CMS and GCM

2019-05-12 Thread Dr. Pala
Hi All, I am having issues using AES GCM in EnvelopedData - in particular if I use AES CBC, that is ok, but when I try to use the GCM mode, I simply cannot finalize the data. Are there any specific operations that need to happen in order to use AES in GCM mode (as per RFC5084) ? Is there a

s_client + PSK + pha

2019-05-12 Thread Dmitry Belyavsky
Hello I see strange behavior of openssl s_client in case of post-handshake authorization with PSK command lines: apps/openssl s_client -connect localhost:4433 -tls1_3 -4 -ciphersuites TLS_AES_128_GCM_SHA256 -psk $PSK -enable_pha -cert cert.pem -key key.pem -trace apps/openssl s_server -accept 44

RE: OpenSSL 1.1.1b tests fail on Solaris - solution

2019-05-12 Thread John Unsworth
As I have said at least 4 times previously I am building no-shared. Are you? -Original Message- From: openssl-users On Behalf Of Dennis Clarke Sent: 12 May 2019 11:53 To: openssl-users@openssl.org Subject: Re: OpenSSL 1.1.1b tests fail on Solaris - solution CAUTION: This email originate

Re: OpenSSL 1.1.1b tests fail on Solaris - solution

2019-05-12 Thread Dennis Clarke
On 5/10/19 11:23 AM, John Unsworth wrote: This seems to be caused by the ongoing saga documented I have this working flawlessly on S10 ... what is the issue : jupiter # /usr/local/bin/openssl version OpenSSL 1.1.1b 26 Feb 2019 dc