[openssl-users] Signing a CSR with x509 that is in DER format gives PEM read error

2016-06-19 Thread Paul Hawkins
Real new to openssl as my product has just added a feature to upload certs for https access which I need to test. I have been using the tools to create the different types of certs that I want to test our feature with and have had good success after a few mis-steps. One of the invalid tests

Re: [openssl-users] How to choose ECDH and ECDHE with curve more than 192

2016-06-19 Thread Rakesh T
Got this solved, while updating. as the latest openssl version has a minimum curve value of P-256. Thanks & Regards Raakesh. T From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Rakesh T Sent: 17 June 2016 10:32 To: openssl-users@openssl.org Cc: w...@opens

Re: [openssl-users] Fwd: issue with dtls failure during openssl upgrade from 1.0.1m to q

2016-06-19 Thread Jeffrey Walton
On Sun, Jun 19, 2016 at 10:10 AM, Blumenthal, Uri - 0553 - MITLL wrote: > I'm also speaking out of turn, but having both ends trying to be both server > and client *on the same connection* just does not make sense, TLS or DTLS. > Yeah, I was having trouble envisioning the use case. But I did not

Re: [openssl-users] Fwd: issue with dtls failure during openssl upgrade from 1.0.1m to q

2016-06-19 Thread Blumenthal, Uri - 0553 - MITLL
I'm also speaking out of turn, but having both ends trying to be both server and client *on the same connection* just does not make sense, TLS or DTLS. Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network.   Original Message   From: Jeffrey Walton Sent: Sunday, June 19, 20

Re: [openssl-users] Fwd: issue with dtls failure during openssl upgrade from 1.0.1m to q

2016-06-19 Thread Matt Caswell
On 19/06/16 14:47, Test ssl wrote: > Hi Matt, > > This is a DTLSv1.0 connection, so the hosts on both sides will connect > to each other acting as both TLS client and TLS server. That makes no sense at all - it isn't the way DTLS works. DTLS has a single client role and a single server role in

Re: [openssl-users] Fwd: issue with dtls failure during openssl upgrade from 1.0.1m to q

2016-06-19 Thread Jeffrey Walton
On Sun, Jun 19, 2016 at 9:47 AM, Test ssl wrote: > Hi Matt, > > This is a DTLSv1.0 connection, so the hosts on both sides will connect to > each other acting as both TLS client and TLS server. > > We think the dtls failure is due to cipher suites. But we are not able to > understand why it works f

Re: [openssl-users] Fwd: issue with dtls failure during openssl upgrade from 1.0.1m to q

2016-06-19 Thread Test ssl
Hi Matt, This is a DTLSv1.0 connection, so the hosts on both sides will connect to each other acting as both TLS client and TLS server. We think the dtls failure is due to cipher suites. But we are not able to understand why it works for 1.0.1m with same certificate. Please help us. Regards, O