Re: openssl verify always returns 0 (success) to shell

2012-11-04 Thread Felipe Blauth
OpenSSL app worked as expected, and that is what 0 means (EXIT_SUCCES) in C programming. The fact that verification wasn't successful does not mean OpenSSL app didn't work correctly. I think you either have to write your own app (or maybe just modifiy OpenSSL verify app to return what you want)

Re: ECDH-RSA and TLS 1.2 [AESGCM]

2012-11-04 Thread Dr. Stephen Henson
On Fri, Nov 02, 2012, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Abhiram Shandilya Sent: Thursday, 01 November, 2012 21:31 -dev added I configured my openssl RSA CA to add the key usage extension for key agreement to the ECC certificate but even then it

Re: openssl verify always returns 0 (success) to shell

2012-11-04 Thread Ken Goldman
I suppose I'll have to write my own program. :-) IMHO, this is a borderline bug. If it returns success when the verify fails, when would it return failure? It feels like a waste of a useful return code. Most programs return non-zero for a failure. E.g., diff returns non-zero if there's

Re: openssl verify always returns 0 (success) to shell

2012-11-04 Thread Felipe Blauth
Your argument makes sense, I haven't written many bash scripts so far and maybe missed the point. The fact that a program could return a non-zero does not necessarily implies it is returning 1 (EXIT_FAILURE). 1 could be for an unexpected failure and other numbers could mean something else.

Openssl 1.1.0 Status

2012-11-04 Thread The Doctor
when Will Openssl 1.1.0 become beta? -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k USA petition to dissolve the Republic and vote to disoolve

Re: ECDH-RSA and TLS 1.2

2012-11-04 Thread jb-openssl
On 02-11-2012 21:46, Jeffrey Walton wrote: On Fri, Nov 2, 2012 at 4:30 PM, Jakob Bohm jb-open...@wisemo.com wrote: (continuing TOFU posting to keep the thread somewhat consistent) Given some of the mathematical restrictions on parameters needed to keep DSA and ECDSA safe from attackers, I

Re: ECDH-RSA and TLS 1.2

2012-11-04 Thread Jeffrey Walton
On Sun, Nov 4, 2012 at 7:15 PM, jb-open...@wisemo.com wrote: On 02-11-2012 21:46, Jeffrey Walton wrote: On Fri, Nov 2, 2012 at 4:30 PM, Jakob Bohm jb-open...@wisemo.com wrote: (continuing TOFU posting to keep the thread somewhat consistent) Given some of the mathematical restrictions on