Re: [openssl-users] how is it possible to confirm that a TLS ticket was used?

2019-02-04 Thread Viktor Dukhovni
On Mon, Feb 04, 2019 at 03:54:48PM -0800, Sam Roberts wrote: > And is it possible that this is different for TLS1.2 and 1.3? The resumption API is the same. However, because in TLS 1.3, session tickets are sent *after* the completion of the handshake, it is possible that the session handle

[openssl-users] how is it possible to confirm that a TLS ticket was used?

2019-02-04 Thread Sam Roberts
And is it possible that this is different for TLS1.2 and 1.3? Using TLS1.3, SSL_session_reused() is always returning false, I'm not sure if that's because I'm doing something else wrong, and the ticket is not being accepted and a full handshake is occurring, or if the API literally only signals

Re: [openssl-users] Adding custom OBJ identifiers

2019-02-04 Thread Dmitry Belyavsky
Dear Hubert, On Mon, Feb 4, 2019 at 6:52 PM Hubert Kario wrote: > On Thursday, 31 January 2019 11:09:00 CET Dmitry Belyavsky wrote: > > Hello, > > > > What is best practice to add own object identifiers to the > crypto/objects/* > > files? > > > > It's not a problem to add all the necessary

Re: [openssl-users] Adding custom OBJ identifiers

2019-02-04 Thread Hubert Kario
On Thursday, 31 January 2019 11:09:00 CET Dmitry Belyavsky wrote: > Hello, > > What is best practice to add own object identifiers to the crypto/objects/* > files? > > It's not a problem to add all the necessary strings to the > crypto/objects/objects.txt file and invoke 'make

Re: [openssl-users] Some documentation about key derivation and block padding

2019-02-04 Thread Alexis BRENON @OpenSSL
Hi all, So, I found some hints on stack overflow (https://stackoverflow.com/questions/6772465/is-there-any-c-api-in-openssl-to-derive-a-key-from-given-string) and an implementation with pyCrypto (https://gist.github.com/mimoo/11383475). I still can't get the expected results but these raise some