FIPS with Openssl 3.1

2024-07-08 Thread Stiju
let me know if I am wrong. -- Stiju Easo The unexamined life is not worth living for man. Socrates, in Plato, Dialogues, Apology Greek philosopher in Athens (469 BC - 399 BC)

Re: [openssl-users] May I ask you about the master-key in openssl s_client command result?

2018-09-26 Thread Stiju Easo
6.3 > https://tools.ietf.org/html/rfc5246#section-7.4.9 > https://tools.ietf.org/html/rfc5246#appendix-F.1.1 > https://tools.ietf.org/html/rfc5246#appendix-F.1.4 > https://tools.ietf.org/html/rfc5246#appendix-F.2 > > -- > Viktor. > > -- > openssl-users mail

Re: [openssl-users] Doubt regarding ExtendedMasterSecret

2017-05-07 Thread Stiju Easo
On Tue, May 2, 2017 at 2:10 PM, Matt Caswell wrote: > > > On 30/04/17 19:51, Stiju Easo wrote: > > Hi , > > > >I got the answer to this, and now the question looks bit stupid. > >Generation of master key is different in case of "Extended Master &

Re: [openssl-users] Doubt regarding ExtendedMasterSecret

2017-04-30 Thread Stiju Easo
ool, i assume it holds both client and server handshakes, am i right? if i am right , in openssl , i just need to populate s3->handshake_buffer and set flags to s->session->flags & SSL_SESS_FLAG_EXTMS. only unknown thing i have is s3->handshake_buffer , what value to copy th

[openssl-users] Doubt regarding ExtendedMasterSecret

2017-04-28 Thread Stiju Easo
1.0, if I don't intend to use value appearing in ExtendedMasterSecret? I just want to ignore wat ever appearing in the header as of now. for this will 1.0.2 will do, given I resolve item (1) -- Stiju Easo The unexamined life is not worth living for man. Socrates, in Plato

Re: [openssl-users] ssl_method_st not defined

2017-04-11 Thread Stiju Easo
initialize the SSL , and set parameters as same as client and server (depending on direction ) and call OpenSSL to decrypt the data. >>before openSSL 1.1.0 as all member variables could be set, it was easy task, >> now i do face issues with ssl_session and ssl_session->s3

[openssl-users] ssl_method_st not defined

2017-04-10 Thread Stiju Easo
ariables? only code reference I saw is ssl/.statem/statem_srvr.c, where it uses ssl_locl.h directly. My question is 1) is operations like setting Client version , cipher, so ,session, allowed with 1.1? 2)so,does API exist for it? -- Stiju Easo The unexamined lif