Re: [openssl-users] Integrating New Cipher Suite

2017-10-04 Thread Schmicker, Robert
Module 2.0, fipsalgtest.pl fails (Diaz de Grenu, Jose) 8. Re: Storing private key on tokens (lists) -- Message: 1 Date: Mon, 2 Oct 2017 13:52:18 +0200 From: Jakob Bohm To: openssl-users@openssl.org Subject: Re: [openssl-users] Integ

Re: [openssl-users] Integrating New Cipher Suite

2017-10-02 Thread Jakob Bohm
On 02/10/2017 00:47, Dr. Stephen Henson wrote: On Sun, Oct 01, 2017, Wallboy wrote: Hi, ... Bonus Question: Is it possible to remove the SCSV cipher in the ClientHello? You can't remove it without making source changes. Again it's in the ssl_cipher_list_to_bytes() function. Have you tried

Re: [openssl-users] Integrating New Cipher Suite

2017-10-01 Thread Dr. Stephen Henson
On Sun, Oct 01, 2017, Wallboy wrote: > Hi, > > I'm also interested in adding a few "pseudo" ciphersuites to OpenSSL. > Notably the 16 GREASE ones Chrome currently uses (0x0A0A, 0x1A1A...0xFAFA). > > I made similar changes to the files listed in this thread and compiled > successfully (based on

Re: [openssl-users] Integrating New Cipher Suite

2017-10-01 Thread Wallboy
Hi, I'm also interested in adding a few "pseudo" ciphersuites to OpenSSL. Notably the 16 GREASE ones Chrome currently uses (0x0A0A, 0x1A1A...0xFAFA). I made similar changes to the files listed in this thread and compiled successfully (based on 1.1.0f). I see the new cipher when doing "openssl

Re: [openssl-users] Integrating New Cipher Suite

2017-04-18 Thread Dr. Stephen Henson
On Fri, Apr 14, 2017, Schmicker, Robert wrote: > > > After some debugging (exactly as mentioned above) it appears that the cipher > suite does not show up in the ClientHello using the s_client/s_server. I > modified the cipher for testing to use 512 bits instead of 64 so that it is > ranked

Re: [openssl-users] Integrating New Cipher Suite

2017-04-13 Thread Schmicker, Robert
- Message: 1 Date: Tue, 11 Apr 2017 18:54:09 + From: "Dr. Stephen Henson" <st...@openssl.org><mailto:st...@openssl.org> To: openssl-users@openssl.org<mailto:openssl-users@openssl.org> Subject: Re: [openssl-users] Integrating New Ciph

Re: [openssl-users] Integrating New Cipher Suite

2017-04-11 Thread Schmicker, Robert
ipher Suite (Dr. Stephen Henson) > 5. ssl_method_st not defined (Stiju Easo) > 6. Re: ssl_method_st not defined (Salz, Rich) > > > -- > > Message: 1 > Date: Sat, 8 Apr 2017 17:56:54 + > From: "Schmicker, Rober

Re: [openssl-users] Integrating New Cipher Suite

2017-04-10 Thread Dr. Stephen Henson
On Sat, Apr 08, 2017, Schmicker, Robert wrote: > Hello, > > I'm attempting to integrate a customized cipher suite for TLS 1.2, > however no matter what I try I always seem to end up with this error > (client side): > > SSL routines:ssl_cipher_list_to_bytes:no ciphers >

Re: [openssl-users] Integrating New Cipher Suite

2017-04-10 Thread Matt Caswell
On 08/04/17 18:56, Schmicker, Robert wrote: > Hello, > > I'm attempting to integrate a customized cipher suite for TLS 1.2, > however no matter what I try I always seem to end up with this error > (client side): > > SSL routines:ssl_cipher_list_to_bytes:no ciphers >

[openssl-users] Integrating New Cipher Suite

2017-04-08 Thread Schmicker, Robert
Hello, I'm attempting to integrate a customized cipher suite for TLS 1.2, however no matter what I try I always seem to end up with this error (client side): SSL routines:ssl_cipher_list_to_bytes:no ciphers available:ssl/statem/statem_clnt.c:3567 Can anyone give some further explanation on