On Mon, Nov 10, 2014, Koehne Kai wrote: > > Thanks for replying. > > I'm able to reproduce it with a stock openssl 1.0.1j , configured with > > ./config threads shared no-rc5 no-idea no-ssl2 no-ec2m > > I've to admit though that the error appears in a (albeit minimal) Qt > application ... > > openssl s_client -connect server:443 > > does succeed, so it looks like the way Qt uses openssl is another factor in > the error :( > > I'll try to come up with a minimal example ... >
Hmm... I think OpenSSL 1.0.1 s_client is advertising use of EC curves it doesn't support when you specify no-ec2m, but you'd only get an error if the server uses a binary field. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org