AW: smime verification failure

2013-06-28 Thread Gsandtner Michael
It turned out not to be an openssl issue, but a problem in our mail client (outlook). The mail was indeed modified: the mail was delivered with an application/pdf attachment into the mailbox, but the client only sees an empty attachment. Probably a Virusscanner removed it, we have to check, but

Client Hello advertises 2 cipher suites

2013-06-28 Thread Suryya Kumar Jana
Hi, I am using a client application program which uses OpenSSL version 1.0.0h. I configured TLSv1.2 and I have set the cipher suite only as TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 (i.e. ECDH-ECDSA-AES128-SHA256) using the API SSL_CTX_set_cipher_list(). But what I find in packet capture,

need to modifying the CN field of CERT subject name

2013-06-28 Thread Sanjay Kumar (sanjaku5)
Hi All, I have a requirement to get unique certificate for each user. To achieve that I am modifying the CN field of CERT subject name by appending the user index to CN field. Eg. If CN=sanjay For userIndex 1, I want to modify it like CN=sanjay01, considering the user count to 1

RE: Client Hello advertises 2 cipher suites

2013-06-28 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Suryya Kumar Jana Sent: Friday, 28 June, 2013 05:34 I am using a client application program which uses OpenSSL version 1.0.0h. I configured TLSv1.2 and I have set the cipher suite only as TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 (i.e.

Re: Client Hello advertises 2 cipher suites

2013-06-28 Thread Dr. Stephen Henson
On Fri, Jun 28, 2013, Dave Thompson wrote: 1.0.1c and I believe earlier but not tested had several bugs in selecting kECDH and TLSv1.2 ciphers fixed in 1.0.1e. (Also kDH, but those aren't implemented anyway.) Actually fixed DH is implemented now. Steve. -- Dr Stephen N. Henson. OpenSSL