Re: [openssl-users] 1.0.1 upgrade issue

2015-03-09 Thread Mike Collins
Created a new toolchain with crosstool-ng using glibc 2.13, gcc 4.9.1, binutils 2.22 and headers 2.6.27. Using the new toolchain v1.0.1l seems to now work on my board although I will have to do some more in depth testing. My guess is it was a glibc issue but am not positive. I am limited to glibc

Re: [openssl-users] How to disable all EXPORT Ciphers?

2015-03-09 Thread Viktor Dukhovni
On Mon, Mar 09, 2015 at 02:23:53PM +0530, Deepak wrote: > How to I disable all EXPORT Ciphers from OpenSSL? > > Will the use of string "kEDH:ALL:!ADH:!DES:!LOW:!EXPORT:+SSLv2:@STRENGTH" > with SSL_CTX_set_cipher_list() be good enough to disable EXPORT40, 56 and > 1024? Note that doing so does n

Re: [openssl-users] How to disable all EXPORT Ciphers?

2015-03-09 Thread Salz, Rich
>How to I disable all EXPORT Ciphers from OpenSSL? > Will the use of string "kEDH:ALL:!ADH:!DES:!LOW:!EXPORT:+SSLv2:@STRENGTH" ; openssl ciphers -v kEDH:ALL:!ADH:!DES:!LOW:!EXPORT:+SSLv2:@STRENGTH | grep EXP ; Yes. But really, SSLv2? Really? You have clients that haven't been u

Re: [openssl-users] SSL_ERROR_WANT_READ, SSL_ERROR_WANT_WRITE

2015-03-09 Thread Serj Rakitov
I have to open discussion again. I want to test situations when SSL_read WANT_WRITE and SSL_write WANT_READ. But I can't do this. SSL_read never wants write and SSL_write never wants read! I don't know how to catch these situations. I don't know how to rehandshake. I tried after connect and han

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Waldin
Am 08.03.2015 um 09:14 schrieb Waldin: > Now, I also want to check ciphers enabled in (mobile) mail clients. > I've tried to make OpenSSL listen on port 110 (for POP with TLS) and > redirected the client to the OpenSSL server. But when trying to pull > mail I can't see any handshake information:

Re: [openssl-users] How to make a rehandshake(renegotiation)?

2015-03-09 Thread Serj Rakitov
I can't start rehandshake even from client side. If I try something like this on client side: SSL_renegotiate(...) //process SSL_do_handshake(SSL_ERROR_WANT_READ/SSL_ERROR_WANT_WRITE) nothing happens. Neither client nor server can't start a new handshake! How to do a rehandshake? Best Regards

[openssl-users] How to disable all EXPORT Ciphers?

2015-03-09 Thread Deepak
Hi, How to I disable all EXPORT Ciphers from OpenSSL? Will the use of string "kEDH:ALL:!ADH:!DES:!LOW:!EXPORT:+SSLv2:@STRENGTH" with SSL_CTX_set_cipher_list() be good enough to disable EXPORT40, 56 and 1024? Thank you, Deepak ___ openssl-users mailing

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Christian Georg
Hi Steve, thanks for the feedback. I was trying this again this morning and noticed a mistake I made. Not sure if this is intended behaviour. When combining the -www and -brief option in one call -brief does not create any output to stdout. So when using this: /usr/local/openssl-1.0.2/bin/

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Christian Georg
Hi Ivan, I know the SSL Labs site. Great work you are doing there and I am using it frequently for server checks. For the client side I do however need to get the output on the server as I want to check our production mobile app, so no chance for me to get my hands on the content that was deliv