<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=NL link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span lang=EN-US>We encounter problems when using PSK between a version of stunnel using openssl 1.0 and a version of stunnel using openssl 1.1.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The problem being the following:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>2019.09.16 13:36:28 LOG6[3]: PSK identity not found (session resumption?)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>2019.09.16 13:36:28 LOG7[3]: TLS alert (write): fatal: unknown PSK identity<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>2019.09.16 13:36:28 LOG3[3]: SSL_accept: s3_srvr.c:2845: error:1408B0DF:SSL routines:ssl3_get_client_key_exchange:psk identity not found<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>No problems are encountered when using certificates or when the same versions of stunnel and openssl are used.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>In the latter case neither certificates nor PSK give any problems connecting.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I am sorry if this has been posted before (could not find a similar question)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Can anyone help me with this, please?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>We seem to be getting problems with PSK only when using openssl 1.0 versus openssl 1.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>The openssl and stunnel versions involved are:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>OLD OPENSSL USE SET-UP:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>openssl version<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>OpenSSL 1.0.2r 26 Feb 2019<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></b></p><p class=MsoNormal><b><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>s</span></b><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>tunnel -version<br><b>stunnel 5.55 on powerpc-ibm-aix7.2.2.0 platform<br>Compiled/running with OpenSSL 1.0.2r 26 Feb 2019</b><br>Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>Global options:<br>RNDbytes = 1024<br>RNDfile = /dev/urandom<br>RNDoverwrite = yes<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>Service-level options:<br>ciphers = FIPS (with "fips = yes")<br>ciphers = HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK (with "fips = no")<br><b>curves = prime256v1<br></b>debug = daemon.notice<br>logId = sequential<br><b>options = NO_SSLv2<br>options = NO_SSLv3<br></b>sessionCacheSize = 1000<br>sessionCacheTimeout = 300 seconds<br>stack = 65536 bytes<br>TIMEOUTbusy = 300 seconds<br>TIMEOUTclose = 60 seconds<br>TIMEOUTconnect = 10 seconds<br>TIMEOUTidle = 43200 seconds<br>verify</span><span lang=EN style='mso-fareast-language:NL'> </span><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>= none</span><span lang=EN style='mso-fareast-language:NL'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN>NEW OPENSSL USE SET-UP:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>openssl version<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>OpenSSL 1.1.1c 28 May 2019<o:p></o:p></span></b></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>Stunnel -version<br><b>stunnel 5.54 on powerpc-ibm-aix7.2.2.0 platform<br>Compiled/running with OpenSSL 1.1.1c 28 May 2019<br></b>Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>Global options:<br>RNDbytes = 1024<br>RNDfile = /dev/urandom<br>RNDoverwrite = yes<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>Service-level options:<br>ciphers = FIPS (with "fips = yes")<br>ciphers = HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK (with "fips = no")<br><b>ciphersuites = TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256 (with TLSv1.3)<br>curves = X25519:P-256:X448:P-521:P-384<br></b>debug = daemon.notice<br>logId = sequential<br><b>options = NO_SSLv2<br>options = NO_SSLv3<br></b>sessionCacheSize = 1000<br>sessionCacheTimeout = 300 seconds<br>stack = 65536 bytes<br>TIMEOUTbusy = 300 seconds<br>TIMEOUTclose = 60 seconds<br>TIMEOUTconnect = 10 seconds<br>TIMEOUTidle = 43200 seconds<br>verify = none<o:p></o:p></span></p><p class=MsoNormal><span lang=EN>Both stunnel versions run on the same AIX platform (Identical OS)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN>The setups are:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN>SERVER SET-UP FOR STUNNEL USING OPENSSL 1.0.2.R :<o:p></o:p></span></p><p class=MsoNormal><span lang=EN><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>debug = debug<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>syslog = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>output = /path/to/logfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>log = append<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>pid = /path/to/pidfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>cert = /path/to/cert<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>key = /path/to/key<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAFile = /path/to/CAfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAPath = /path/to/CAdir<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>PSKsecrets = /path/to/PSKfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerSSL]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyChain = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyPeer = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = 0.0.0.0:9999<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = localhost:25250<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerPSKO012]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = 0.0.0.0:9998<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = localhost:25250<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>ciphers = PSK<o:p></o:p></span></p><p class=MsoNormal><span lang=EN><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN>CLIENT SET-UP FOR STUNNEL USING OPENSSL 1.0.2.R :<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>debug = debug<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>syslog = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>output = /path/to/logfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>log = append<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>pid = /path/to/pidfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>cert = /path/to/cert<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>key = /path/to/key<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAFile = /path/to/CAfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAPath = /path/to/CAdir<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>PSKsecrets = /path/to/PSKfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerSSL]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyChain = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyPeer = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = 0.0.0.0:1119<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = localhost:9999<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerPSKO013]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = 0.0.0.0:1118<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = localhost:9998<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>ciphers = PSK<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN>PSKFile for server and client content:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>HkListenerPSKO012:ZOOzMLROn5+Xy6PJ/lwnCgy5lq+Ak7OhOFS2s6vj4OU<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>HkListenerPSKO013:ZOOzMLROn5+Xy6PJ/lwnCgy5lq+Ak7OhOFS2s6vj4OU<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN>SERVER SET-UP FOR STUNNEL USING OPENSSL 1.1.1.c :<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>debug = debug<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>syslog = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>output = /path/to/logfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>log = append<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>pid = /path/to/pidfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>cert = /path/to/cert<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>key = /path/to/key<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAFile = /path/to/CAfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAPath = /path/to/CAdir<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>PSKsecrets = /path/to/PSKfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>sslVersionMin = TLSv1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>sslVersionMax = TLSv1.2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerSSL]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyChain = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyPeer = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = 0.0.0.0:9999<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = localhost:25250<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerPSKO048]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = 0.0.0.0:9998<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = localhost:25250<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>ciphers = PSK<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN>CLIENT SET-UP FOR STUNNEL USING OPENSSL 1.1.1.c :<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>debug = debug<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>syslog = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>output = /path/to/logfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>log = append<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>pid = /path/to/pidfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>cert = /path/to/cert<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>key = /path/to/key<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAFile = /path/to/CAfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAPath = /path/to/CAdir<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>PSKsecrets = /path/to/PSKfile<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>sslVersionMin = TLSv1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>sslVersionMax = TLSv1.2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerSSL]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyChain = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>verifyPeer = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = localhost:4449<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = dreps:9999<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerPSKO047]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept = localhost:4448<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect = dreps:9998<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>ciphers = PSK<o:p></o:p></span></p><p class=MsoNormal><span lang=EN><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN>PSKFile for server and client set-up:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>HkListenerPSKO047:ZOOzMLROn5+Xy6PJ/lwnCgy5lq+Ak7OhOFS2s6vj4OU<o:p></o:p></span></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>HkListenerPSKO048:ZOOzMLROn5+Xy6PJ/lwnCgy5lq+Ak7OhOFS2s6vj4OU<o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'>It goes without saying that only one of the two server set-ups can be active during testing <o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'>Well, that is the end of my’small’ mail </span><span lang=EN-US style='font-size:10.0pt;font-family:"Segoe UI Emoji",sans-serif;mso-fareast-language:NL'>😉</span><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:NL'>Kind regards</span><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'>,<o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#009CDE;mso-fareast-language:NL'>Hannah Koperberg</span></b><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:NL'>, de Volksbank in the Netherlands</span></b><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#009CDE;mso-fareast-language:NL'><o:p></o:p></span></b></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=652 style='width:489.05pt;border-collapse:collapse'><tr><td width=43 style='width:32.25pt;padding:0cm 0cm 0cm 0cm'></td><td width=41 style='width:30.75pt;padding:0cm 0cm 0cm 0cm'></td><td width=43 style='width:32.25pt;padding:0cm 0cm 0cm 0cm'></td><td width=42 style='width:31.5pt;padding:0cm 0cm 0cm 0cm'></td><td width=90 style='width:67.5pt;padding:0cm 0cm 0cm 0cm'></td><td width=393 style='width:294.8pt;padding:0cm 0cm 0cm 0cm'></td></tr></table><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#000066;mso-fareast-language:NL'><o:p> </o:p></span></b></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#000066;mso-fareast-language:NL'><o:p> </o:p></span></b></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>