Re: TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-17 Thread Dr. Stephen Henson
On Thu, May 16, 2013, Johannes Bauer wrote: > On 15.05.2013 23:05, Dr. Stephen Henson wrote: > > On Wed, May 15, 2013, Johannes Bauer wrote: > > > >> > >> Does this mean that communication with TLS1.2 with curves other than the > >> SEC-curves has actually never worked with OpenSSL (because it co

Re: TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-17 Thread Johannes Bauer
On 15.05.2013 23:05, Dr. Stephen Henson wrote: > On Wed, May 15, 2013, Johannes Bauer wrote: > >> >> Does this mean that communication with TLS1.2 with curves other than the >> SEC-curves has actually never worked with OpenSSL (because it couldn't >> have worked as this would require the explicit

Re: TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-15 Thread Dr. Stephen Henson
On Wed, May 15, 2013, Johannes Bauer wrote: > > Does this mean that communication with TLS1.2 with curves other than the > SEC-curves has actually never worked with OpenSSL (because it couldn't > have worked as this would require the explicit curve type why doesn't > appear to be implemented as o

Re: TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-15 Thread Johannes Bauer
On 15.05.2013 21:17, Johannes Bauer wrote: > Only sect/secp are included curiously although my openssl client > does internally also know, for example, about the wap-wsg and X9.62 > curves. But those are not included in the Client Hello request. > > And there's definitely no "unnamed generic type

Re: TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-15 Thread Johannes Bauer
On 15.05.2013 20:52, Dave Thompson wrote: > I can't easily test at the moment (even assuming your client is OpenSSL), > but I speculate that in SSL3 mode the client doesn't send (Client)Hello > extensions for SupportedCurves and SupportedPointFormats, Correct. > and in TLS > mode(s?) it does.

Re: TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-15 Thread Johannes Bauer
On 15.05.2013 17:48, Johannes Bauer wrote: > Server: openssl 1.0.1e compiled from source, Debian squeeze > Client: openssl 1.0.1c from Gentoo tree Additional info: Just upgraded the Client to 1.0.1e (Gentoo) and have the same issue. Something is *seriously* wrong here. That's what the server says

RE: TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-15 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Johannes Bauer > Sent: Wednesday, 15 May, 2013 11:49 > I'm having trouble getting a TLS 1.2 with EC F_p certificates to run. > This is my setup: > > Server: openssl 1.0.1e compiled from source, Debian squeeze > Client: openssl 1.0.1c from Gento

TLS v1.2 problems with connection establishment "No shared ciper"

2013-05-15 Thread Johannes Bauer
Hi list, I'm having trouble getting a TLS 1.2 with EC F_p certificates to run. This is my setup: Server: openssl 1.0.1e compiled from source, Debian squeeze Client: openssl 1.0.1c from Gentoo tree On the Server, i get $ openssl ciphers -v ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA

Re: problems with connection

2001-08-28 Thread Greg Stark
ECTED] - Original Message - From: "ganesh kumar godavari" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, August 27, 2001 8:21 PM Subject: problems with connection hai everyone, i donot know why my previous message has been ignored. i thi

problems with connection

2001-08-27 Thread ganesh kumar godavari
hai everyone, i donot know why my previous message has been ignored. i think i have not provided sufficient information. so i am providing some more additional information. i have created the certificates(using openssl) and signed them myself.i used ssldump to verify my ssl handshake informati