OK, figured this one out.
I had added my ciphers in the wrong order in cipher list in s3_lib.c - they
need to be added in order of id (i will read the code comments next time :) )
Regards,
Lindani
From: Lindani Phiri
To: "openssl-users@openss
I would like to experiment with the PSK cipher suites defined in RFC 5487
(http://tools.ietf.org/html/rfc5487) and I am struggling to add support for
these in Openssl. I am only interested in the variants compatible with TLS 1.1 :
CipherSuite TLS_PSK_WITH_AES_128_CBC_SHA256 = {0x00,0xA
I found the issue with my code was that I was calling the function :
SSL_CTX_set_psk_client_callback() after I had already created my SSL object
from the context.
I used SSL_set_psk_client_callback() on my SSL object instead and that fixed
it.
Lindani
--- On Sat, 7/3/10, Lindani Phiri
I am unable to set the cipher "PSK-AES128-CBC-SHA" for my DTLS client code,
even though its displayed when I run openssl ciphers command. I can also set
this cipher
without any problem when I run "openssl s_client" test tool.
I get the following error during handshake :
error:140F80B5:SSL routin