On Thu, Dec 19, 2013, Porter, Andrew wrote: > Steve: > > > If you try OpenSSL 1.0.2 you can customise the signature algorithms and > > supported curves using a command line option. > > Erm, how? The ssltest.c and ssl_conf.c source files suggest "-named_curve" or > "-curves" as a possibilities, but trying to use them with openssl s_client > just gets me usage output which has some obviously new options but nothing > that I recognize as appropriate. >
The s_client and s_server utilities can use the new SSL_CONF API in 1.0.2, see: http://www.openssl.org/docs/ssl/SSL_CONF_cmd.html#SUPPORTED_COMMAND_LINE_COMMANDS The -sigalgs and -curves options should do the trick. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
