I've a small comment to contribute first, then I'll go through the rest
of your contribution.

[EMAIL PROTECTED] - Thu Aug 14 17:33:20 2003]:

>   - Do not suppress TLS when Diffie-Hellman is excluded.

RFC2246 says the following:

9. Mandatory Cipher Suites

   In the absence of an application profile standard specifying
   otherwise, a TLS compliant application MUST implement the cipher
   suite TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA.

That implies that OpenSSL MUST support DH, DSA, 3DES and SHA.

-- 
Richard Levitte
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to