<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Largest accepted client key exchange message length seems to be set to 2048 bytes.
<div class="">Key exchange for an RSA16k is slightly larger than that (exactly 2048 bytes of pure crypto payload, plus a few bytes of overhead).</div>
<div class=""><br class="">
</div>
<div class="">OpenSSL is too conservative here.</div>
<div class=""><br class="">
<div class="">
<div class="">Cordialement,</div>
<div class="">Erwann Abalea</div>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">Le 21 juil. 2016 à 10:32, Gupta, Saurabh <<a href="mailto:Saurabh.Gupta@cavium.com" class="">Saurabh.Gupta@cavium.com</a>> a écrit :</div>
<br class="Apple-interchange-newline">
<div class="">
<div id="divtagdefaultwrapper" style="font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-size: 12pt; background-color: rgb(255, 255, 255); font-family: Calibri, Arial, Helvetica, sans-serif;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class="">This issue, I'm facing for openssl-1.0.2e/g/h version.<span class="Apple-converted-space"> </span><br class="">
</div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class="">
</div>
<div style="margin-top: 0px; margin-bottom: 0px;" class="">Run openssl server: Used 16K Certificate and Key</div>
<span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div class="">./openssl s_server -cert sercert16384.pem -key server16384</div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class=""> </div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class="">Run openssl client:</div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class="">./openssl s_client -connect <server_ip>:port_number -cipher AES128-SHA -tls1</div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class="">
</div>
ERROR<span class="Apple-converted-space"> </span><br class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class=""> </div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div class="">139812135450280:error:1408E098:SSL routines:ssl3_get_message:excessive message size:s3_both.c:417:</div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div class=""></div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class="">
<br class="">
</div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class=""></span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class="">This error is coming while using AES128-SHA as a cipher and tls1/1_1/1_2 protocols. It's working fine with ssl3 protocol.</div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class="">
</div>
</span><span id="x_divtagdefaultwrapper" style="font-size: 12pt; background-color: white;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><b class="">Note:</b></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class="">1. This issue, I didn't face for the openssl-1.0.1p/e version.</div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class="">
</div>
<div style="margin-top: 0px; margin-bottom: 0px;" class="">Can you please confirm. is this known issue?</div>
<div style="margin-top: 0px; margin-bottom: 0px;" class="">if it is the known issue. Can you please share that fix?</div>
</span>
<p style="margin-top: 0px; margin-bottom: 0px;" class=""></p>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class="">
</div>
<div id="Signature" class="">
<div id="divtagdefaultwrapper" style="font-size: 12pt; background-color: rgb(255, 255, 255); font-family: Calibri, Arial, Helvetica, sans-serif;" class="">
<span style="font-size: 12pt;" class="">Regards,<br class="">
Saurabh<br class="">
</span></div>
</div>
</div>
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">openssl-users
mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">To
unsubscribe:<span class="Apple-converted-space"> </span></span><a href="https://mta.openssl.org/mailman/listinfo/openssl-users" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">https://mta.openssl.org/mailman/listinfo/openssl-users</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>