RE: 2 Server certificates

2014-06-16 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of nicolas@free.fr Sent: Friday, June 13, 2014 06:15 the fact is a server can only send a single certificate, however this one can be signed by multiple CAs Kind of. There's a difference between what we humans perceive as a CA (somebody

ClientHello protocol versions with s_server

2014-06-16 Thread Jason Schultz
I'm a bit confused on the appropriate protocol versions to use on a ClientHello in my SSL/TLS implementation. (I am using s_server to test my client code.) I say “versions” as there is the record version and the suggested protocol version. Ignoring SSLv2, the initial ClientHello to a server