Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-21 Thread Matt Caswell
On 21/06/17 00:38, Neetish Pathak wrote: > I wanted to understand the replay attack vulnerability in case of enable > early data of TLS 1.3 while false start is secure in that respect as I > have read from https://github.com/openssl/openssl/issues/1541 > So, with false start, the application

Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-21 Thread Neetish Pathak
On Wed, Jun 21, 2017 at 3:11 AM, Matt Caswell wrote: > > > On 21/06/17 00:38, Neetish Pathak wrote: > > I wanted to understand the replay attack vulnerability in case of enable > > early data of TLS 1.3 while false start is secure in that respect as I > > have read from

[openssl-users] openssl 1.0 and 1.1 co-exist

2017-06-21 Thread Ken Goldman
This is probably Linux specific ... Can both openssl versions co-exist on the same platform. I know that the .so is versioned, but how about the header files? Can I choose which library to build with? Do the headerso in the same /usr/include/openssl or are there links? Are there ifdefs in

Re: [openssl-users] openssl 1.0 and 1.1 co-exist

2017-06-21 Thread Viktor Dukhovni
On Wed, Jun 21, 2017 at 01:44:34PM -0400, Ken Goldman wrote: > This is probably Linux specific ... > > Can both openssl versions co-exist on the same platform. I know that the > .so is versioned, but how about the header files? Can I choose which > library to build with? Yes, with care. I