Re: [openssl-users] Build from source; library not found?
> On May 18, 2017, at 4:08 PM, Richard Levitte wrote: > > hiran.chaudhuri> Incidently, I think that when you do this, you'll find > that it > hiran.chaudhuri> finds > hiran.chaudhuri> your libraries all right: > hiran.chaudhuri> > hiran.chaudhuri> $ ldd /prefix/openssl/bin/openssl > hiran.chaudhuri> > hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the > libraries > hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only a > setting > hiran.chaudhuri> for application (executables) but not for shared libraries? > hiran.chaudhuri> In that case the test I tried would be totally meaningless. > > Yes, that's correct. NO, it is not correct, shared libraries also have rpaths for their own dependencies. And when building OpenSSL for installation in non-default locations (not /usr/lib and the like) the libraries should have an rpath. -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Re: [openssl-users] Build from source; library not found?
In message <20170517143939.7a4ac40...@smtp03.mail.de> on Wed, 17 May 2017 16:39:39 +0200, Hiran Chaudhuri said: hiran.chaudhuri> Incidently, I think that when you do this, you'll find that it hiran.chaudhuri> finds hiran.chaudhuri> your libraries all right: hiran.chaudhuri> hiran.chaudhuri> $ ldd /prefix/openssl/bin/openssl hiran.chaudhuri> hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the libraries hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only a setting hiran.chaudhuri> for application (executables) but not for shared libraries? hiran.chaudhuri> In that case the test I tried would be totally meaningless. Yes, that's correct. -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
[openssl-users] Question about fetching client ciphers
Hey Guys, Had a question about obtaining client ciphers from OpenSSL library. Currently we are doing SNI by registering to SSL_CTX_set_tlsext_servername_callback and taking a decision on the right certificate. We were trying to figure out how we can get more information like client ciphers, etc in that callback. I see the ‘SSL_get_client_ciphers’ API in newer (Openssl 1.1.0+), but not in the older versions (Openssl 1.0.2). Is there any other way we can read the client ciphersuite in the callback we register to SSL_CTX_set_tlsext_servername_callback Thanks, Varun -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Re: [openssl-users] OpenSSL 1.1.1 release timeframe
Hi Matt, I do understand. Thanks a lot for the reply. Regards Jayalakshmi On Thu, May 18, 2017 at 2:47 PM, Matt Caswell wrote: > > > On 18/05/17 06:32, Jayalakshmi bhat wrote: > > Please can any one let me know the release date or time line for OpenSSL > > 1.1.1? > > We have not set a date as yet. At the very least we will not be able to > release until the IETF takes TLSv1.3 out of draft status - which is not > in our control. > > Matt > -- > openssl-users mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users > -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Re: [openssl-users] OpenSSL 1.1.1 release timeframe
On 18/05/17 06:32, Jayalakshmi bhat wrote: > Please can any one let me know the release date or time line for OpenSSL > 1.1.1? We have not set a date as yet. At the very least we will not be able to release until the IETF takes TLSv1.3 out of draft status - which is not in our control. Matt -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users