Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-17 Thread Johannes Bauer
On 15.05.2013 23:05, Dr. Stephen Henson wrote: On Wed, May 15, 2013, Johannes Bauer wrote: Does this mean that communication with TLS1.2 with curves other than the SEC-curves has actually never worked with OpenSSL (because it couldn't have worked as this would require the explicit curve

Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-17 Thread Dr. Stephen Henson
On Thu, May 16, 2013, Johannes Bauer wrote: On 15.05.2013 23:05, Dr. Stephen Henson wrote: On Wed, May 15, 2013, Johannes Bauer wrote: Does this mean that communication with TLS1.2 with curves other than the SEC-curves has actually never worked with OpenSSL (because it couldn't have

TLS v1.2 problems with connection establishment No shared ciper

2013-05-15 Thread Johannes Bauer
Hi list, I'm having trouble getting a TLS 1.2 with EC F_p certificates to run. This is my setup: Server: openssl 1.0.1e compiled from source, Debian squeeze Client: openssl 1.0.1c from Gentoo tree On the Server, i get $ openssl ciphers -v ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA

RE: TLS v1.2 problems with connection establishment No shared ciper

2013-05-15 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Johannes Bauer Sent: Wednesday, 15 May, 2013 11:49 I'm having trouble getting a TLS 1.2 with EC F_p certificates to run. This is my setup: Server: openssl 1.0.1e compiled from source, Debian squeeze Client: openssl 1.0.1c from Gentoo tree

Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-15 Thread Johannes Bauer
On 15.05.2013 17:48, Johannes Bauer wrote: Server: openssl 1.0.1e compiled from source, Debian squeeze Client: openssl 1.0.1c from Gentoo tree Additional info: Just upgraded the Client to 1.0.1e (Gentoo) and have the same issue. Something is *seriously* wrong here. That's what the server says

Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-15 Thread Johannes Bauer
On 15.05.2013 20:52, Dave Thompson wrote: I can't easily test at the moment (even assuming your client is OpenSSL), but I speculate that in SSL3 mode the client doesn't send (Client)Hello extensions for SupportedCurves and SupportedPointFormats, Correct. and in TLS mode(s?) it does.

Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-15 Thread Johannes Bauer
On 15.05.2013 21:17, Johannes Bauer wrote: Only sect/secp are included curiously although my openssl client does internally also know, for example, about the wap-wsg and X9.62 curves. But those are not included in the Client Hello request. And there's definitely no unnamed generic type

Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-15 Thread Dr. Stephen Henson
On Wed, May 15, 2013, Johannes Bauer wrote: Does this mean that communication with TLS1.2 with curves other than the SEC-curves has actually never worked with OpenSSL (because it couldn't have worked as this would require the explicit curve type why doesn't appear to be implemented as of

Re: problems with connection

2001-08-28 Thread Greg Stark
] - Original Message - From: ganesh kumar godavari [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, August 27, 2001 8:21 PM Subject: problems with connection hai everyone, i donot know why my previous message has been ignored. i think i have not provided sufficient

problems with connection

2001-08-27 Thread ganesh kumar godavari
hai everyone, i donot know why my previous message has been ignored. i think i have not provided sufficient information. so i am providing some more additional information. i have created the certificates(using openssl) and signed them myself.i used ssldump to verify my ssl handshake