[openssl-users] Call for testing TLS 1.3

Matt Caswell matt at openssl.org
Mon Jun 18 22:21:19 UTC 2018



On 18/06/18 21:23, Hubert Kario wrote:
> On Friday, 8 June 2018 10:26:07 CEST Matt Caswell wrote:
>> On 08/06/18 02:48, John Jiang wrote:
>>> Is it possible to check Key/IV update feature via these tools?
>>> Thanks!
>>
>> Yes. See the "CONNECTED COMMANDS" sections of these pages:
>> https://www.openssl.org/docs/manmaster/man1/s_server.html
>> https://www.openssl.org/docs/manmaster/man1/s_client.html
>>
>> Basically typing "k" or "K" from an s_server/s_client session will issue
>> a KeyUpdate message. Using the capitalised form ("K"), additionally
>> requests a KeyUpdate from the peer.
> 
> Are there similar commands to perform or control post-handshake client 
> authentication?

Yes. As mentioned on the above s_server link, type "c" from an s_server
session to send a certificate request to the client.

Matt


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180618/fe5c9f7b/attachment.sig>


More information about the openssl-users mailing list