Re: How to debug a TLSv1.3 protocol problem?

2020-05-18 Thread Alexander Gryanko
Hi, You can try to add SSL_CTX_set_keylog_callback to your MTA. With keylog callback, your MTA will start writing log in NSS format for decryption of TLS frames. https://wiki.wireshark.org/TLS#Using_the_.28Pre.29-Master-Secret Or you can enable SSL_trace with disabling OPENSSL_NO_SSL_TRACE build

Re: How to list ssl3 ciphers

2019-07-11 Thread Alexander Gryanko
Hi, Ssl3 is deprecated and disabled by default. Rebuild your OpenSSL with enable-ssl3 enable-ssl3-method options. Sent from my iPhone > On 11 Jul 2019, at 14:00, shiva kumar wrote: > > HI, > In OpenSSL 1.1.1 documentation it is mentioned as -ssl3 option is there as > follows, > openssl ci

Something like SSL_CTX_set_alpn_select_cb for ciphers and ssl/tls protocol version

2019-06-18 Thread Alexander Gryanko
Hello, I'm looking for the way to do something like SSL_CTX_set_alpn_select_cb but for ciphers and ssl/tls protocol version. As I see ssl_choose_server_version and ssl3_choose_cipher has no any callbacks in tls_early_post_process_client_hello. Is there any way to disable protocols for some cases?