Re: Openssl 3.0 support

2022-02-02 Thread Tomas Mraz
Yeah, you need to add the @SECLEVEL=0 in the cipher string to set the security level to 0. That is needed to allow SHA1 in signatures which is required for these TLS versions. Tomas Mraz On Thu, 2022-02-03 at 17:36 +1100, pa...@openssl.org wrote: >  It does support both.  I think a configuration

Re: OpenSSL 3 FIPS on iOS

2022-02-02 Thread pauli
This does not mean we wouldn't be interested in having better iOS support if someone was willing to contribute. Paul Dale On 3/2/22 5:38 pm, pa...@openssl.org wrote: The FIPS provider will likely not work with iOS as it currently stands. The development team are not up to speed on iOS and n

Re: OpenSSL 3 FIPS on iOS

2022-02-02 Thread pauli
The FIPS provider will likely not work with iOS as it currently stands. The development team are not up to speed on iOS and not much effort was put into supporting it (or Android for the same reason).  We didn't even get remotely close to having code signed. Paul Dale On 27/1/22 4:41 am, K

Re: Openssl 3.0 support

2022-02-02 Thread pauli
It does support both.  I think a configuration time option might be required and neither is supported by the FIPS provider. Paul Dale On 3/2/22 4:32 pm, Srinivas, Saketh (c) wrote: Hi, Does openssl 3.0 still support TLSv 1.0 and TLSv1.1. or they are deprecated, because there were some depre

Openssl 3.0 support

2022-02-02 Thread Srinivas, Saketh (c)
Hi, Does openssl 3.0 still support TLSv 1.0 and TLSv1.1. or they are deprecated, because there were some deprecations like sha1 etc. Thanks, Saketh. Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential