[openssl-users] Disable ETM in OpenSSL 1.1.0+

[Michael Shirley]

It appears that starting with OpenSSL 1.1.0, it is not possible to disable the Encrypt-Then-MAC (ETM) TLS extension for CBC ciphers. Is there an undocumented method to do this, which would also allow me to use the built-in s_server/s_client test mechanism?

Thanks,
-Mike

Michael Shirley
Senior Test Engineer
Office: (512) 498-7038 | Mobile:(512) 965-9004
mshirley at nsslabs.com

<http://mshirley@nsslabs.com/>
[s_logo_esig2.png]<https://www.nsslabs.com/>

  [itter_logo_esig_sm.png] <https://twitter.com/nsslabs>   [nkedin_logo_esig_sm.png] <https://www.linkedin.com/company/nss-labs>


[P Strategic Guidance Learn More]<http://sigstr.nsslabs.com/uc/586d0945825be97367c551f6>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170116/1cfc16a5/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3594 bytes
Desc: image001.png
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170116/1cfc16a5/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 715 bytes
Desc: image002.png
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170116/1cfc16a5/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 684 bytes
Desc: image003.png
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170116/1cfc16a5/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 34299 bytes
Desc: image004.png
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170116/1cfc16a5/attachment-0007.png>