vk2705

TLSEXT_INDEX in ssl/ssl_local.h vs ssl/statem_ntls/extensions.c

1

hi, in version 8.2.1: there is no match between definition of enum TLSEXT_INDEX and the declarations in ssl/statem_ntls/extensions.c. (unlike ssl/statem/extensions.c) on 14th place in ssl/ssl_local.h there is delegated_cred extension, while...

how client can suggest both TLS and NTLS ciphers in the Client Hello message?

3

hi, if we call openssl s_client -connect 1.1.1.1:443 -enable_ntls -cipher RSA:ECC-SM2-SM4-GCM-SM3 the client will send Hello with TLS ciphers only. if we add -ntls flag, it will suggest NTLS cipher...

i try to set method of SSL* object to NTLS. if I do SSL_set_ssl_method(con, NTLS_server_method()); connection by fails with error 140309886080768:error:1420909F:SSL routines:func(521):reason(159):ssl/statem_ntls/statem_srvr.c:1063: - The connection was TLS Client Hello with...

how to setup s_server to prefer GmSSL , if client offers GmSSL ciphers in TLS hello?

9

when both client and server support both TLS 1.2 and GmSSL, we would like to make them agree on GmSSL. can you please advise how we can achieve it ?...