Re: [openssl-users] Build from source; library not found?

[Viktor Dukhovni]

> On May 18, 2017, at 4:08 PM, Richard Levitte  wrote:
> 
> hiran.chaudhuri> Incidently, I think that when you do this, you'll find 
> that it
> hiran.chaudhuri> finds
> hiran.chaudhuri> your libraries all right:
> hiran.chaudhuri> 
> hiran.chaudhuri> $ ldd /prefix/openssl/bin/openssl
> hiran.chaudhuri> 
> hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the 
> libraries
> hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only a 
> setting
> hiran.chaudhuri> for application (executables) but not for shared libraries?
> hiran.chaudhuri> In that case the test I tried would be totally meaningless.
> 
> Yes, that's correct.

NO, it is not correct, shared libraries also have rpaths for their
own dependencies.  And when building OpenSSL for installation in
non-default locations (not /usr/lib and the like) the libraries
should have an rpath.

-- 
Viktor.

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Richard Levitte]

In message <20170517143939.7a4ac40...@smtp03.mail.de> on Wed, 17 May 2017 
16:39:39 +0200, Hiran Chaudhuri  said:

hiran.chaudhuri> Incidently, I think that when you do this, you'll find 
that it
hiran.chaudhuri> finds
hiran.chaudhuri> your libraries all right:
hiran.chaudhuri> 
hiran.chaudhuri> $ ldd /prefix/openssl/bin/openssl
hiran.chaudhuri> 
hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the 
libraries
hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only a 
setting
hiran.chaudhuri> for application (executables) but not for shared libraries?
hiran.chaudhuri> In that case the test I tried would be totally meaningless.

Yes, that's correct.

-- 
Richard Levitte levi...@openssl.org
OpenSSL Project http://www.openssl.org/~levitte/
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] Question about fetching client ciphers

[Lodaya, Varun via openssl-users]

Hey Guys,

Had a question about obtaining client ciphers from OpenSSL library.
Currently we are doing SNI by registering to 
SSL_CTX_set_tlsext_servername_callback and taking a decision on the right 
certificate. We were trying to figure out how we can get more information like 
client ciphers, etc in that callback. I see the ‘SSL_get_client_ciphers’ API in 
newer (Openssl 1.1.0+), but not in the older versions (Openssl 1.0.2).

Is there any other way we can read the client ciphersuite in the callback we 
register to SSL_CTX_set_tlsext_servername_callback

Thanks,
Varun
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] OpenSSL 1.1.1 release timeframe

[Jayalakshmi bhat]

Hi Matt,

I do understand. Thanks a lot for the reply.

Regards
Jayalakshmi

On Thu, May 18, 2017 at 2:47 PM, Matt Caswell  wrote:

>
>
> On 18/05/17 06:32, Jayalakshmi bhat wrote:
> > Please can any one let me know the release date or time line for OpenSSL
> > 1.1.1?
>
> We have not set a date as yet. At the very least we will not be able to
> release until the IETF takes TLSv1.3 out of draft status - which is not
> in our control.
>
> Matt
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] OpenSSL 1.1.1 release timeframe

[Matt Caswell]

On 18/05/17 06:32, Jayalakshmi bhat wrote:
> Please can any one let me know the release date or time line for OpenSSL
> 1.1.1? 

We have not set a date as yet. At the very least we will not be able to
release until the IETF takes TLSv1.3 out of draft status - which is not
in our control.

Matt
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users