TLS 1.1 AES-CBC explicit IV

2020-11-04 Thread Frederic Bricout
Hi, I'm searching information about the way you implement tls v1.1 for cbc mode I've read the rfc4346 It mention that it use explicit IV I've read the openssl code in openssl 1.0.1. And I don't know how it was implemented. I think at the beginning of the message you add (mask || R) but after I d

RE: openssl ocsp(responder) cmd is giving error for ipv6

2020-11-04 Thread Michael Wojcik
> From: perumal v > Sent: Wednesday, 4 November, 2020 02:13 > change is highlighted below and basically keeping [] brackets for ipv6 : > > OCSP_parse_url > p = host; >if (host[0] == '[') { >/* ipv6 literal */ > //host++; >p = strchr(host, ']'); >if (!p) >

Re: PRNG not available when multiple providers are configured?

2020-11-04 Thread Matt Caswell
Ah! I had completely forgotten about this option. Matt On 03/11/2020 21:34, Dr Paul Dale wrote: > Adding: > |    config_diagnostics = 1| > At the same level as the openssl_conf line should produce more output. > > Pauli > --  > Dr Paul Dale | Distinguished Architect | Cryptographic Foundations 

Re: openssl ocsp(responder) cmd is giving error for ipv6

2020-11-04 Thread perumal v
HI, it started working after modification in OCSP_parse_url change is *highlighted* below and basically keeping [] brackets for ipv6 : OCSP_parse_url p = host; if (host[0] == '[') { /* ipv6 literal */ *//host++; * p = strchr(host, ']'); if (!

Re: PRNG not available when multiple providers are configured?

2020-11-04 Thread Matt Caswell
On 03/11/2020 18:03, Tomas Mraz wrote: > On Tue, 2020-11-03 at 15:13 +, Matt Caswell wrote: >> >> The reasons are a little complicated (see below) but the TL;DR >> summary >> is that there is an error in your config file. The ".include" line >> should specify a config file relative to OPENSS