Are there any flag that control client finished hash verification

2020-06-08 Thread Neil Proctor via openssl-users
Hello, Specific to OpenSSL v1.0.2p and TLS1.2 are there any flags or options like, SSL_CERT_FLAG_TLS_STRICT, that set whether or not the client handshake finished hash is verified by the server? Or is this always performed regardless of configuration? During some of our testing, it seems

ECC CDH (KAS)

2019-10-09 Thread Neil Proctor via openssl-users
Hello, I had a question regarding the ECC CDH (KAS) algorithm listed on Page 15 of https://www.openssl.org/docs/fips/SecurityPolicy-2.0.15.pdf Which mode is used for the Key Agreement Scheme? Full Unified Full MVQ Ephemeral Unified One Pass Unified One Pass MVQ One Pass DH Static Unified And