I'm trying to connect to a HTTPS server that supports the following ciphers/protocols, but the handshake fails:
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
According to SSL Labs, OpenSSL 1.0.2 supports these ciphers:
I tried compiling from source and the list of ciphers supported by my compiled OpenSSL 1.0.2 stable (from Github) is here: http://pastebin.com/ZQ0xJu1U
These seem to be disjoint with the list my HTTPS server supports. Is there something I'm missing? How does SSL Labs' OpenSSL 1.0.2 support ciphers that isn't covered by standard OpenSSL? I checked with pre-compiled versions of OpenSSL as well and couldn't figure out what was going on.
How do I add these ciphers to my copy of OpenSSL?
I found this question similar to what I was looking for, but neither is my platform CentOS, nor did that question specify how to add these suites if they are not present even after compiling OpenSSL from source.