Re: error: dereferencing pointer to incomplete type DH {aka struct dh_st}

2019-06-28 Thread Viktor Dukhovni
On Fri, Jun 28, 2019 at 09:22:48PM +, Mark Richter wrote: > I've tried looking this up on the web, but there is no clear guidance on how > to get around this. The documentation is a good place to start. https://www.openssl.org/docs/man1.1.1/man3/DH_set0_pqg.html If that's not it, look

Re: error: dereferencing pointer to incomplete type DH {aka struct dh_st}

2019-06-28 Thread Salz, Rich via openssl-users
>I'm attempting to build our RHEL 7 based product on RHEL 8 and running > into a lot of changes from openssl 1.0.2k-fips (RHEL 7) to 1.1.1 FIPS (RHEL > 8). I haven't found a good guide to adapting the sources to these changes. Web search for "openssl opaque accessors" turns up many hits; th

error: dereferencing pointer to incomplete type DH {aka struct dh_st}

2019-06-28 Thread Mark Richter
I've tried looking this up on the web, but there is no cleare guidance on how to get around this. I'm attempting to build our RHEL 7 based product on RHEL 8 and running into a lot of changes from openssl 1.0.2k-fips (RHEL 7) to 1.1.1 FIPS (RHEL 8). I haven't found a good guide to adapting the

Re: Does openssl sanity check ALPN strings?

2019-06-28 Thread Hal Murray
w...@omnigroup.com said: > I don't think OpenSSL does any checking on the client side --- whatever bytes > you supply get sent to the server. > On the server side it does some checking before calling the alpn callback but > I don't know that it makes any guarantees of validity. Thanks. Does o