Re: [openssl-users] How can I compile nginx with openssl to support 0-rtt TLS1.3

2018-12-28 Thread carabiankyi
Thanks for your advice.I get early data when I configure nginx ssl_early_data on.But I only get early data for get method.When using post method, the server terminate connection. Is it related with openssl? If so, how can I do to allow post method? Sent from my Samsung Galaxy smartphone.

Re: [openssl-users] Build target architecture

2018-12-28 Thread Dr. Matthias St. Pierre
> After some searching and check, I've realized that openssl is not configured > for different target architectures? > I develop an application for Android using NDK(Native Development Kit). > There is Configurations/15-android.conf inside openssl git repo, but could > not be sure.  > Could some

Re: [openssl-users] How can I compile nginx with openssl to support 0-rtt TLS1.3

2018-12-28 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > > Sent: Friday, December 28, 2018 00:25 > I have an nginx web server compiled with openssl that support TLS 1.3. What version of OpenSSL? Is it 1.1.1? The final version or an early release? Or 1.1.0, a

Re: [openssl-users] Decrypting an OpenSSL encrypt AES256-CBC data

2018-12-28 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Ertan Küçükoglu > Sent: Thursday, December 27, 2018 16:03 > A- I tried to directly decrypt (no padding applied) and I get my plain text > plus > some additional invisible characters at the end. I am told it maybe a

Re: [openssl-users] Authentication over ECDHE

2018-12-28 Thread Viktor Dukhovni
> On Dec 28, 2018, at 6:17 AM, Christian wrote: > > BIO_set_fd with 4|1 #Socket 4, BIO_CLOSE > SSL_set_accept_state > SSL_accept > SSL_accept failed, SSL_get_error: 1 #SSL_ERROR_SSL > 140059505588032:error:1408F119:SSL routines:ssl3_get_record:decryption failed > or ba

Re: [openssl-users] Authentication over ECDHE

2018-12-28 Thread Matt Caswell
On 28/12/2018 10:22, Christian wrote: > Thank you for the suggestions thus far. I've been working on a simple SSL > client/server system in the last couple days. Unfortunately the SSL > documentation is a right mess, so I don't know what is allowed and what is > not, > which leads to some proble

Re: [openssl-users] openssl 1.1.1 manuals

2018-12-28 Thread Salz, Rich via openssl-users
Great idea; https://github.com/openssl/web/issues/101 On 12/28/18, 12:39 AM, "Jakob Bohm via openssl-users" wrote: Consider at least including the one-line manpage summaries on the index pages (the ones displayed by the apropos command on POSIX systems). -- openssl-users mailing lis

[openssl-users] Build target architecture

2018-12-28 Thread Taner
After some searching and check, I've realized that openssl is not configured for different target architectures? I develop an application for Android using NDK(Native Development Kit). There is *Configurations/15-android.conf *inside openssl git repo, but could not be sure. Could someone advise f

Re: [openssl-users] Authentication over ECDHE

2018-12-28 Thread Christian
I should also add that printing the error stack doesn't yield much info other than "you dun goof'd": === First connection, client closes connection as excepted. === BIO_set_fd with 4|1 #Socket 4, BIO_CLOSE SSL_set_accept_state SSL_accept SSL_ac

Re: [openssl-users] Authentication over ECDHE

2018-12-28 Thread Christian
Thank you for the suggestions thus far. I've been working on a simple SSL client/server system in the last couple days. Unfortunately the SSL documentation is a right mess, so I don't know what is allowed and what is not, which leads to some problems that I don't know exactly how to tackle on.