Re: FIPS Mode

2012-07-08 Thread jb-openssl
Use the 3rd option suggested by McAfee, it is better than their first two options. The 3rd option is to "configure the ciphersuite used by the server to not include any Diffie-Hellman key exchanges" until your choice of distribution includes OpenSSL 1.0.1 with the new FIPS module. On 08-07-2

Compression in SSL

2012-07-08 Thread Sebastian Raymond
Hello, There are two types of compression possible . 1. Stateful 2. Stateless Where it is decided in Openssl source code that compression will be stateful or stateless? The openssl source code is very confusing. I could find all the function. Most of them are in c_zlib.c But I could not find the