Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Salz, Rich
It is quite possible, maybe even likely, that the new MSFT update is using TLS versions that OpenSSL 0.9.8 does not support. -- Senior Architect, Akamai Technologies IM: richs...@jabber.at Twitter: RichSalz -- openssl-dev mailing list To unsubscribe:

Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Salz, Rich
> Can you tell me if we can enable SSL in fragments with openssl-0.9.8a ? So Upgrade. Sorry, that's the only answer. -- Senior Architect, Akamai Technologies IM: richs...@jabber.at Twitter: RichSalz -- openssl-dev mailing list To unsubscribe:

[openssl-dev] [openssl.org #4512] ChaCha20_ctr32 function increments 64 bit counter?

2016-04-15 Thread Patrick Steuer via RT
Hello openssl team, The following code in the ChaCha20_ctr32 function in crypto/chacha/chacha_enc.c looks like you are actually using an IV=[64bit counter||64 bit nonce] as specified in the "original Bernstein ChaCha" instead of IV=[32bit counter||96bit nonce] as specified in RFC7539. u32

Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Thirumal, Karthikeyan
Matt, Can you tell me if we can enable SSL in fragments with openssl-0.9.8a ? So that the version of Openssl that I have can handle this seamlessly. Just confirmed with MS that they have started to send SSL data in fragments. Thanks & Regards Karthikeyan Thirumal

[openssl-dev] [openssl.org #4511] s_server does not send Alert messages upon receiving malformed Client Key Exchange messages in DHE key exchange

2016-04-15 Thread Hubert Kario via RT
Using either current 1.0.1 or 1.0.2 branch (7a433893a and 9676402c3a respectively) openssl s_server command does not send Alert message upon receiving a malformed or invalid Client Key Exchange message in DHE key exchange. That applies to messages that are longer and shorter than needed as well

Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Matt Caswell
On 15/04/16 10:33, Thirumal, Karthikeyan wrote: > Yes Matt - I agree that it is a very old / low version that we are > using. We faced few memory issues with the 0.9.8zc - so we backed out > and lived with 9.8a. In addition we are also planning to terminate > SSL at F5 rather than our Server -

Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Thirumal, Karthikeyan
Yes Matt - I agree that it is a very old / low version that we are using. We faced few memory issues with the 0.9.8zc - so we backed out and lived with 9.8a. In addition we are also planning to terminate SSL at F5 rather than our Server - so we did not really care about the lower version. Am

Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Matt Caswell
On 15/04/16 09:15, Thirumal, Karthikeyan wrote: > Dear Dev folks, > > My clients are facing are connectivity issues after windows released > their OS upgrade this week. I think they have changed the way the SSL > handshake happens. > > My Server is using openssl-0.9.8a and my client sits on a

[openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Thirumal, Karthikeyan
Dear Dev folks, My clients are facing are connectivity issues after windows released their OS upgrade this week. I think they have changed the way the SSL handshake happens. My Server is using openssl-0.9.8a and my client sits on a Microsoft platform. >From OpenSSL - do we have a recommendation