Hi,

I'm trying to debug a handshake failure between clients using the system 
openssl just released OpenSUSE 13.2 , and a server. The handshake always fails 
with a somewhat cryptic error message:


error:1200AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown 
group. error:1408D010:SSL routines:SSL3_GET_KEY_EXCHANGE:EC lib


My main question is whether that points to a bug in the _client_, or the 
_server_. I'm trying to get in contact with the admins of the server, but so 
far don't know what openssl they are using. So I've concentrated on the 
client...

The client openssl version is a patched version of 1.0.1i. By taking openSUSE's 
build configuration and stripping down the configure flags & patches bit by 
bit, I could reproduce it though also with a custom openssl 1.0.1j and the 
following configure arguments:

./config threads shared no-rc5 no-idea no-ssl2 no-ec2m

The no-ec2m is at least part of the problem ... I understand it's disabled in 
openSUSE's build to allow fips (that I've left out from above though to keep 
things simple).

Has anybody any insights into this? Is it expected that above configure line 
leads to problems? What would you do to debug this further?


Regards,

Kai Koehne


--------
Kai Köhne, Senior Software Engineer | The Qt Company

Digia Germany GmbH, Rudower Chaussee 13, D-12489 Berlin
Geschäftsführer: Mika Pälsi, Juha Varelius, Tuula Haataja Sitz der 
Gesellschaft: Berlin, Registergericht: Amtsgericht Charlottenburg, HRB 144331 B

Email: kai.koe...@theqtcompany.com | Mobile: + 49 151 55155601 | Phone: +49 30 
63 92 3255 www.qt.io |Qt Blog: http://blog.qt.digia.com/ | Twitter: @QtbyDigia, 
@Qtproject | Facebook: www.facebook.com/qt

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to