Bitcoin Forum
February 22, 2019, 07:28:50 AM *
News: Latest Bitcoin Core release: 0.17.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: OpenSSL ciphers and App Engine  (Read 2585 times)
Gavin Andresen
Legendary
*
qt
Offline Offline

Activity: 1652
Merit: 1018


Chief Scientist


View Profile WWW
October 22, 2010, 04:06:08 PM
 #1

I spent way too many hours yesterday trying to figure out why my Google App Engine code couldn't urlfetch from my -rpcssl bitcoin process, so I'm posting this to hopefully save somebody else from the frustration.

I made Bitcoin's HTTPS-JSON-RPC code fussy about what openssl ciphers it supports on purpose; by default, it doesn't accept SSLV1 connections or older, weaker ciphers or hashing algorithms (like single-DES and MD5).

Surprisingly, Google's App Engine urlfetch service currently ONLY supports RC4/DES/MD5/SHA, so, by default, App Engine can't talk via https to Bitcoin.  The workaround is easy (use the -rpcsslciphers= option to override the ciphers bitcoin will accept), and I'll document this on the rpcssl wiki page.

And hopefully Google will get with the program and support better encryption...

How often do you get the chance to work on a potentially world-changing project?
1550820530
Hero Member
*
Offline Offline

Posts: 1550820530

View Profile Personal Message (Offline)

Ignore
1550820530
Reply with quote  #2

1550820530
Report to moderator
Your Bitcoin transactions
The Ultimate Bitcoin mixer
made truly anonymous.
with an advanced technology.
Mix coins
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1550820530
Hero Member
*
Offline Offline

Posts: 1550820530

View Profile Personal Message (Offline)

Ignore
1550820530
Reply with quote  #2

1550820530
Report to moderator
ByteCoin
Sr. Member
****
expert
Offline Offline

Activity: 416
Merit: 251


View Profile
October 28, 2010, 03:23:37 PM
 #2

Thanks for that. You might feel that you're mailing this stuff into a void but I have taken note for my own project and I appreciate not having to work it out for myself.

ByteCoin
Pages: [1]
  Print  
 
Jump to:  

Bitcointalk.org is not available or authorized for sale. Do not believe any fake listings.
Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!