://www.openssl.org/docs/apps/ciphers.html" In openssl: http://www.openssl.org/docs/apps/ciphers.html#CIPHER_SUITE_NAMES there are names such as "SSL_RSA_WITH_RC4_128_SHA RC4-SHA" but curl --ciphers RC4-SHA https://xxx.yyy curl: (59) Unknown cipher in list: RC4-SHA the same for --ciphers SSL_RSA_WITH_RC4_128_SHA the same. But for: curl --ciphers rsa_rc4_128_sha https://xxx.yyy the command works. Can you tell how to map strings from openssl to curl's format? I've searched the web but with no luck ;)
try the ones in the NSSCipherSuite section of https://git.fedorahosted.org/cgit/mod_nss.git/plain/docs/mod_nss.html There seems to be differences between CentOS 6 and CentOS 5. Your working curl cmdline does not work for me on C5, but it works on C6... Then, curl has a '--engine list' option. On C5, I get padlock and dynamic. On C6, I get nothing...
JD