Matt Caswell

I've put an OMC hold on this pending the outcome of the discussion in openssl/general-policies#22. I don't think that hold should stop us from continuing to review the rest of...

I've lifted the hold. > How to go about enabling this by default can be discussed subsequently I guess that is the discussion in openssl/general-policies#22

Close/reopen to kick CLA bot

Hmmm....the bot is failing to find the CLA even though it is on file. I'm not sure why. I'm removing the label manually for now, although the bot might try...

> Perhaps a different e-mail address was used for this commit? That is the case. #17090 uses your FreeBSD email address. This PR is using an email address that wasn't...

I've applied a temporary hold to this until openssl/web#357 is merged. Once that's in, this one can go in too.

> The code is (so far) by Yiannis Stavrou of Nozomi Networks of 2019/2020, recently rebased by me on the current master. Note that we would need an ICLA and...

Yes, you can do this with the `pkeyutl` app. See the man page here: https://www.openssl.org/docs/man3.0/man1/openssl-pkeyutl.html There are some details on the SM2 specific support near the end of the page.

Has the OpenSSL version been updated? OpenSSL 3 (a major release) changed some behaviour compared to 1.1.1 with respect to peers that fail to shutdown a TLS connection cleanly. Previously,...

OMC have voted to lift the OMC hold on this PR.