[gnutls-help] FIPS ciphers list is wrong

[Nikos Mavrogiannopoulos]

On Tue, Mar 10, 2015 at 7:09 PM, jonetsu <jonetsu at teksavvy.com> wrote:
> Hello,
>   The list of ciphers provided by 'gnutls-cli -l' is the same in FIPS mode or not.  The test:
> /usr/local/bin/gnutls-cli -v
> gnutls-cli 3.3.13

gnutls-cli -l prints all the algorithms compiled in the library. To
see the algorithms supported in FIPS mode you should use -l with the
priority string you are interested in:
e.g.:
GNUTLS_FORCE_FIPS_MODE=1 ./gnutls-cli -l --priority NORMAL
./gnutls-cli -l --priority NORMAL

regards,
Nikos