I'm also interested in the answer to these questions regarding SRP in OpenSSL v3.

Our project still uses OpenSSL v1.1.1 with plans to move to v3 next year.

However we use SRP extensively and will not be able to move to v3 if SRP support is soon to be no longer available.

Norm Green
GemTalk Systems LLC

On 10/17/2022 2:49 PM, Rohit Khera [C] wrote:

I am trying to get information on versions and usage of the Secure Remote Password Protocol (SRP) APIs in OpenSSLv3.

 1. Are SRPv3, v6, and/or v6a supported?

 2. I found the following information in the OpenSSL documents on the
    following C API for SRP: SRP_create_verifier(),
    SRP_user_pwd_new(), SSL_CTX_set_srp_password()

While the following documents the API :


Are there any examples of client and server programs that use these interfaces in order to register and authenticate a user?

 3. The docs state that the APIs are deprecated -  are new versions of
    the APIs planned or can we expect SRP functionality to be
    unavailable in future versions of OpenSSL?


Reply via email to