Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-19 Thread Dave Thompson
> From: openssl-users On Behalf Of Viktor Dukhovni > Sent: Friday, June 12, 2015 02:47 > > 1) 1.0.1l > > ./apps/openssl s_server -ssl3 -cert certdb/ssl_server.pem -WWW -CAfile > > certdb/cafile.pem > > Using default temp DH parameters > > Using default temp ECDH parameters > > ACCEPT > > With SSL

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-15 Thread Aaron
>Does your test case result in ECDHE being used when you change only >the protocol on both ends from ssl3 to tls1? Yes, I tested and verified this. Thanks again, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openss

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-12 Thread Viktor Dukhovni
On Fri, Jun 12, 2015 at 01:35:22AM -0700, Aaron wrote: > Thanks so much, Viktor. Hence, this is an expected behavior change. In this > case I will update my application. Does your test case result in ECDHE being used when you change only the protocol on both ends from ssl3 to tls1? If so, I thin

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-12 Thread Aaron
Thanks so much, Viktor. Hence, this is an expected behavior change. In this case I will update my application. Aaron. -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl-tp58557p58637.html Sent from the OpenSSL - User mailing

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-11 Thread Viktor Dukhovni
On Thu, Jun 11, 2015 at 11:19:17PM -0700, Aaron wrote: > Right, I am talking about s_server subcommand. You mentioned that there is > no change in this area. However I can easily show something is change using > s_server subcommand. I am using original OpenSSL code to build my 'openssl', > to this

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-11 Thread Aaron
Hi Dave, Thanks for your comments. I am not really familiar with OpenSSL, so some parts of my descriptions may not be not very clear. Right, I am talking about s_server subcommand. You mentioned that there is no change in this area. However I can easily show something is change using s_server su

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-11 Thread Dave Thompson
> From: openssl-users On Behalf Of Aaron > Sent: Wednesday, June 10, 2015 03:47 > We are using executable 'apps/openssl' in our test cases. We upgraded from > OpenSSL 1.0.1l to OpenSSL 1.0.2a recently. Since then one of our test cases > started to fail. After checking, I noticed that the default c

[openssl-users] The default cipher of executable 'openssl'

2015-06-10 Thread Aaron
Hello, We are using executable 'apps/openssl' in our test cases. We upgraded from OpenSSL 1.0.1l to OpenSSL 1.0.2a recently. Since then one of our test cases started to fail. After checking, I noticed that the default cipher of 'openssl' was changed from ECDHE-RSA-AES256-SHA to DHE-RSA-AES256-SHA