Re: [openssl-users] Supported cipher suites

2017-11-15 Thread Viktor Dukhovni
> On Nov 16, 2017, at 1:51 AM, Grace Priscilla Jero > wrote: > > How to check the default ciphers? We are not setting any ciphers in our code. What specifically are you looking for? The cipherlist sent to the server depends in part on which protocols are enabled in the client, and as of Open

Re: [openssl-users] Supported cipher suites

2017-11-15 Thread Grace Priscilla Jero
Hi, How to check the default ciphers? We are not setting any ciphers in our code. Below is the configuration output. CC=gcc CFLAG =-Wall -O3 -pthread -m64 -DL_ENDIAN -udp -Wa,--noexecstack SHARED_CFLAG =-fPIC -DOPENSSL_USE_NODELETE DEFINES =DSO_DLFCN HAVE_DLFCN_H NDEBUG

Re: [openssl-users] Supported cipher suites

2017-11-15 Thread Grace Priscilla Jero
Thankyou Matt. Some of them that we tried does not work. Is there any additional criteria for it to work. I read about some PSK ciphers which I am not sure depends on something else. Thanks, Grace On Wed, Nov 15, 2017 at 3:03 PM, Matt Caswell wrote: > > > On 15/11/17 06:08, Grace Priscilla Jero

Re: [openssl-users] How to parse DER encoded x509 attributes?

2017-11-15 Thread Dave Coombs
Hello, You can do something like the following. First make a type corresponding to a stack of x509 attributes: typedef STACK_OF(X509_ATTRIBUTE) SEQ_X509_ATTRIBUTE; DECLARE_ASN1_FUNCTIONS(SEQ_X509_ATTRIBUTE); Then make an asn1 template that specifies how the stack should be encod

[openssl-users] How to parse DER encoded x509 attributes?

2017-11-15 Thread Libor Chocholaty
Hello, I would like to parse DER encoded x509 attributes and have no clue how to use d2i_ASN1_SET_OF_X509_ATTRIBUTE. There are params that cannot find what to pass like free_func. I am trying to uderstand by collecting pieces of known code, looking into openssl sources but... PKCS7_SIGNER_INF

Re: [openssl-users] Supported cipher suites

2017-11-15 Thread Matt Caswell
On 15/11/17 06:08, Grace Priscilla Jero wrote: > Hi All, > Do we have the exact list of cipher suites supported by default in > openssl for each of the below in 1.1.0g version of openSSL. > > TLS 1.0 > TLS 1.1 > TLS 1.2 > DTLS 1.0 > DTLS 1.2 You can use the command line "ciphers" command for th

[openssl-users] Loading RSA private key from ENGINE

2017-11-15 Thread hokusai
I am currently exporing the ENGINE capabilities. The examples are quite clear about how to link OpenSSL with methods that are available in a hardware module: - implement RSA_METHOD in MyEngine, e.g. rsaSign() wich calls rsaSign_HW() - ENGINE_register_RSA(MyEngine) --> OpenSSL will then automaticall