Re: ECDHE-ECDSA Support

2014-03-28 Thread Rob Stradling
On 27/03/14 13:17, Rob Stradling wrote: Hi Thomas. I was told a while ago that Google's servers will only negotiate ECDHE-ECDSA if the client i) sends the SNI extension and ii) does _not_ offer any compression methods. IINM, s_client always offers zlib compression if zlib support is compiled in

Re: ECDHE-ECDSA Support

2014-03-27 Thread Rob Stradling
Hi Thomas. I was told a while ago that Google's servers will only negotiate ECDHE-ECDSA if the client i) sends the SNI extension and ii) does _not_ offer any compression methods. IINM, s_client always offers zlib compression if zlib support is compiled in. It'd be nice if there was a comman

Re: ECDHE-ECDSA Support

2014-03-27 Thread Dr. Stephen Henson
On Thu, Mar 27, 2014, Dr. Stephen Henson wrote: > On Thu, Mar 27, 2014, Thomas Montroy wrote: > > > hi Jeff, > > > > Thanks for the response, but I'm still having trouble. > > > > As for TLSv1.2: > > > > With the OS version of openssl, my default connection looks to be TLSv1.1 > > > > However

Re: ECDHE-ECDSA Support

2014-03-27 Thread Thomas Montroy
Nice catch. Thanks for looking into it. Cheers, -Tom On Thu, Mar 27, 2014 at 9:22 AM, Dr. Stephen Henson wrote: > On Thu, Mar 27, 2014, Thomas Montroy wrote: > > > hi Jeff, > > > > Thanks for the response, but I'm still having trouble. > > > > As for TLSv1.2: > > > > With the OS version of ope

Re: ECDHE-ECDSA Support

2014-03-27 Thread Dr. Stephen Henson
On Thu, Mar 27, 2014, Thomas Montroy wrote: > hi Jeff, > > Thanks for the response, but I'm still having trouble. > > As for TLSv1.2: > > With the OS version of openssl, my default connection looks to be TLSv1.1 > > However, if I add -tls1_2 to the call, I get this: > SSL-Session: > Protoc

Re: ECDHE-ECDSA Support

2014-03-27 Thread Thomas Montroy
hi Jeff, Thanks for the response, but I'm still having trouble. As for TLSv1.2: With the OS version of openssl, my default connection looks to be TLSv1.1 However, if I add -tls1_2 to the call, I get this: SSL-Session: Protocol : TLSv1.2 Cipher: ECDHE-RSA-AES256-GCM-SHA384 Should t

Re: ECDHE-ECDSA Support

2014-03-26 Thread Jeffrey Walton
> I'm running ubuntu (12.04, I think) on a VM on a Macbook Air using VMware. I > tried the default ubuntu SSL, 1.0.1f, 1.0.1c and 1.0.2beta1, no luck in any > case. > ... > Any ideas why I can't do that with openssl? Ubuntu disables TLS 1.1 and 1.2 in their version of OpenSSL. See, for example, Op