Mismatch between renegotiation reported vs functional

While trying to disable renegotiation the response from openssl reads "Secure Renegotiation IS supported" even though renegotiation is failing. OpenSSL Config: SSL_set_options(ssl_conn, SSL_OP_NO_RENEGOTIATION); ] $openssl s_client -connect localhost:443 -tls1_2 [SNIP] New, TLSv1.2, Cipher is EC

[openssl CMP with pkcs11 engine]

Hello all, I'm trying to do a CMP request using openssl with a private key inside a pkcs11 device (on linux). So i'm using opsenssl 3.0.0 alpha 13. I did compile fine (./config --prefix=/opt/openssl enable-deprecated --openssldir=/usr/local/ssl -Wl,-rpath=/opt/openssl/lib), but i ran into t

Re: OpenSSL Security Advisory

On Thursday, 25 March 2021 15:03:24 CET, OpenSSL wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 OpenSSL Security Advisory [25 March 2021] = NULL pointer deref in signature_algorithms processing (CVE-2021-3449) =

OpenSSL Security Advisory

penSSL 1.1.0 has not been analysed. Users of these versions should upgrade to OpenSSL 1.1.1. References == URL for this Security Advisory: https://www.openssl.org/news/secadv/20210325.txt Note: the online version of the advisory may be updated with additional details over time. Fo

OpenSSL version 1.1.1k published

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 OpenSSL version 1.1.1k released === OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.1.1k of our open sour

RE: openssl development work / paid

If your problem is the migration from 1.0.2 to 1.1.1, I have attached my porting notes, if that helps. -Tom -Original Message- From: openssl-users On Behalf Of Embedded Devel Sent: Wednesday, March 24, 2021 8:02 PM To: openssl-users@openssl.org Subject: openssl development work / paid