Re: Why does 'SSL_export_keying_material' return a different value than whats printed to the NSS keylog file?

2022-05-17 Thread Hubert Kario
On Tuesday, 17 May 2022 02:33:29 CEST, Ian Spence via openssl-users wrote: I am trying to wrap my head around the keying material I can access within my TLS client application using OpenSSL 3.0.3 I have `SSL_CTX_set_keylog_callback` set to just printf() the lines. I also have the following

Re: AES and EVP_CIPHER question

2022-05-17 Thread Matt Caswell
On 16/05/2022 23:48, Philip Prindeville wrote: Sorry, I shouldn't have phrased that inartfully. There is no EVP_CIPHER_CTX_get_padding(), so how does one achieve something analogous? From 3.0, assuming you are using provided ciphers (i.e. not engine ones), then OSSL_CIPHER_PARAM_PADDING

Re: AES and EVP_CIPHER question

2022-05-17 Thread Philip Prindeville
> On May 17, 2022, at 4:32 AM, Matt Caswell wrote: > > > > On 16/05/2022 23:48, Philip Prindeville wrote: >> Sorry, I shouldn't have phrased that inartfully. >> There is no EVP_CIPHER_CTX_get_padding(), so how does one achieve something >> analogous? > > > From 3.0, assuming you are

"openssl(1.0.2k) s_client -connect data.reversinglabs.com:443 -tls1_2" gives error: SSL3_GET_RECORD"wrong version number:s3_pkt.c:365

2022-05-17 Thread Geek Geek
I run into the following issue when I use openssl 1.0.2k (amazon linux2) to check the connection. [ec2-user@ip-172-31-29-28 ~]$ openssl s_client -connect data.reversinglabs.com:443 -tls1_2 CONNECTED(0003) 139994515941280:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version