ClientHello protocol versions with s_server

2014-06-16 Thread Jason Schultz
I'm a bit confused on the appropriate protocol versions to use on a ClientHello in my SSL/TLS implementation. (I am using s_server to test my client code.) I say “versions” as there is the record version and the suggested protocol version. Ignoring SSLv2, the initial ClientHello to a server shoul

RE: 2 Server certificates

2014-06-16 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of nicolas@free.fr > Sent: Friday, June 13, 2014 06:15 > the fact is a server can only send a single certificate, however this one can > be > signed by multiple CAs Kind of. There's a difference between what we humans perceive as a CA (someb