Re: [openssl-dev] TLS 1.3 client hello issue

2017-09-18 Thread Mahesh Bhoothapuri
nsition(). */ switch (st->hand_state) { default: " On Mon, Sep 18, 2017 at 5:40 AM, Benjamin Kaduk <bka...@akamai.com> wrote: > On 09/18/2017 01:07 AM, Mahesh Bhoothapuri wrote: > > Hi, > > I am sending a Tls 1.3 client hello, and am seeing an issue

[openssl-dev] TLS 1.3 client hello issue

2017-09-18 Thread Mahesh Bhoothapuri
Hi, I am sending a Tls 1.3 client hello, and am seeing an issue with ossl_statem_client_write_transition in statem_clnt.c. /* * Note that immediately before/after a ClientHello we don't know what * version we are going to negotiate yet, so we don't take this branch until *

Re: [openssl-dev] rejecting elliptic_curves/supported_groups in ServerHello (new behavior in master/1.1.1 vs 1.1.0)

2017-10-04 Thread Mahesh Bhoothapuri
Thanks for the hint. The problem is fixed. Server was setting: if (SSL_CTX_set1_groups_list(ctx, "X25519:P-256") == 0) { // } The call succeeds. But the old TLS 1.2 code was setting: int nid = NID_X9_62_prime256v1; EC_KEY* ecdh = EC_KEY_new_by_curve_name(nid);

Re: [openssl-dev] rejecting elliptic_curves/supported_groups in ServerHello (new behavior in master/1.1.1 vs 1.1.0)

2017-10-04 Thread Mahesh Bhoothapuri
to enable the supported groups? Thanks, Mahesh On Wed, Oct 4, 2017 at 8:02 AM, Dr. Stephen Henson <st...@openssl.org> wrote: > On Wed, Oct 04, 2017, Mahesh Bhoothapuri wrote: > > > if (SSL_CTX_set1_groups_list(ctx, "P-521:P-384:P-256") == 0) { > >