> From: owner-openssl-us...@openssl.org On Behalf Of Abhiram Shandilya
> Sent: Thursday, 01 November, 2012 21:31

-dev added

> I configured my openssl RSA CA to add the key usage extension 
> for key agreement to the ECC certificate but even then it 
> does not work. Pre-TLS 1.2 cipher suites such as 
> ECDH-RSA-AES128-SHA work fine but just not the TLS 1.2 cipher 
> suites with AESGCM.

Looks like a bug to me. (1.0.1c) s3_lib.c ciphers C031 and C032 
have kECDHe when it appears they should have kECDHr .


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to