Re: Enabled weak cipher suites

2019-06-25 Thread Dr Paul Dale
Yes there is but it will require a reconfigure and a recompile. The big question is: "why?” RC4 and MD5 are both considered broken. Pauli -- Dr Paul Dale | Cryptographer | Network Security & Encryption Phone +61 7 3031 7217 Oracle Australia > On 26 Jun 2019, at 11:41 am, John Jiang wrote:

Enabled weak cipher suites

2019-06-25 Thread John Jiang
Hi, I'm using s_server and s_client from OpenSSL 1.1.1. It looks the weak cipher suites, like SSL_RSA_WITH_RC4_128_MD5, are disabled. Is there any way to re-enable these cipher suites? Thanks!

Building a DER sequence

2019-06-25 Thread Ken Goldman
I have to build a DER byte stream for a sequence containing: algorithm ID issuer validity subject name extensions What is the general approach? Is there openssl support for this? Do I construct a sequence and add items to it - top down? Or do I construc