search

giltene / wrk2

A constant throughput, correct latency recording variant of wrk
Apache License 2.0
4.23k stars 381 forks source link

Cipher support #107

Open elfranne opened 3 years ago

elfranne commented 3 years ago

All credits are to @jayce from its PR in 2016 : https://github.com/wg/wrk/pull/220 .

So you can specify the cipher you want to test with -z. The cipher format is openssl (and not IANA).

wrk -t4 -c100 -d3s -R2000 -z AES256-GCM-SHA384 https://example.com

elfranne commented 3 years ago

This does not work with TLS 1.3. Previous to TLS 1.3 uses SSL_CTX_set_cipher_list but 1.3 uses SSL_CTX_set_ciphersuites.

So my idea is now to detect the TLS protocol using SSL_CIPHER_get_protocol_id but I am not sure if that is the right way to do it...

Also how can you get the protocol when some ciphers are compatible with multiple TLS versions ? Like ECDHE-RSA-AES128-SHA is compatible the 3 first iteration of TLS ...