Re: Need help in removing secp521r1 from openssl-1.1.1g and adding TLS_GREASE_BA cipher.

The docs are not the easiest to follow so here is what I did to order curves from strongest to weakest.The file is /etc/pki/tls/openssl.conf and should be close to your settings. Set the curves to what you want as I did in the Curve line openssl_conf = default_modules [ default_modules ] ssl_c

Re: Need help in removing secp521r1 from openssl-1.1.1g and adding TLS_GREASE_BA cipher.

On 02/07/2021 14:02, vinod mg wrote: --> Is there a way I can compile openssl itself to exclude 'secp521r1' and install? The reason I ask is because application I am testing is squid(squid-cache.org ) for ssl bumping purposes and it has limited configurability. Only

Re: Need help in removing secp521r1 from openssl-1.1.1g and adding TLS_GREASE_BA cipher.

Hi Matt, Thanks for response. > 1) Supress or a way to remove secp521r1 from the currenlty installed > openssl. You can specify the list of groups by calling SSL_CTX_set1_groups_list (or SSL_set1_groups_list) from your application. See: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX

Re: Need help in removing secp521r1 from openssl-1.1.1g and adding TLS_GREASE_BA cipher.

On 01/07/2021 07:21, vinod mg wrote: 1) Supress or a way to remove secp521r1 from the currenlty installed openssl. You can specify the list of groups by calling SSL_CTX_set1_groups_list (or SSL_set1_groups_list) from your application. See: https://www.openssl.org/docs/man1.1.1/man

Re: Need help in removing secp521r1 from openssl-1.1.1g and adding TLS_GREASE_BA cipher.

Hi All, Please let know if my ask is even possible. Thanks, Vinod On Tue, Jun 29, 2021 at 4:42 PM vinod mg wrote: > Hi All, > > I am bit a newbie and need some assistance in couple of things - > > 1) Supress or a way to remove secp521r1 from the currenlty installed > openssl. > 2) Add the ciph

Need help in removing secp521r1 from openssl-1.1.1g and adding TLS_GREASE_BA cipher.

Hi All, I am bit a newbie and need some assistance in couple of things - 1) Supress or a way to remove secp521r1 from the currenlty installed openssl. 2) Add the cipher - "0xbaba TLS_GREASE_BA GREASE" like we see in chrome. I am ok with custom install as well, if above cannot be done with al