Re: [openssl-users] Missing ciphers

This makes total sense, thanks! Ultimately I want to enable as many ciphers as possible as this machine is being used to test a new TLS forensic tool, so the server security isn't an issue to consider in configuration. ST > On Nov 4, 2015, at 4:01 PM, Viktor Dukhovni > wrote: > >> On Wed, N

Re: [openssl-users] Missing ciphers

On Thu, Nov 05, 2015 at 12:06:53AM +, Matt Caswell wrote: > > Only ciphers found in the "DEFAULT" cipherlist that are compatible > > with your server certificate algorithm will be enabled in your > > server. > > Note that in this case an explicit cipher string of TLSv1.2 has been > set. This

Re: [openssl-users] Missing ciphers

On 05/11/15 00:01, Viktor Dukhovni wrote: > On Wed, Nov 04, 2015 at 03:53:27PM -0800, Steve Topletz wrote: > >> I find that I'm missing many ciphers when I interrogate my openssl service. >> >> Running v1.0.2d 'openssl s_server -cert my.cer -key my.key -accept 443 >> -cipher TLSv1.2' offers only

Re: [openssl-users] Missing ciphers

On 04/11/15 23:53, Steve Topletz wrote: > I find that I'm missing many ciphers when I interrogate my openssl service. > > Running v1.0.2d 'openssl s_server -cert my.cer -key my.key -accept 443 > -cipher TLSv1.2' offers only about 1/3 of the ciphers listed in 'openssl > ciphers -V TLSv1.2'. >

Re: [openssl-users] Missing ciphers

On Wed, Nov 04, 2015 at 03:53:27PM -0800, Steve Topletz wrote: > I find that I'm missing many ciphers when I interrogate my openssl service. > > Running v1.0.2d 'openssl s_server -cert my.cer -key my.key -accept 443 > -cipher TLSv1.2' offers only about 1/3 of the ciphers listed in 'openssl > ciph

[openssl-users] Missing ciphers

I find that I'm missing many ciphers when I interrogate my openssl service. Running v1.0.2d 'openssl s_server -cert my.cer -key my.key -accept 443 -cipher TLSv1.2' offers only about 1/3 of the ciphers listed in 'openssl ciphers -V TLSv1.2'. How do I get the rest of these ciphers enabled? ST

Re: [openssl-users] How do I configure my Certification Authority to pay attention to Subject Alternate Names

On Wed, Nov 04, 2015 at 04:06:57PM +0100, Ben Humpert wrote: > That guide is a little bit old and not very accurate. I setup my PKI > using the OpenSSL Cookbook recommended to me by Rich Salz. This free > guide / documentation is here: > https://www.feistyduck.com/books/openssl-cookbook/ (Click "Fr

Re: [openssl-users] DH-RSA and DH-DSS certificate creation

Thanks Matt ! On Tue, Nov 3, 2015 at 4:29 PM, Matt Caswell wrote: > > > On 03/11/15 23:33, Jayadev Kumar wrote: > > Hi, > > > > Can i create DH-RSA and DH-DSS certificate using openssl ? > > Yes. > > > > > If yes, Which openssl version has the support for it ? > > 1.0.2 > > > > > Can i use DH-R

Re: [openssl-users] How do I configure my Certification Authority to pay attention to Subject Alternate Names

On 04.11.2015 16:13, Ben Humpert wrote: Oh crappy Gmail stop creating broken links ... openssl.cnf is at https://drive.google.com/file/d/0B8gf20AKtya0VEhGYm82YUhraDQ/view?usp=sharing reqs/client_sample.cnf is at https://drive.google.com/file/d/0B8gf20AKtya0QWNIbjY0WUtLVEk/view?usp=sharing re

Re: [openssl-users] How do I configure my Certification Authority to pay attention to Subject Alternate Names

Oh crappy Gmail stop creating broken links ... openssl.cnf is at https://drive.google.com/file/d/0B8gf20AKtya0VEhGYm82YUhraDQ/view?usp=sharing reqs/client_sample.cnf is at https://drive.google.com/file/d/0B8gf20AKtya0QWNIbjY0WUtLVEk/view?usp=sharing reqs/server_sample.cnf is at https://drive.g

Re: [openssl-users] How do I configure my Certification Authority to pay attention to Subject Alternate Names

That guide is a little bit old and not very accurate. I setup my PKI using the OpenSSL Cookbook recommended to me by Rich Salz. This free guide / documentation is here: https://www.feistyduck.com/books/openssl-cookbook/ (Click "Free: Read Now" below the cover image). I also used various other sourc