Re: Know Extended Key Usage

2014-10-07 Thread Lewis Rosenthal
Hi, Akash... On 10/08/2014 01:40 AM, Akash Jain wrote: HI, How can I know the "Extended Key Usage" parameters of a remote SSL enabled site using OpenSSL ? Does this help: https://www.madboa.com/geek/openssl/#cert-retrieve You could modify the one script there to something like: #!/bin/sh

Re: We'll be at LinuxConf next week

2014-10-07 Thread Dmitry Belyavsky
Hi Rich! Will the record of the session be available? On Wed, Oct 8, 2014 at 6:35 AM, Salz, Rich wrote: > Most of the OpenSSL development team will be at LinuxConf in Dusseldorf > next week. We’ll have some kind of BoF or public session. But feel free to > also look for me (and probably others)

Know Extended Key Usage

2014-10-07 Thread Akash Jain
HI, How can I know the "Extended Key Usage" parameters of a remote SSL enabled site using OpenSSL ? Thanks, Akash

We'll be at LinuxConf next week

2014-10-07 Thread Salz, Rich
Most of the OpenSSL development team will be at LinuxConf in Dusseldorf next week. We'll have some kind of BoF or public session. But feel free to also look for me (and probably others) directly. We would like to thank the Linux Foundation for their generous financial support that made this his

RE: ChaCha20/Poly1305 in OpenSSL?

2014-10-07 Thread Salz, Rich
> The spec still appears to be moving. I note the date on this is only 6 weeks > old: > https://datatracker.ietf.org/doc/draft-irtf-cfrg-chacha20-poly1305 The spec is done. That was a minor update, as I recall. But it's in last call state right now. My money's on quick adoption as soon as the v

Re: ChaCha20/Poly1305 in OpenSSL?

2014-10-07 Thread Matt Caswell
On 07/10/14 18:07, Jeffrey Walton wrote: >>> But I have not been able to find its trail: >>> >>> $ cd openssl-git >>> $ git pull >>> Already up-to-date. >>> $ grep -R -i chacha * >>> $ grep -R -i poly1305 * >>> $ >>> >>> Where are the new cipher suites located in OpenSSL?

Re: ChaCha20/Poly1305 in OpenSSL?

2014-10-07 Thread Jeffrey Walton
>> But I have not been able to find its trail: >> >> $ cd openssl-git >> $ git pull >> Already up-to-date. >> $ grep -R -i chacha * >> $ grep -R -i poly1305 * >> $ >> >> Where are the new cipher suites located in OpenSSL? > > $ git checkout 1.0.2-aead > > They are there... J

RE: Openssl err 18

2014-10-07 Thread Dave Thompson
verify status 18 (not strictly an openssl error) means that you (usually as a client) received a cert chain (usually from the server) with a root cert that is not in your truststore. Yes, this is a slightly confusing error description for this case. If the root cert used should be trusted,