Support FFDHE?

John Jiang john.sha.jiang at gmail.com
Thu Feb 27 09:15:12 UTC 2020


I would have highlighted that OpenSSL 1.1.1d was being used in my testing.

On Thu, Feb 27, 2020 at 5:13 PM John Jiang <john.sha.jiang at gmail.com> wrote:

> Hi,
> It sounds FFDHE groups are already supported [1]
> But the tools, like s_client, also support them.
> Run the command: openssl s_client -tls1_3 -groups ffdhe2048 host:port
> it just raised the issue: Error with command: "-groups ffdhe2048"
> If using P-256 or X25519, it worked fine.
>
> I also tried option "-groups FFDHE2048". The same error raised again.
>
> [1] https://github.com/openssl/openssl/pull/8178
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20200227/b09a6dda/attachment.html>


More information about the openssl-users mailing list