argh, right you are, even on my keyboard they are different - thanks. for the record
s_server -dtls1 -accept 8000 -cert ./ecdsa_cert.pem -key ecdsa_key.pem -cipher "ECDHE-ECDSA-NULL-SHA" works just fine with s_client -dtls1 -connect localhost:8000 -cipher "ECDHE-ECDSA-NULL-SHA" worth noting that without the specified -cipher "ECDHE-ECDSA-NULL-SHA" to s_client the handshake fails in s_server with 140735236031328:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:1360: and from s_client 140735236031328:error:14102410:SSL routines:DTLS1_READ_BYTES:sslv3 alert handshake failure:d1_pkt.c:1174:SSL alert number 40 140735236031328:error:1410C0E5:SSL routines:DTLS1_WRITE_APP_DATA_BYTES:ssl handshake failure:d1_pkt.c:1408: both of which seem OK/normal given the default is to encrypt the communication. On Wed, Oct 22, 2014 at 10:13 AM, Viktor Dukhovni <[email protected]> wrote: > On Wed, Oct 22, 2014 at 09:34:25AM -0700, Nat Brown wrote: > >> OpenSSL> s_server -accept 8000 -cert ./ecdsa_cert.pem -key ecdsa_key.pem >> -cipher ECDHE_ECDSA_NULL_SHA > > Underscores are not hyphens. Try "-cipher ECDHE-ECDSA-NULL-SHA" > > -- > Viktor. > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [email protected] > Automated List Manager [email protected] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
