Re: [Openvpn-devel] [PATCH] Enable usage of TLS groups not identified by a NID in OpenSSL 3

2022-03-29 Thread Michael Baentsch
Am 29.03.22 um 12:28 schrieb Gert Doering: Hi, On Tue, Mar 29, 2022 at 07:37:09AM +0200, Michael Baentsch wrote: From: Michael <57787676+baent...@users.noreply.github.com> OpenSSL3 prefers to specify groups (including EC groups) with names instead of NID to allow also groups provided by provid

Re: [Openvpn-devel] [PATCH] Enable usage of TLS groups not identified by a NID in OpenSSL 3

2022-03-29 Thread Gert Doering
Hi, On Tue, Mar 29, 2022 at 07:37:09AM +0200, Michael Baentsch wrote: > From: Michael <57787676+baent...@users.noreply.github.com> > > OpenSSL3 prefers to specify groups (including EC groups) with names > instead of NID to allow also groups provided by providers. > This commit also removes the ma

Re: [Openvpn-devel] [PATCH] Enable usage of TLS groups not identified by a NID in OpenSSL 3

2022-03-29 Thread Arne Schwabe
Am 29.03.22 um 07:37 schrieb Michael Baentsch: From: Michael <57787676+baent...@users.noreply.github.com> OpenSSL3 prefers to specify groups (including EC groups) with names instead of NID to allow also groups provided by providers. This commit also removes the mapping of secp256r1 to prime256v1

[Openvpn-devel] [PATCH] Enable usage of TLS groups not identified by a NID in OpenSSL 3

2022-03-28 Thread Michael Baentsch
From: Michael <57787676+baent...@users.noreply.github.com> OpenSSL3 prefers to specify groups (including EC groups) with names instead of NID to allow also groups provided by providers. This commit also removes the mapping of secp256r1 to prime256v1 for the OpenSSL3 code path as OpenSSL 3.0 recogn