From 8b917e6625001282b5d2bbb50e30c45808dedd05 Mon Sep 17 00:00:00 2001 From: Dirk Wetter Date: Mon, 5 Oct 2015 09:19:11 +0200 Subject: [PATCH 1/2] Update Readme.md --- bin/Readme.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/bin/Readme.md b/bin/Readme.md index c4ad6dc..f82b00f 100644 --- a/bin/Readme.md +++ b/bin/Readme.md @@ -19,7 +19,7 @@ features needed for testing. OTOH they also come with extended support for new / advanced cipher suites and/or features which are not in the official branch like CHACHA20+POLY1305 and CAMELIA 256 bit ciphers. -The binariesi tn this directory are all compiled from an OpenSSL 1.0.2 fork +The binaries in this directory are all compiled from an OpenSSL 1.0.2 fork from Peter Mosmans (https://github.com/PeterMosmans/openssl). Thx a bunch, Peter! @@ -86,6 +86,7 @@ If you want to compile OpenSSL yourself, here are the instructions: enable-seed enable-camellia enable-idea enable-rfc3779 no-ec_nistp_64_gcc_128 \ -static experimental-jpake -DOPENSSL_USE_BUILD_DATE +(IPv6 would need additionally ``-DOPENSSL_USE_IPV6`` and the tree https://github.com/PeterMosmans/openssl/tree/ipv6.) Four GOST [1][2] ciphers come via engine support automagically with this setup. Two additional GOST ciphers can be compiled in (``GOST-GOST94``, ``GOST-MD5``) with ``-DTEMP_GOST_TLS``. The binaries seem to work so far -- it has not been thouroughly tested though and ``make report`` bails out. From fc46a61733e14c3035fccf4388ac2e356de1a012 Mon Sep 17 00:00:00 2001 From: Dirk Wetter Date: Mon, 5 Oct 2015 09:22:02 +0200 Subject: [PATCH 2/2] Update Readme.md --- bin/Readme.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/bin/Readme.md b/bin/Readme.md index f82b00f..a70f1a7 100644 --- a/bin/Readme.md +++ b/bin/Readme.md @@ -88,8 +88,7 @@ If you want to compile OpenSSL yourself, here are the instructions: (IPv6 would need additionally ``-DOPENSSL_USE_IPV6`` and the tree https://github.com/PeterMosmans/openssl/tree/ipv6.) Four GOST [1][2] ciphers come via engine support automagically with this setup. Two additional GOST -ciphers can be compiled in (``GOST-GOST94``, ``GOST-MD5``) with ``-DTEMP_GOST_TLS``. The binaries -seem to work so far -- it has not been thouroughly tested though and ``make report`` bails out. +ciphers can be compiled in (``GOST-GOST94``, ``GOST-MD5``) with ``-DTEMP_GOST_TLS`` but as of now they make problems under rare circumstances, so unless you desperately need those ciphers I would stay away from ``-DTEMP_GOST_TLS``. If you don't have / don't want Kerberos libraries and devel rpms/debs, just omit "--with-krb5-flavor=MIT" (see examples). If you have another Kerberos flavor you would need to figure out by yourself.