Controlling SSL parms from mechanize or lwp

Controlling SSL parms from mechanize or lwp

am 28.08.2006 17:04:35 von RDuzenbury

Hi,

I'm trying to automate the periodic downloading of a file from a web
site. I have to first post the credentials to the login form, then post
the download request using the session_id stored in the cookie header. =20

The connection must be via https, and must be 128 bit (or higher, I
suppose). I can successfully connect to the site via 'https' protocol,
but when I go to login, the site does an additional check and complains
that the cipher strength is not 128 bit.

Firefox works and indicates it is connected via RC4 128 bit.

I'm not very familiar with openssl, but I suspect I should be able to
create the mech or lwp request with a cipher strength request in some
way. I could not find anything on the mail list archive that addresses
this.

I think the openssl implementation on the server has the requisite
cipher:
openssl ciphers MEDIUM:HIGH:@STRENGTH
ADH-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256- SHA:EDH-RSA-
DES-CBC3
-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:ADH-DES-CBC3-SHA:DES- CBC3-MD5:ADH
-AES128-
SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:DHE-DSS -RC4-SHA:RC4
-SHA:RC4
-MD5:ADH-RC4-MD5:RC2-CBC-MD5:RC4-MD5

How can I create my mech request in such a way as to ask the SSL library
to connect via RC4 128 bit?

Many thanks.

Regards,
Rich