Disable ETM in OpenSSL 1.1.0+

[Michael Shirley <mshirley@xxxxxxxxxxx>]

It appears that starting with OpenSSL 1.1.0, it is not possible to disable the Encrypt-Then-MAC (ETM) TLS extension for CBC ciphers. Is there an undocumented method to do this, which would also allow me to use the built-in s_server/s_client test mechanism?

 

Thanks,

-Mike

 

Michael Shirley
Senior Test Engineer
Office: (512) 498-7038 | Mobile:(512) 965-9004 
mshirley@xxxxxxxxxxx

 

 

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users