Interesting. Yes, I did take a look at Cloudflare patch but wasn't sure if I 
could use that.
Alright. This helps. 

My only option is to upgrade to OpenSSL 1.1.0 in order to support 
CHACHA+Poly1305 cipher support.

Thanks Rich.
-Srivalli


On 6/11/18, 1:40 PM, "Salz, Rich" <rs...@akamai.com> wrote:

    >    Just curious, is there a possibility to patch CHACHA cipher specific 
changes to OpenSSL 1.0.2 version still and get SSL handshake succeed?
      
    It can be done; CloudFlare posted some patches at 
https://github.com/cloudflare/sslconfig/tree/master/patches but I think they 
used the pre-IETF version and so might need some tweaks.  The OpenSSL project 
won't do it (we don't add features to existing releases).
    
    

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to