Re: Testing TLS 1.0 with OpenSSL master

2020-08-25 Thread Kurt Roeckx
On Mon, Aug 24, 2020 at 01:38:41PM -0700, John Baldwin wrote: > On 8/18/20 9:49 AM, Matt Caswell wrote: > > > > > > On 17/08/2020 18:55, John Baldwin wrote: > >> 1) Is 'auth_level' supposed to work for this? The CHANGES.md change > >>references SSL_CTX_set_security_level and openssl(1)

Re: Testing TLS 1.0 with OpenSSL master

2020-08-24 Thread John Baldwin
On 8/18/20 9:49 AM, Matt Caswell wrote: > > > On 17/08/2020 18:55, John Baldwin wrote: >> 1) Is 'auth_level' supposed to work for this? The CHANGES.md change >>references SSL_CTX_set_security_level and openssl(1) claims that >>'-auth_level' changes this? Is the CHANGES.md entry wrong

Re: Testing TLS 1.0 with OpenSSL master

2020-08-18 Thread Matt Caswell
On 17/08/2020 18:55, John Baldwin wrote: > 1) Is 'auth_level' supposed to work for this? The CHANGES.md change >references SSL_CTX_set_security_level and openssl(1) claims that >'-auth_level' changes this? Is the CHANGES.md entry wrong and only >SECLEVEL=0 for the ciphers work by

Testing TLS 1.0 with OpenSSL master

2020-08-17 Thread John Baldwin
Sadly, I need to be able to test some KTLS changes I have in FreeBSD that support legacy clients still using TLS 1.0. After seeing the note in CHANGES.md about TLS 1.0 signature algs no longer being permitted in the default security level, I tried using '-auth_level=0' to lower the security