Re: [openssl-users] generating shared key

2018-11-12 Thread Viktor Dukhovni
> On Nov 12, 2018, at 9:03 PM, Skip Carter wrote: > > I know this is simple but I can't seem to find find this little detail: > > I have Alice's public ECDH key in memory. And Bob's private ECDH key > in memory. How do I combine them to get the shared key? > > Is this step literally the same

[openssl-users] generating shared key

2018-11-12 Thread Skip Carter
I know this is simple but I can't seem to find find this little detail: I have Alice's public ECDH key in memory. And Bob's private ECDH key in memory. How do I combine them to get the shared key? Is this step literally the same as conventional DH ? -- Skip Carter Taygeta Scientific Inc. --

[openssl-users] Win32 BIO server, no accept

2018-11-12 Thread Karsten Gorkow
Hello, I'm pretty new to OpenSSL and need to implement a secure connection. It's a Win32 application that uses a standard socket implementation up to now and runs for some years already. To implement SSL/TLS I downloaded 1.1 and compiled the DLLs for VS2015. The tests are all "green". Now I sta

[openssl-users] OpenSSL Security Advisory

2018-11-12 Thread Matt Caswell
this version should upgrade to OpenSSL 1.1.1. References == URL for this Security Advisory: https://www.openssl.org/news/secadv/20181112.txt Note: the online version of the advisory may be updated with additional details over time. For details of OpenSSL severity classifications please see

[openssl-users] understanding ASN1_item_verify()

2018-11-12 Thread Michael Richardson
Zero, my goal is to validate Certificate Signing Requests in ruby. First, https://www.openssl.org/docs/man1.1.1/man3/ASN1_item_verify.html and https://www.openssl.org/docs/man1.1.0/man3/ASN1_item_verify.html .. do not seem to exist, but at least https://www.openssl.org/docs/man1.1.1/man3

Re: [openssl-users] Server-side visibility of signature algorithm and key exchange properties?

2018-11-12 Thread Matt Caswell
On 09/11/2018 19:42, Viktor Dukhovni wrote: > On Fri, Nov 09, 2018 at 06:42:28PM +, Matt Caswell wrote: > >>> I am having a bit of trouble finding the equivalent information for >>> the 3rd line on the server side. Anyone know how, in TLS 1.3 where >>> these are not implied by the ciphersu