Re: [openssl-dev] FW: 1.1 master fails mac-then-encrypt test

2016-11-28 Thread Blumenthal, Uri - 0553 - MITLL
> The problem is in the test. Version negotiation happens before cipher > selection. The test creates a connection which negotiates TLSv1.3. It > then attempts to select a cipher. However no TLSv1.3 ciphers are offered > by the test so the connection aborts. In truth the test is

Re: [openssl-dev] FW: 1.1 master fails mac-then-encrypt test

2016-11-28 Thread Matt Caswell
On 28/11/16 21:58, Blumenthal, Uri - 0553 - MITLL wrote: >> I can't reproduce this. But on the other hand I don't have previous > >installation on --prefix. > > But did you add “enable-tls1_3” to your config? > > >I mean I would guess this is because test > >program picks shared

Re: [openssl-dev] FW: 1.1 master fails mac-then-encrypt test

2016-11-28 Thread Andy Polyakov
>> I can't reproduce this. But on the other hand I don't have previous > >installation on --prefix. > > But did you add “enable-tls1_3” to your config? > > >I mean I would guess this is because test > >program picks shared libraries at --prefix locations instead of just > >built

Re: [openssl-dev] FW: 1.1 master fails mac-then-encrypt test

2016-11-28 Thread Blumenthal, Uri - 0553 - MITLL
>I can't reproduce this. But on the other hand I don't have previous >installation on --prefix. But did you add “enable-tls1_3” to your config? >I mean I would guess this is because test >program picks shared libraries at --prefix locations instead of just >built ones, and those

Re: [openssl-dev] FW: 1.1 master fails mac-then-encrypt test

2016-11-28 Thread Andy Polyakov
> Mac OS X 10.11.6, Xcode-8.1. > > $ ./Configure darwin64-x86_64-cc enable-threads enable-shared enable-zlib > enable-ec_nistp_64_gcc_128 enable-rfc3779 > --prefix=/Users/ur20980/src/openssl-1.1 > --openssldir=/Users/ur20980/src/openssl-1.1/etc > Configuring OpenSSL version

[openssl-dev] Openssl 1.1 port - hash state serializing

2016-11-28 Thread Ken Goldman
There was no answer on the 'users' list, so this is perhaps now a feature request. Is there a possibility of getting this function? ~~ I have a simulation of a hardware device that has the following characteristics: - does hashing functions - resource constrained - multi-user Therefore, a

[openssl-dev] FW: 1.1 master fails mac-then-encrypt test

2016-11-28 Thread Blumenthal, Uri - 0553 - MITLL
Mac OS X 10.11.6, Xcode-8.1. $ ./Configure darwin64-x86_64-cc enable-threads enable-shared enable-zlib enable-ec_nistp_64_gcc_128 enable-rfc3779 --prefix=/Users/ur20980/src/openssl-1.1 --openssldir=/Users/ur20980/src/openssl-1.1/etc Configuring OpenSSL version 1.1.1-dev

Re: [openssl-dev] Still showing openssl 1.0.2 snapshot issue

2016-11-28 Thread Short, Todd
FYI: The use of -DOPENSSL_NO_BUF_FREELISTS to config or Configure is not recommended, use the proper configuration option: no-buf-freelists -- -Todd Short // tsh...@akamai.com // "One if by land, two if by sea, three if by the Internet." On Nov 27, 2016, at 3:11 AM,

Re: [openssl-dev] openssl 1.0.2 SNAP stable 20161127 issue

2016-11-28 Thread Matt Caswell
On 27/11/16 13:27, The Doctor wrote: > Can you get his fixed? > > ../util/shlib_wrap.sh ./heartbeat_test > test_dtls1_not_bleeding failed: expected return value -1, received 0 > ** test_dtls1_not_bleeding failed ** > > test_dtls1_not_bleeding_empty_payload failed: expected return value