On 24/05/2026 09:56, Mark Thomas wrote:
On 23/05/2026 23:35, Mark Thomas wrote:
On 23/05/2026 17:23, Rainer Jung wrote:
Hi there,
already sent a few hours ago, but it seems stuck. So slightly
reformatting and sending again.
Testing current heads of TC 11, 10.1 and 9 I get failures with
tcnative 2.0.14 and OpenSSL 4.0.0. JVM versions are (depending on TC)
1.8.0, 11 and 17.
I see this too.
I have got as far as figuring out requesting "aDH" is returning the
ciphers "ADH". I haven't (yet) tracked down the root cause.
Minor update. I have made a small amount of progress.
I have confirmed that OpenSSL remains case sensitive when called on the
command line.
Still trying to get to the root cause.
Solved it.
This is the change:
https://github.com/openssl/openssl/commit/2357b35ff7b8a0462ea08663641b23d7ea9f7780
openssl 4.0.x onwards does process the cipher list in a case insensitive
manner. There were path problems with my local testing and I was picking
up the system install of openssl rather than the local version I thought
I was testing.
The fix is simple - we remove all the really old aliases such as "aDH".
I'll get that done shortly.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
