{"action":"created","issue":{"url":"https://api.github.com/repos/openssl/openssl/issues/5740","repository_url":"https://api.github.com/repos/openssl/openssl","labels_url":"https://api.github.com/repos/openssl/openssl/issues/5740/labels{/name}","comments_url":"https://api.github.com/repos/openssl/openssl/issues/5740/comments","events_url":"https://api.github.com/repos/openssl/openssl/issues/5740/events","html_url":"https://github.com/openssl/openssl/issues/5740","id":308127262,"number":5740,"title":"s_client not working with TLSv1.3 CCM ciphers","user":{"login":"dcooper16","id":16493199,"avatar_url":"https://avatars3.githubusercontent.com/u/16493199?v=4","gravatar_id":"","url":"https://api.github.com/users/dcooper16","html_url":"https://github.com/dcooper16","followers_url":"https://api.github.com/users/dcooper16/followers","following_url":"https://api.github.com/users/dcooper16/following{/other_user}","gists_url":"https://api.github.com/users/dcooper16/gists{/gist_id}","starred_url":"https://api.github.com/users/dcooper16/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dcooper16/subscriptions","organizations_url":"https://api.github.com/users/dcooper16/orgs","repos_url":"https://api.github.com/users/dcooper16/repos","events_url":"https://api.github.com/users/dcooper16/events{/privacy}","received_events_url":"https://api.github.com/users/dcooper16/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/openssl/openssl/milestones/9","html_url":"https://github.com/openssl/openssl/milestone/9","labels_url":"https://api.github.com/repos/openssl/openssl/milestones/9/labels","id":2145708,"number":9,"title":"1.1.1","description":"","creator":{"login":"levitte","id":698918,"avatar_url":"https://avatars1.githubusercontent.com/u/698918?v=4","gravatar_id":"","url":"https://api.github.com/users/levitte","html_url":"https://github.com/levitte","followers_url":"https://api.github.com/users/levitte/followers","following_url":"https://api.github.com/users/levitte/following{/other_user}","gists_url":"https://api.github.com/users/levitte/gists{/gist_id}","starred_url":"https://api.github.com/users/levitte/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/levitte/subscriptions","organizations_url":"https://api.github.com/users/levitte/orgs","repos_url":"https://api.github.com/users/levitte/repos","events_url":"https://api.github.com/users/levitte/events{/privacy}","received_events_url":"https://api.github.com/users/levitte/received_events","type":"User","site_admin":false},"open_issues":203,"closed_issues":145,"state":"open","created_at":"2016-11-19T09:18:52Z","updated_at":"2018-04-02T22:35:31Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2018-03-23T17:59:01Z","updated_at":"2018-04-03T14:36:08Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"If I use `s_client` to try to connect to a server using TLS_AES_128_CCM_8_SHA256 or TLS_AES_128_CCM_SHA256, the connection fails with the following error:\r\n```\r\n139679651649344:error:1421C105:SSL routines:set_client_ciphersuite:wrong cipher returned:ssl/statem/statem_clnt.c:1340:\r\n```\r\nThe command that I use to connect that results in the above error is:\r\n```\r\nopenssl s_client -connect 127.0.0.1:8443 -ciphersuites TLS_AES_128_CCM_8_SHA256:TLS_AES_128_CCM_SHA256\r\n```\r\nI discovered, however, that if I specify the cipher suites in using both the `-ciphersuites` and `-cipher` options, then `s_client` successfully connects:\r\n```\r\nopenssl s_client -connect 127.0.0.1:8443 -ciphersuites TLS_AES_128_CCM_8_SHA256:TLS_AES_128_CCM_SHA256 -cipher TLS_AES_128_CCM_8_SHA256:TLS_AES_128_CCM_SHA256\r\n```\r\nUsing `s_client` to connect with TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, or TLS_AES_128_GCM_SHA256 (the three default TLSv1.3 ciphersuites) works without the need to specify the ciphersuite in the `-cipher` option.\r\n\r\nMy guess is that this is related to https://github.com/openssl/openssl/pull/5392."},"comment":{"url":"https://api.github.com/repos/openssl/openssl/issues/comments/378272481","html_url":"https://github.com/openssl/openssl/issues/5740#issuecomment-378272481","issue_url":"https://api.github.com/repos/openssl/openssl/issues/5740","id":378272481,"user":{"login":"mattcaswell","id":7422273,"avatar_url":"https://avatars0.githubusercontent.com/u/7422273?v=4","gravatar_id":"","url":"https://api.github.com/users/mattcaswell","html_url":"https://github.com/mattcaswell","followers_url":"https://api.github.com/users/mattcaswell/followers","following_url":"https://api.github.com/users/mattcaswell/following{/other_user}","gists_url":"https://api.github.com/users/mattcaswell/gists{/gist_id}","starred_url":"https://api.github.com/users/mattcaswell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattcaswell/subscriptions","organizations_url":"https://api.github.com/users/mattcaswell/orgs","repos_url":"https://api.github.com/users/mattcaswell/repos","events_url":"https://api.github.com/users/mattcaswell/events{/privacy}","received_events_url":"https://api.github.com/users/mattcaswell/received_events","type":"User","site_admin":false},"created_at":"2018-04-03T14:36:08Z","updated_at":"2018-04-03T14:36:08Z","author_association":"OWNER","body":"Fix in #5855."}}
{"actor":{"display_login":"mattcaswell"}}