Re: [openssl-users] sendmail, openssl 1.1.1, tls1.3

2018-11-13 Thread Viktor Dukhovni
> On Nov 13, 2018, at 9:45 PM, Claus Assmann wrote: > > I'm a bit confused why this happens -- the OpenSSL documentation > states: > >SSL_CTX_set_client_CA_list() sets the list of CAs sent to the client >when requesting a client

Re: [openssl-users] sendmail, openssl 1.1.1, tls1.3

2018-11-13 Thread Claus Assmann
On Mon, Oct 15, 2018, Viktor Dukhovni wrote: > With TLS 1.3, you suddenly have clients optionally soliciting certificates > by specific CA from servers [[...]] > With 149 certs, and typical CA names O(80) bytes, we're looking at > ~12KB of cert names, which should fit into an extension that can b

Re: [openssl-users] generating shared key

2018-11-13 Thread Skip Carter
Thanks Viktor, thats exactly what I needed On Mon, 2018-11-12 at 22:49 -0500, Viktor Dukhovni wrote: > > On Nov 12, 2018, at 9:03 PM, Skip Carter wrote: > > > > I know this is simple but I can't seem to find find this little > > detail: > > > > I have Alice's public ECDH key in memory.  And Bo

Re: [openssl-users] Win32 BIO server, no accept

2018-11-13 Thread Karsten Gorkow
Riddle solved: Must call BIO_new_accept("0.0.0.0:") and it works. Von: openssl-users Im Auftrag von Karsten Gorkow Gesendet: Montag, 12. November 2018 18:26 An: openssl-users@openssl.org Betreff: [openssl-users] Win32 BIO server, no accept Hello, I'm pretty new to OpenSSL and need t