Re: [openssl-users] cipher suites

2018-10-26 Thread Viktor Dukhovni
You don't have to call either. Both have sensible defaults. Especially, with TLS 1.3, there is generally little reason to choose non-default ciphers. > On Oct 26, 2018, at 6:12 PM, Skip Carter wrote: > > If my application will support both TLSv1.2 and TLSv1.3 connections to > it (depending who

[openssl-users] cipher suites

2018-10-26 Thread Skip Carter
If my application will support both TLSv1.2 and TLSv1.3 connections to it (depending who is connecting), do I have to call both SSL_CTX_set_ciphersuites() and SSL_CTX_set_cipher_list() when setting up my context? -- Skip Carter Taygeta Scientific Inc. -- openssl-users mailing list To unsubscrib

[openssl-users] Using (not building) openssl with mingw on Windows 10

2018-10-26 Thread Ken Goldman
I've been happily using the Shining Light 32-bit binaries with both openssl 1.0 and 1.1 and mingw. On a new machine, I tried the 64-bit binaries. However, they're missing the openssl/lib/mingw directory where the .a files resided. It looks like the link procedure changed. Any hints before I

Re: [openssl-users] ssl_accept failure

2018-10-26 Thread Skip Carter
On Fri, 2018-10-26 at 10:07 +0100, Matt Caswell wrote: > How did you generate this error string? It looks like you might have > taken the return value (5) from SSL_get_error() and stuffed it into > ERR_error_string() or a similar function. That would give you output > like this - but is the incorr

Re: [openssl-users] Reg issue in alert message

2018-10-26 Thread Matt Caswell
On 25/10/2018 10:12, ramakrushna mishra wrote: > Hi Matt, > > Thank you for the response. > But I wanted to know the handshake behavior when client has support for > "TLSv1.3,TLSv1.2" and server has support for ("TLSv1.2,TLSv1")  or > ("TLSv1.2,SSLv3). > > Both client and server is built with o

Re: [openssl-users] openssl 1.1.1 cross compile error to vxworks 6.8

2018-10-26 Thread Matt Caswell
On 26/10/2018 09:47, lu zhihong wrote: > Hi,All > Now I am trying build openssl1.1.1 version libs in cross compiler > platform(susu12+Vxworks 6.8 ). the build target is vxworks-ppc860.but it > failed. > I have tried use different Vxworks versions(such as Vxworks6.4,Vxworks6.8),it > still faile

Re: [openssl-users] ssl_accept failure

2018-10-26 Thread Matt Caswell
On 24/10/2018 23:34, Skip Carter wrote: > I have a server-side application that fails when some clients connect: > > waiting for SSL accept()... > SSL_accept() (0) failure -1 > SSL_accept() (1) failure 5 How did you obtain the error number 5? Is this the return value from SSL_get_error()? If so

[openssl-users] openssl 1.1.1 cross compile error to vxworks 6.8

2018-10-26 Thread lu zhihong
Hi,All Now I am trying build openssl1.1.1 version libs in cross compiler platform(susu12+Vxworks 6.8 ). the build target is vxworks-ppc860.but it failed. I have tried use different Vxworks versions(such as Vxworks6.4,Vxworks6.8),it still failed. I want to know if build openssl libs using Vxworks