[Bug 1745132] [NEW] Unable to change curl cipher (ECDHE_RSA_AES_256_GCM_SHA384 is always used)

[Matteo Ferrabone]

Public bug reported:

I was doing some tests with curl and libcurl and needed to change the ciphers list. 
I tried different ciphers as in the following example:
curl -v --ciphers AES256-SHA256 https://test.com

No matter what, ECDHE_RSA_AES_256_GCM_SHA384 was always used.

ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: curl 7.50.1-1ubuntu1.1
ProcVersionSignature: Ubuntu 4.8.0-59.64-generic 4.8.17
Uname: Linux 4.8.0-59-generic x86_64
NonfreeKernelModules: nvidia_uvm nvidia_drm nvidia_modeset nvidia
ApportVersion: 2.20.3-0ubuntu8.7
Architecture: amd64
CurrentDesktop: GNOME
Date: Wed Jan 24 11:35:42 2018
InstallationDate: Installed on 2017-02-10 (347 days ago)
InstallationMedia: Ubuntu-GNOME 16.10 "Yakkety Yak" - Release amd64 (20161012.1)
SourcePackage: curl
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: curl (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug yakkety

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to curl in Ubuntu.
https://bugs.launchpad.net/bugs/1745132

Title:
  Unable to change curl cipher (ECDHE_RSA_AES_256_GCM_SHA384 is always
  used)

Status in curl package in Ubuntu:
  New

Bug description:
  I was doing some tests with curl and libcurl and needed to change the ciphers list. 
  I tried different ciphers as in the following example:
  curl -v --ciphers AES256-SHA256 https://test.com

  No matter what, ECDHE_RSA_AES_256_GCM_SHA384 was always used.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: curl 7.50.1-1ubuntu1.1
  ProcVersionSignature: Ubuntu 4.8.0-59.64-generic 4.8.17
  Uname: Linux 4.8.0-59-generic x86_64
  NonfreeKernelModules: nvidia_uvm nvidia_drm nvidia_modeset nvidia
  ApportVersion: 2.20.3-0ubuntu8.7
  Architecture: amd64
  CurrentDesktop: GNOME
  Date: Wed Jan 24 11:35:42 2018
  InstallationDate: Installed on 2017-02-10 (347 days ago)
  InstallationMedia: Ubuntu-GNOME 16.10 "Yakkety Yak" - Release amd64 (20161012.1)
  SourcePackage: curl
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/1745132/+subscriptions