ACK message usage

2012-03-16 Thread lesswire AG Ungarn
Hello I am using openssl. It is great :)) But I am thinking, maybe a trivial question to you. Do I need use something "to ACK" messages? As I know lower layers treat ACK and if something went wrong I receive error message during the sending yet. Is it true, is not? And in this way

OpenSSL 1.0.1 and FIPS Object Module v1.2

2012-03-16 Thread Alex Chen
I have downloaded the OpenSSL 1.0.1 and FIPS object module v1.2. Both will build a libcrypto.a library. I have some questions and hope someone can clarify them for me. This FIPS thing is totally new so please if forgive me if the questions are off the target. 1. Is the crypto code in FIPS a s

SSL/TLS Testing Specification Suite

2012-03-16 Thread Mr.Rout
Dear Folks, I am looking for "What are the possible TLS/SSL testing suite? " Is there any link/docs which i can follow to get an idea about what are the possible TLS/SSL Testing specification ? Thanks in Advance. Best Regards, S S Rout -- View this message in context: http://old.nabble.com

RE: RC4-SHA

2012-03-16 Thread KUTILEK Martin
Thanks Steve, works fine. -bash-3.2$ ./openssl ciphers -v 'RC4+SHA' ECDHE-RSA-RC4-SHA SSLv3 Kx=ECDH Au=RSA Enc=RC4(128) Mac=SHA1 ECDHE-ECDSA-RC4-SHA SSLv3 Kx=ECDH Au=ECDSA Enc=RC4(128) Mac=SHA1 AECDH-RC4-SHA SSLv3 Kx=ECDH Au=None Enc=RC4(128) Mac=SHA1 ECDH-RSA-R

Re: RC4-SHA

2012-03-16 Thread Dr. Stephen Henson
On Fri, Mar 16, 2012, KUTILEK Martin wrote: > Hi, > > I am doing some testing with openssl 1.0.0d, 1.0.0e and 1.0.1 and I have > the behaviour below that I found strange. > > -bash-3.2$ ./openssl version > OpenSSL 1.0.1 14 Mar 2012 > > -bash-3.2$ ./openssl ciphers -v 'RC4' > ECDHE-RSA-RC4-SHA

RE: RC4-SHA

2012-03-16 Thread KUTILEK Martin
Hi, I am doing some testing with openssl 1.0.0d, 1.0.0e and 1.0.1 and I have the behaviour below that I found strange. -bash-3.2$ ./openssl version OpenSSL 1.0.1 14 Mar 2012 -bash-3.2$ ./openssl ciphers -v 'RC4' ECDHE-RSA-RC4-SHA SSLv3 Kx=ECDH Au=RSA Enc=RC4(128) Mac=SHA1 ECDHE-ECDSA

Re: support of RFC-5280

2012-03-16 Thread Jakob Bohm
On 3/15/2012 7:04 PM, pankaj jain wrote: Hi, I am using openssl-0.9.8 release; I could not find any documentation if it supports RFC-5280. basically I am looking for the answers about following capabilities: 1. While receiving a certificate can I extract the canonical hostname from the subject