Re: [openssl-users] Appropriate use of SSL_CTX_set_cipher_list()

2018-07-17 Thread Daurnimator
On 18 July 2018 at 08:36, Ryan Beethe wrote: > So that makes me nervous about whether or not I am using > SSL_CTX_set_cipher_list() wrong. Should I be calling it at all? And if > so, where would I find the "right" setting for other operating systems, > since "PROFILE=SYSTEM" appears to be Fedora

[openssl-users] Appropriate use of SSL_CTX_set_cipher_list()

2018-07-17 Thread Ryan Beethe
I am writing a cross-platform C application, which I would like to release for a variety of operating systems (Windows 7+, MacOS HighSierra, Debian 8+, Ubuntu 14.04+, Fedora 27+, Centos 7+, ArchLinux, at least for now). Up to now, I have had a line of code which prepares an SSL_CTX object like som

Re: [openssl-users] TLS handshake certificate validation options

2018-07-17 Thread Thulasi Goriparthi
Hello, You can register a verify callback function using X509_STORE_set_verify_cb() and X509_verify_cert() will call this function, which can be used to by-pass targeted errors like X509_V_ERR_INVALID_PURPOSE etc. Check callb function from apps/x509.c Thanks, Thulasi. On 16 July 2018 at 20:48

Re: [openssl-users] command passwd

2018-07-17 Thread SchmiTTT
Hello Viktor, dont worry. Am not trolling. I take this seriously for my little project. :) Greetz. Val. Am Di, 17. Jul, 2018 um 2:56 A. M. schrieb Viktor Dukhovni : On Mon, Jul 16, 2018 at 09:02:38PM +0200, Carl-Valentin Schmitt wrote: Up to recent time it was that Command passwd involve

Re: [openssl-users] ESNI in 1.1.1?

2018-07-17 Thread Matt Caswell
On 17/07/18 10:00, Angus Robertson - Magenta Systems Ltd wrote: > Is there any way that Encrypted Server Name Indication will make the > 1.1.1 release, or is too late or too experimental? 1.1.1 is frozen for new features, so there is no chance this would be included. In any case this is still

[openssl-users] ESNI in 1.1.1?

2018-07-17 Thread Angus Robertson - Magenta Systems Ltd
Is there any way that Encrypted Server Name Indication will make the 1.1.1 release, or is too late or too experimental? Angus -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users