[openssl-dev] [openssl.org #2464] [PATCH] Experimental TLS-RSA-PSK support for OpenSSL

2015-09-11 Thread Stephen Henson via RT
No problems reported, marking ticket as resolved.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev


[openssl-dev] [openssl.org #2464] [PATCH] Experimental TLS-RSA-PSK support for OpenSSL

2015-07-30 Thread Stephen Henson via RT
On Tue Jun 23 20:09:36 2015, giuseppe.dang...@kdab.com wrote:
> Il 22/06/2015 23:14, Stephen Henson via RT ha scritto:
> >>
> >
> > I'm currently looking at the OpenSSL PSK code. I'll look into
> > incopoorating
> > your changes (in a modified form) as part of that so there is no need
> > to keep
> > it up to date with the changing master branch.
>
> Great, thank you!

I've just pushed the update PSK code to the master branch. Let me know of any
problems.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev


Re: [openssl-dev] [openssl.org #2464] [PATCH] Experimental TLS-RSA-PSK support for OpenSSL

2015-06-23 Thread Giuseppe D'Angelo

Il 22/06/2015 23:14, Stephen Henson via RT ha scritto:

On Sun Jun 21 19:00:55 2015, giuseppe.dang...@kdab.com wrote:

Yet another version after some refactorings that landed in master.

Please, pretty please, with sugar on top, could anyone review this code
so that it can get merged?

It's becoming a difficult exercise to keep track of upstream changes and
adapt the patch every single time...



I'm currently looking at the OpenSSL PSK code. I'll look into incopoorating
your changes (in a modified form) as part of that so there is no need to keep
it up to date with the changing master branch.


Great, thank you! If you have questions on the implementation just ask. 
It should me mostly straightforward with the RFC at hand, with a small 
section copied as-is from the plain RSA code.



I hope to revise the PSK code and make it more flexible so it can support
{RSA,DH,ECDH}+PSK more cleanly.

FYI, I can tell you the cause of the GCM crash: the cipher structure isn't set
up correctly in your patch, it needs to use SSL_AEAD not SSL_SHA256 (compare it
with other GCM entries).


A-ha! That explains the silly mistake, thank you.

Cheers,
--
Giuseppe D'Angelo | giuseppe.dang...@kdab.com | Software Engineer
KDAB (UK) Ltd., a KDAB Group company | Tel: UK +44-1625-809908
KDAB - The Qt Experts



smime.p7s
Description: Firma crittografica S/MIME
___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev


Re: [openssl-dev] [openssl.org #2464] [PATCH] Experimental TLS-RSA-PSK support for OpenSSL

2015-06-23 Thread Giuseppe D'Angelo via RT
Il 22/06/2015 23:14, Stephen Henson via RT ha scritto:
> On Sun Jun 21 19:00:55 2015, giuseppe.dang...@kdab.com wrote:
>> Yet another version after some refactorings that landed in master.
>>
>> Please, pretty please, with sugar on top, could anyone review this code
>> so that it can get merged?
>>
>> It's becoming a difficult exercise to keep track of upstream changes and
>> adapt the patch every single time...
>>
>
> I'm currently looking at the OpenSSL PSK code. I'll look into incopoorating
> your changes (in a modified form) as part of that so there is no need to keep
> it up to date with the changing master branch.

Great, thank you! If you have questions on the implementation just ask. 
It should me mostly straightforward with the RFC at hand, with a small 
section copied as-is from the plain RSA code.

> I hope to revise the PSK code and make it more flexible so it can support
> {RSA,DH,ECDH}+PSK more cleanly.
>
> FYI, I can tell you the cause of the GCM crash: the cipher structure isn't set
> up correctly in your patch, it needs to use SSL_AEAD not SSL_SHA256 (compare 
> it
> with other GCM entries).

A-ha! That explains the silly mistake, thank you.

Cheers,
-- 
Giuseppe D'Angelo | giuseppe.dang...@kdab.com | Software Engineer
KDAB (UK) Ltd., a KDAB Group company | Tel: UK +44-1625-809908
KDAB - The Qt Experts




smime.p7s
Description: S/MIME cryptographic signature
___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev


[openssl-dev] [openssl.org #2464] [PATCH] Experimental TLS-RSA-PSK support for OpenSSL

2015-06-22 Thread Stephen Henson via RT
On Sun Jun 21 19:00:55 2015, giuseppe.dang...@kdab.com wrote:
> Yet another version after some refactorings that landed in master.
>
> Please, pretty please, with sugar on top, could anyone review this code
> so that it can get merged?
>
> It's becoming a difficult exercise to keep track of upstream changes and
> adapt the patch every single time...
>

I'm currently looking at the OpenSSL PSK code. I'll look into incopoorating
your changes (in a modified form) as part of that so there is no need to keep
it up to date with the changing master branch.

I hope to revise the PSK code and make it more flexible so it can support
{RSA,DH,ECDH}+PSK more cleanly.

FYI, I can tell you the cause of the GCM crash: the cipher structure isn't set
up correctly in your patch, it needs to use SSL_AEAD not SSL_SHA256 (compare it
with other GCM entries).

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

___
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev