Re: TLS-1.3 Certificate Authorities implementation and testing

2019-09-02 Thread Viktor Dukhovni
On Mon, Sep 02, 2019 at 06:49:40PM +0200, Alexandre Schaff wrote: > serverside : 'openssl s_server' using certfile which has 2 root-CA+cert > (certA and certB) and keyfile which has both secrets. The s_server application loads just one certificate chain from its certFile, and just one key from

TLS-1.3 Certificate Authorities implementation and testing

2019-09-02 Thread Alexandre Schaff
Hello, Sorry if question has already been asked, I saw https://github.com/openssl/openssl/issues/3029 . Issue#3029 is a mixed discussion on both tls-1.2 extension "trusted CA indication" (rfc6066#section-6) and TLS-1.3 "Certificate Authorities", thus conclusion is unclear. tests done : openssl