Re: ALL vs DEFAULT or how to properly order anonymous ciphers?

2007-02-20 Thread Victor Duchovni
On Tue, Feb 20, 2007 at 05:08:07PM +0100, Bodo Moeller wrote: > On Mon, Feb 19, 2007 at 03:22:44PM -0500, Victor Duchovni wrote: > > > As far as the 0.9.9 patch is concerned, is it possible to cache the > > initial sorted order? Some applications process cipherlists for every > > connection (dest

Re: ALL vs DEFAULT or how to properly order anonymous ciphers?

2007-02-20 Thread Bodo Moeller
On Mon, Feb 19, 2007 at 03:22:44PM -0500, Victor Duchovni wrote: > As far as the 0.9.9 patch is concerned, is it possible to cache the > initial sorted order? Some applications process cipherlists for every > connection (destination dependent cipher lists), and it would be nice to > keep this effi

Re: ALL vs DEFAULT or how to properly order anonymous ciphers?

2007-02-20 Thread Bodo Moeller
On Mon, Feb 19, 2007 at 02:19:27PM -0500, Victor Duchovni wrote: > Regardless of the specific details, using a comparator makes the order > more systematic. One can still quible over whether anonymous auth beats > RSA auth, and I may not get my wish there, but I still think a sort based > based on

Re: ALL vs DEFAULT or how to properly order anonymous ciphers?

2007-02-20 Thread Bodo Moeller
On Mon, Feb 19, 2007 at 02:19:27PM -0500, Victor Duchovni wrote: > [...] I > think it is cleaner to put the anonymous kEECDH and kEDH ciphers first, > they use the strongest key-exchange mechanisms available, and best meed > the aut

EAP-FAST support

2007-02-20 Thread Bhat, Jayalakshmi Manjunath
Hi All, I was looking for EAP-FAST support in openssl library. In the mail list I found a patch. Patch was distributed for openssl-0.9.8. And I also found some mails stating EAP-FAST support will be added in openssl-0.9.9.I have 3 queries now. I. If EAP-FAST support will be added in openssl-0.9.9

Shared memory supported in open-ssl?

2007-02-20 Thread Babu.N
Hi, Could someone let me know whether open-ssl supports MM library( a shared memory allocator: http://www.ossp.org/man/man.cgi/pkg/lib/mm/mm.pod). I have one process managing certificate configuration & rest of the processes require read access to these configured certificates. For this reason