Re: [openssl-users] was the change in when disabled ciphers are skipped intentional?

2018-11-23 Thread Sam Roberts
On Fri, Nov 23, 2018 at 11:41 AM Viktor Dukhovni wrote: > > On Nov 23, 2018, at 2:25 PM, Sam Roberts wrote: > > > > In 1.1.0j, if SSL_CTX_set_cipher_list() is called with "not-a-cipher" > > or "rc4", then SSL_R_NO_CIPHER_MATCH will occur. > > > > In 1.1.1a, set_cipher_list() suceeds, seems to ret

Re: [openssl-users] was the change in when disabled ciphers are skipped intentional?

2018-11-23 Thread Viktor Dukhovni
> On Nov 23, 2018, at 2:25 PM, Sam Roberts wrote: > > In 1.1.0j, if SSL_CTX_set_cipher_list() is called with "not-a-cipher" > or "rc4", then SSL_R_NO_CIPHER_MATCH will occur. > > In 1.1.1a, set_cipher_list() suceeds, seems to return the complete > cipher list (should it do this?) but later ss

[openssl-users] 1.1.1a test/rsa_complex link failure on Solaris

2018-11-23 Thread Norm Green
I'm seeing the following link failure on Solaris, both SPARC and x86_64 with 1.1.1a.  1.1.1 does not have this problem.  Adding -lcrypto to the link line makes the problem go away. Any suggestions on how to proceed? Norm Green rm -f test/rsa_complex ${LDCMD:-/opt/studio12.5/bin/cc} -m64 -xs

[openssl-users] was the change in when disabled ciphers are skipped intentional?

2018-11-23 Thread Sam Roberts
In 1.1.0j, if SSL_CTX_set_cipher_list() is called with "not-a-cipher" or "rc4", then SSL_R_NO_CIPHER_MATCH will occur. In 1.1.1a, set_cipher_list() suceeds, seems to return the complete cipher list (should it do this?) but later ssl_cipher_list_to_bytes() will find that ssl_cipher_disabled() is tr

Re: [openssl-users] openssl 1.1.1 opaque structures

2018-11-23 Thread Richard Levitte
In message on Fri, 23 Nov 2018 10:33:48 +, openssl-users-requ...@openssl.org said: > Hi, > > In this snippet, > >DH *dh; > if ((dh->g = BN_new()) == NULL)-> 1 > goto end; > if (!BN_set_word(dh->g, g)) -

Re: [openssl-users] openssl 1.1.1 opaque structures

2018-11-23 Thread Matt Caswell
On 23/11/2018 10:33, priya p wrote: > Hi,        >    > In this snippet,  > >        DH *dh; >               if ((dh->g = BN_new()) == NULL)-> 1 >                      goto end; >              if (!BN_set_word(dh->g, g)) ---> 2 >                       goto end; >

Re: [openssl-users] openssl 1.1.1 opaque structures

2018-11-23 Thread priya p
Hi, In this snippet, DH *dh; if ((dh->g = BN_new()) == NULL)-> 1 goto end; if (!BN_set_word(dh->g, g)) ---> 2 goto end; Here as we can't reference dh structure members directly, how can