Re: [racket-dev] [patch] OpenSSL ECDH(E) + DHE support.

2014-02-10 Thread Edward Lee
On Mon, Feb 10, 2014 at 06:37:56PM -0500, Ryan Culpepper wrote: > On 02/08/2014 05:52 PM, Edward Lee wrote: > >Hi. > > > >Racket's OpenSSL bindings do not currently enable the ECDH(E) and the > >DHE ciphers, which are needed for perfect forward secrecy. > > > >I've attached a patch that: > > - Em

Re: [racket-dev] [patch] OpenSSL ECDH(E) + DHE support.

2014-02-10 Thread Ryan Culpepper
On 02/08/2014 05:52 PM, Edward Lee wrote: Hi. Racket's OpenSSL bindings do not currently enable the ECDH(E) and the DHE ciphers, which are needed for perfect forward secrecy. I've attached a patch that: - Embeds reasonable defaults for DHE mode. - Adds two functions, ssl-server-context-en

Re: [racket-dev] [patch] OpenSSL ECDH(E) + DHE support.

2014-02-10 Thread Edward Lee
Full disclosure: I am not an OpenSSL expert and this patch is still a work in progress. I will hopefully have a more finalized patch closer to next week, but I am not qualified to audit this code. On Sun, Feb 09, 2014 at 04:40:44PM -0500, Neil Van Dyke wrote: > Edward Lee wrote at 02/08/2014 05: