<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br>On Jul 2, 2013, at 9:57 AM, Ransom Richardson <<a href="mailto:ransomr@talko.com">ransomr@talko.com</a>> wrote:</div><div><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<div name="divtagdefaultwrapper" id="divtagdefaultwrapper" style="font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt; color: #000000; margin: 0">
Ingela, thanks for looking at this. Do you still need additional information? The issue seems to be client specific, and I don't have an isolated repro. Based on what I'm seeing it looks like <span style="background-color: rgb(255, 255, 255);">{ecdhe_rsa,aes_256_cbc,sha}
works fine when I connect with a python client, but not when I connect with an iOS client. This is the case even if I also support </span><span style="background-color: rgb(255, 255, 255);">{rsa,aes_256_cbc,sha256}, which does work with the iOS client. So
the iOS client/Erlang R16B01 server are choosing an EC cipher that then doesn't work. I think you will see the issue if you implement just a basic ssl server and connect with an iOS client. Please let me know if I can provide more information.</span>
</div></div></blockquote><div><br></div><div>I wonder if this somehow may be related to an apparently broken ECDSA implementation</div><div>in Safari. It can be seen that in the list of ciphers you posted DH/ECDHA comes</div><div>first. Did the ciphers priority change for some reason in R16B01, or is it possible</div><div>your R16B01 is linked agains a different version of OpenSSL?</div><div><br></div><div>My apologies if you already considered this, but hope this might help.</div><div><br></div><div>[1] <span style="font-family: '.HelveticaNeueUI'; font-size: 15px; line-height: 19px; white-space: nowrap; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.292969); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: none; "><a href="http://openssl.6102.n7.nabble.com/Apple-are-apparently-dicks-td45512.html">http://openssl.6102.n7.nabble.com/Apple-are-apparently-dicks-td45512.html</a></span></div><div><div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); "><br>--<div>ST4096-RIPE</div><div><br></div></div></div></body></html>