Thanks for the pointer Dave. That got things working for me.

-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of Dave Thompson
Sent: Friday, November 02, 2012 3:27 PM
To: [email protected]; [email protected]
Subject: RE: ECDH-RSA and TLS 1.2 [AESGCM]

> From: [email protected] On Behalf Of Abhiram Shandilya
> Sent: Thursday, 01 November, 2012 21:31

-dev added

> I configured my openssl RSA CA to add the key usage extension for key 
> agreement to the ECC certificate but even then it does not work. 
> Pre-TLS 1.2 cipher suites such as ECDH-RSA-AES128-SHA work fine but 
> just not the TLS 1.2 cipher suites with AESGCM.

Looks like a bug to me. (1.0.1c) s3_lib.c ciphers C031 and C032 have kECDHe 
when it appears they should have kECDHr .


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to