[openssl.org #2709] Exporter return value confusion

2012-02-09 Thread Eric Rescorla via RT
Checkin 1.57.2.3.2.18 changes the return value of SSL_export_keying_material to return 1 on success rather than the length of the returned string. Unfortunately, s_client.c still depends on the previous semantics and so reports an error. I don't care which one of these it is, but we should

Re: [openssl.org #2709] AutoReply: Exporter return value confusion

2012-02-09 Thread Eric Rescorla via RT
this is a problem in s_server as well, btw. On Thu, Feb 9, 2012 at 12:26 PM, The default queue via RT r...@openssl.org wrote: Greetings, This message has been automatically generated in response to the creation of a trouble ticket regarding:        Exporter return value confusion, a

[openssl.org #2662] NPN patch breaks DTLS Finished exchange

2011-12-18 Thread Eric Rescorla via RT
The introduction of NPN support seems to have broken DTLS. [12] ./openssl s_server -dtls1 WARNING: can't open config file: /usr/local/ssl/openssl.cnf Using default temp DH parameters Using default temp ECDH parameters ACCEPT ERROR 2692642180:error:1408C06F:SSL routines:SSL3_GET_FINISHED:bad