I have built several platforms of 0.9.8h, including some with asm and a
few with the fips container for FIPS 140-2; all tests pass.

 

I see the EC and ECPARAMS functions and all of those tests
(ecdhtest/ecdsatest) pass as well, but I don't see the ECDHE ciphers.
I'm trying to get a build that is ostensibly "Suite B" ready and that
will interop with Vista desktops using
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384 in particular.  I can build
compliant certificates, but the cipher isn't available.  I understand
the licensing issues with EC (others are pursuing the licensing, I'm
just doing a proof-of-concept). 

 

It has been quite a while since I wrote or built much in C, so I'm sure
the config/Configure is making some choices, but I can't seem to find a
#DEFINE OPENSSL_NO_ECDH in the ssl directory...where I suspect it would
be declared.  

 

Any help appreciated.

 

TIA

Reply via email to