Re: [openssl-users] How to enable Fixed Diffie Hellman key exchange mechanism

2018-01-15 Thread Viktor Dukhovni
> On Jan 15, 2018, at 11:14 PM, Bharathi Prasad > wrote: > > I am not in a position to explain the requirement. This is important and we > need to provide the support. The system supports only DH and EDH. So could > you please help me and give me pointers on how to implement fixed DH > suppor

Re: [openssl-users] How to enable Fixed Diffie Hellman key exchange mechanism

2018-01-15 Thread Bharathi Prasad
I understand your point and also agree with you. I am not in a position to explain the requirement. This is important and we need to provide the support. The system supports only DH and EDH. So could you please help me and give me pointers on how to implement fixed DH support. -- Sent fro

Re: [openssl-users] How to enable Fixed Diffie Hellman key exchange mechanism

2018-01-11 Thread Viktor Dukhovni
> On Jan 12, 2018, at 1:57 AM, Bharathi Prasad > wrote: > > Let me rephrase my question. > > How to support fixed Diffie Hellman key agreement in my application. > > OpenSSL 1.0.2 supports fixed DH. > We are currently referring to TLS 1.2 standard and hence need to extend > support for fixed

Re: [openssl-users] How to enable Fixed Diffie Hellman key exchange mechanism

2018-01-11 Thread Bharathi Prasad
Thank you for the reply. Let me rephrase my question. How to support fixed Diffie Hellman key agreement in my application. OpenSSL 1.0.2 supports fixed DH. We are currently referring to TLS 1.2 standard and hence need to extend support for fixed DH and ephemeral DH. I was able to enable EDH but

Re: [openssl-users] How to enable Fixed Diffie Hellman key exchange mechanism

2018-01-11 Thread Jakob Bohm
On 11/01/2018 10:35, Bharathi Prasad wrote: Hello, I want to use static Diffie Hellman key exchange with RSA authentication (DH_RSA) in my application. I am currently using OpenSSL version 1.0.2n. I understand that from version 1.0.2 openSSL supports fixed DH. Here is what I have tried so far.

Re: [openssl-users] How to enable Fixed Diffie Hellman key exchange mechanism

2018-01-11 Thread Viktor Dukhovni
> On Jan 11, 2018, at 4:35 AM, Bharathi Prasad > wrote: > > I want to use static Diffie Hellman key exchange with RSA authentication > (DH_RSA) in my application. > > I am currently using OpenSSL version 1.0.2n. I understand that from version > 1.0.2 openSSL supports fixed DH. Support for "f

[openssl-users] How to enable Fixed Diffie Hellman key exchange mechanism

2018-01-11 Thread Bharathi Prasad
Hello, I want to use static Diffie Hellman key exchange with RSA authentication (DH_RSA) in my application. I am currently using OpenSSL version 1.0.2n. I understand that from version 1.0.2 openSSL supports fixed DH. Here is what I have tried so far. Trial 1: I created DH server and client cert