s_server/s_client on checking middlebox compatibility

2019-02-25 Thread John Jiang
Is it possible to check if peer implements middlebox compatibility by s_server/s_client? It looks the test tools don't care this point. For example, if a server doesn't send change_cipher_spec after HelloRetryRequest, s_client still feels fine.That's not bad. But can I setup these tools to check

Re: [openssl-project] OpenSSL 3.0 and FIPS Update

2019-02-25 Thread Richard Levitte
On Sat, 23 Feb 2019 21:47:00 +0100, Dmitry Belyavsky wrote: > > > Dear Richard,  > > On Sat, Feb 23, 2019 at 8:47 AM Richard Levitte wrote: > > Since our RAND API is separate from the EVP API, I'm unsure how we > plan on getting custom RAND_methods from providers. > > Please

Re: [openssl-project] OpenSSL 3.0 and FIPS Update

2019-02-25 Thread Richard Levitte
On Mon, 25 Feb 2019 00:40:51 +0100, Michael Richardson wrote: > I think that the #define/enum of NIDs should be made internal-only, > available as optimization to internal code only. Having asked around a bit on this, that was the original intention... However, in an old era of having everything

Re: Missing accessor for the EVP_PKEY.engine

2019-02-25 Thread Dmitry Belyavsky
On Mon, Feb 25, 2019 at 5:23 PM Matt Caswell wrote: > > > On 25/02/2019 13:28, Dmitry Belyavsky wrote: > > Hello, > > > > We've started porting our 1.0.2 application to 1.1.1. > > What is a way to get an engine reference? I did not find a function like > > EVP_PKEY_get1_engine > > Seems to be a

Re: OpenSSL hash memory leak

2019-02-25 Thread Jakob Bohm via openssl-users
On 25/02/2019 15:05, Hubert Kario wrote: On Sunday, 24 February 2019 11:34:18 CET prithiraj das wrote: If it helps, sometimes I do get the following errors for the same and subsequent reboot: Alignment trap: sh (601) PC=0xb6e008f8 Instr=0x4589c0d7 Address=0x00d7 FSR 0x801 Alignment trap:

Re: Missing accessor for the EVP_PKEY.engine

2019-02-25 Thread Matt Caswell
On 25/02/2019 13:28, Dmitry Belyavsky wrote: > Hello, > > We've started porting our 1.0.2 application to 1.1.1.  > What is a way to get an engine reference? I did not find a function like > EVP_PKEY_get1_engine Seems to be a missing accessor. Matt

Re: OpenSSL hash memory leak

2019-02-25 Thread Hubert Kario
On Sunday, 24 February 2019 11:34:18 CET prithiraj das wrote: > If it helps, sometimes I do get the following errors for the same and > subsequent reboot: > > Alignment trap: sh (601) PC=0xb6e008f8 Instr=0x4589c0d7 Address=0x00d7 > FSR 0x801 > Alignment trap: login (584) PC=0xb6e6ab00

Missing accessor for the EVP_PKEY.engine

2019-02-25 Thread Dmitry Belyavsky
Hello, We've started porting our 1.0.2 application to 1.1.1. What is a way to get an engine reference? I did not find a function like EVP_PKEY_get1_engine Thank you! -- SY, Dmitry Belyavsky

TLS v HSTS v T.O.L.A.

2019-02-25 Thread open...@foocrypt.net
Hi The current PJCIS is due to report early April. And just to relieve some the seriousness of the T.O.L.A. impacts whilst scribbling together another 10 pages for a PJCIS, I’ve put together the following subdomain.

Re: [openssl-project] OpenSSL 3.0 and FIPS Update

2019-02-25 Thread Dmitry Belyavsky
Dear Dr Paul, I think this change is somewhere in a gray zone. On Mon, Feb 25, 2019 at 1:37 PM Dr Paul Dale wrote: > I don’t think that that new OIDs or NIDs are considering breaking. > Changing existing ones definitely is, but that’s an entirely different > proposition. > > > Pauli > -- > Dr

Re: [openssl-project] OpenSSL 3.0 and FIPS Update

2019-02-25 Thread Dr Paul Dale
I don’t think that that new OIDs or NIDs are considering breaking. Changing existing ones definitely is, but that’s an entirely different proposition. Pauli -- Dr Paul Dale | Cryptographer | Network Security & Encryption Phone +61 7 3031 7217 Oracle Australia > On 25 Feb 2019, at 5:02 pm,