On 27/03/14 13:17, Rob Stradling wrote:
Hi Thomas.
I was told a while ago that Google's servers will only negotiate
ECDHE-ECDSA if the client i) sends the SNI extension and ii) does _not_
offer any compression methods.
IINM, s_client always offers zlib compression if zlib support is
compiled in
Hi Thomas.
I was told a while ago that Google's servers will only negotiate
ECDHE-ECDSA if the client i) sends the SNI extension and ii) does _not_
offer any compression methods.
IINM, s_client always offers zlib compression if zlib support is
compiled in. It'd be nice if there was a comman
On Thu, Mar 27, 2014, Dr. Stephen Henson wrote:
> On Thu, Mar 27, 2014, Thomas Montroy wrote:
>
> > hi Jeff,
> >
> > Thanks for the response, but I'm still having trouble.
> >
> > As for TLSv1.2:
> >
> > With the OS version of openssl, my default connection looks to be TLSv1.1
> >
> > However
Nice catch. Thanks for looking into it.
Cheers,
-Tom
On Thu, Mar 27, 2014 at 9:22 AM, Dr. Stephen Henson wrote:
> On Thu, Mar 27, 2014, Thomas Montroy wrote:
>
> > hi Jeff,
> >
> > Thanks for the response, but I'm still having trouble.
> >
> > As for TLSv1.2:
> >
> > With the OS version of ope
On Thu, Mar 27, 2014, Thomas Montroy wrote:
> hi Jeff,
>
> Thanks for the response, but I'm still having trouble.
>
> As for TLSv1.2:
>
> With the OS version of openssl, my default connection looks to be TLSv1.1
>
> However, if I add -tls1_2 to the call, I get this:
> SSL-Session:
> Protoc
hi Jeff,
Thanks for the response, but I'm still having trouble.
As for TLSv1.2:
With the OS version of openssl, my default connection looks to be TLSv1.1
However, if I add -tls1_2 to the call, I get this:
SSL-Session:
Protocol : TLSv1.2
Cipher: ECDHE-RSA-AES256-GCM-SHA384
Should t
> I'm running ubuntu (12.04, I think) on a VM on a Macbook Air using VMware. I
> tried the default ubuntu SSL, 1.0.1f, 1.0.1c and 1.0.2beta1, no luck in any
> case.
> ...
> Any ideas why I can't do that with openssl?
Ubuntu disables TLS 1.1 and 1.2 in their version of OpenSSL. See, for
example, Op