Re: [openssl-users] TLS 1.3 PSK test server setup

2018-02-15 Thread Hubert Kario
On Thursday, 15 February 2018 16:47:33 CET Matt Caswell wrote: > On 15/02/18 15:33, Viktor Dukhovni wrote: > >> On Feb 15, 2018, at 9:57 AM, Matt Caswell wrote: > >> > >> As pointed out by Hubert in #5378 this is in accordance with the > >> > >> recommendations in the spec: > >> "Implementor's

Re: [openssl-users] TLS 1.3 PSK test server setup

2018-02-15 Thread Matt Caswell
On 15/02/18 16:38, Viktor Dukhovni wrote: > > >> On Feb 15, 2018, at 10:47 AM, Matt Caswell wrote: >> >> TLSv1.3 PSKs are very different to TLSv1.2 PSKs. In TLSv1.3 they are >> effectively the same thing as a session (they are indistinguishable on >> the wire) - and are handled internally by t

Re: [openssl-users] TLS 1.3 PSK test server setup

2018-02-15 Thread Viktor Dukhovni
> On Feb 15, 2018, at 10:47 AM, Matt Caswell wrote: > > TLSv1.3 PSKs are very different to TLSv1.2 PSKs. In TLSv1.3 they are > effectively the same thing as a session (they are indistinguishable on > the wire) - and are handled internally by the same logic. As with any > session the server may

Re: [openssl-users] TLS 1.3 PSK test server setup

2018-02-15 Thread Matt Caswell
On 15/02/18 15:33, Viktor Dukhovni wrote: > > >> On Feb 15, 2018, at 9:57 AM, Matt Caswell wrote: >> >> As pointed out by Hubert in #5378 this is in accordance with the >> recommendations in the spec: >> >> "Implementor's note: the most straightforward way to implement the >> PSK/cipher su

Re: [openssl-users] TLS 1.3 PSK test server setup

2018-02-15 Thread Matt Caswell
On 14/02/18 23:33, Viktor Dukhovni wrote: > > >> On Feb 14, 2018, at 6:14 PM, Matt Caswell wrote: >> >> For a PSK to be used in needs to be the correct length for the selected >> ciphersuite. The ciphersuite is selected *first*. Next the available >> PSKs are checked to see if they are usable

Re: [openssl-users] TLS 1.3 PSK test server setup

2018-02-14 Thread Matt Caswell
On 14/02/18 19:39, Hubert Kario wrote: > How to start current master branch OpenSSL so that it will support static PSK > key exchange in TLS1.3? > > with client running as: > openssl s_client -psk > > > I've tried: > openssl s_s

[openssl-users] TLS 1.3 PSK test server setup

2018-02-14 Thread Hubert Kario
How to start current master branch OpenSSL so that it will support static PSK key exchange in TLS1.3? with client running as: openssl s_client -psk I've tried: openssl s_server -psk aaa