[openssl-users] Kermit Project

2018-12-05 Thread Eric Lindblad
OpenSSL Users,   https://github.com/davidrg/ckwin   Would there be users who would be willing to volunteer to upgrade D.R. Goodwin's ckwin code to the current OpenSSL release?   It would be nice to see K95 enabled for OpenSSH, possibly also for Heimdal instead of Kerberos, and for OpenSSL.   Frank

Re: [openssl-users] Question on necessity of SSL_CTX_set_client_CA_list

2018-12-05 Thread Viktor Dukhovni
> On Dec 5, 2018, at 4:49 AM, Jan Just Keijser wrote: > > The only reason to use OCSP I currently have is in Firefox: if you turn off > "Query OCSP responder servers" in Firefox then EV certificates will no longer > show up with their owner/domain name. IIRC Apple's Safari is ending support for

Re: [openssl-users] version OPENSSL_1_1_1 not defined in file libcrypto.so.1.1 with link time reference

2018-12-05 Thread Sam Roberts
On Wed, Dec 5, 2018 at 5:22 AM Vincent Le Bourlot wrote: > After a fresh build of branch OpenSSL_1_1_1-stable on our ppc64 machine, > openssl seems broken for an unknown reason… > Executing `openssl version` results in: I'm no expert, but try `ldd openssl`, is it dynamically linking against the

[openssl-users] version OPENSSL_1_1_1 not defined in file libcrypto.so.1.1 with link time reference

2018-12-05 Thread Vincent Le Bourlot
Hi After a fresh build of branch OpenSSL_1_1_1-stable on our ppc64 machine, openssl seems broken for an unknown reason… Executing `openssl version` results in: ``` $ openssl version openssl: relocation error: openssl: symbol SCRYPT_PARAMS_it, version OPENSSL_1_1_1 not defined in file libcrypto.so.

Re: [openssl-users] Question on necessity of SSL_CTX_set_client_CA_list

2018-12-05 Thread Jan Just Keijser
Hi, On 03/12/18 21:40, Viktor Dukhovni wrote: On Dec 3, 2018, at 3:35 PM, Charles Mills wrote: OCSP and OCSP stapling are currently higher on my wish list than this. Good luck with OCSP, the documentation could definitely be better, and various projects get it wrong. IIRC curl gets OCSP righ