Re: [racket-dev] [patch] OpenSSL ECDH(E) + DHE support.

2014-02-10 Thread Edward Lee
Full disclosure: I am not an OpenSSL expert and this patch is still a work in progress. I will hopefully have a more finalized patch closer to next week, but I am not qualified to audit this code. On Sun, Feb 09, 2014 at 04:40:44PM -0500, Neil Van Dyke wrote: Edward Lee wrote at 02/08/2014

Re: [racket-dev] [patch] OpenSSL ECDH(E) + DHE support.

2014-02-10 Thread Ryan Culpepper
On 02/08/2014 05:52 PM, Edward Lee wrote: Hi. Racket's OpenSSL bindings do not currently enable the ECDH(E) and the DHE ciphers, which are needed for perfect forward secrecy. I've attached a patch that: - Embeds reasonable defaults for DHE mode. - Adds two functions,

Re: [racket-dev] [patch] OpenSSL ECDH(E) + DHE support.

2014-02-10 Thread Edward Lee
On Mon, Feb 10, 2014 at 06:37:56PM -0500, Ryan Culpepper wrote: On 02/08/2014 05:52 PM, Edward Lee wrote: Hi. Racket's OpenSSL bindings do not currently enable the ECDH(E) and the DHE ciphers, which are needed for perfect forward secrecy. I've attached a patch that: - Embeds