Re: TLS hello extensions and supplemental data patch

2009-04-27 Thread Davide Vernizzi
On Wed, 2009-04-22 at 04:42 -0700, nhack wrote: > Can someone send me the patch or the download link for this extension? Here it comes. You can find the software at this address: http://security.polito.it/opentc/daa-toolkit-preview/ In the package you can find a snapshot of OpenSSL and the patc

Re: Google summer of code?

2009-02-25 Thread Davide Vernizzi
On Wed, 2009-02-25 at 10:29 +0100, Emanuele Cesena wrote: > On Sun, 2009-02-22 at 19:51 +0200, Billy Brumley wrote: > > Hi--hopefully this is the correct list. Is there any chance of openssl > > participating as a mentor organization for Google summer of code? > > > I will also be very interested!

Re: Sending a puzzle during handshake

2009-01-22 Thread Davide Vernizzi
Hi Marius, you could try using the extension/supplemental data. The main problem I can see is that you can send the puzzle within the serverhello, but you will receive the answer immediately after the server_done and it can not be processed before the handshake is finished. The nice part of the w

Initialization of TLSEXT

2009-01-15 Thread Davide Vernizzi
Hello devs, we are dealing with a general framework to support the tls extensions (cf mail sent Sun, 14 Dec 2008 at 16:48:21). We want to provide tls extensions with an initialization function. Let's use as example the extension e1. The problem is on the server side: assume that e1 is initialize

TLS extension - howto (long)

2007-11-13 Thread Davide Vernizzi
Hi dev, I'm experimenting a little with TLS extensions... I managed to exchange an extension between the client and the server, but I have few questions. First of all, must I write all the code for extension handling for each new extension or is there any common way to handle generic extension.