TLSv1 extension interoperability issues?

2010-11-25 Thread Victor Duchovni
I am finding some TLS enabled SMTP servers that don't appear to like the TLSv1 sesion ticket extension. With session tickets enabled: $ openssl s_client -starttls smtp -msg -tlsextdebug -connect 192.0.2.1:25 CONNECTED(0003) >>> TLS 1.0 Handshake [length 00cb], ClientHello

Re: kEECDH handshake failure with invalid ecpointformatlist?

2010-11-25 Thread Victor Duchovni
On Thu, Nov 25, 2010 at 01:37:10PM +0100, Dr. Stephen Henson wrote: > Thanks, I'd missed that one. I've simulated the issue here and committed a > slightly different patch which works for me: > > http://cvs.openssl.org/chngview?cn=20089 > > Let me know of any problem. I wroted and tested a patc

Unable to accept any connection with my secure server application.

2010-11-25 Thread Ofer
Hello, I am writting a client\server application(game) using openssl API for the network. I am ablie to connect with openssl s_client to openssl s_server. I am also able to connect with my own game client to openssl s_server(with the same parameters). However, I am unable to accept any connecti

Re: kEECDH handshake failure with invalid ecpointformatlist?

2010-11-25 Thread Dr. Stephen Henson
On Thu, Nov 25, 2010, Mounir IDRASSI wrote: > Hi, > > This is a known issue for which I have sent a patch (under ticket #2240) on > April 25th 2010. OpenSSL wrongly returns an error if the ServerHello is > missing the Supported Point Format extension whereas it should interpret it > as only unc

Re: kEECDH handshake failure with invalid ecpointformatlist?

2010-11-25 Thread Mounir IDRASSI
On 11/25/2010 6:32 AM, Victor Duchovni wrote: Unless we are mistaken, I really think this should have been integrated into 1.0.0b if not earlier. More important IMHO than backporting removal of dead variables, which just risks code breakage, and should not go into the stable release. I agree. I

Re: kEECDH handshake failure with invalid ecpointformatlist?

2010-11-25 Thread Victor Duchovni
On Thu, Nov 25, 2010 at 12:02:26AM +0100, Mounir IDRASSI wrote: > This is a known issue for which I have sent a patch (under ticket #2240) on > April 25th 2010. OpenSSL wrongly returns an error if the ServerHello is > missing the Supported Point Format extension whereas it should interpret it >