Error in handshake: Get client hello B

2000-06-29 Thread Amit Chopra
Hi, Some time back I had posted a mail on the same subject, but had got no response. Now that I am tuning my application for performance this issue has come up again. When my app comes up I create a pool of SSL structures (using SSL_new)that I intend to reuse for the connections as follows:

Re: Bug relating to /dev/urandom and RAND_egd in libcrypto.a

2000-06-29 Thread Louis LeBlanc
I have to admit that I am just putting my 2 cents in at the tail of this discussion, and I did miss some of the earlier posts in this thread, but my recent experience with OpenSSL client coding may shed some light here. The project involved an https load generator - primarily used for correctness

RE: memory leaks in openssl - urgent.......

2000-06-29 Thread Damien Miller
On Thu, 29 Jun 2000, Richard Levitte - VMS Whacker wrote: > Hey! > > Repeating your message x times doesn't solve anything. On the > contrary, it may piss people off, and then I'll just say "happy > isolation!" to you. I have received yours about 8 times too - looks like a mailing list burp.

SSL_Connect problem on win32

2000-06-29 Thread Frankie Fong
Hi There, I am running into a problem getting SSL_connect() to work on win32. It is not the PRNG problem because RAND_status() returns 1. After SSL_connect() returns -1, the call SSL_get_error() returns 2 which translates to "system lib". I tried both 0.9.5 and 0.9.5a and they both give me the

RE: memory leaks in openssl - urgent....... latest ERR_remove_state() reduced some of them but not all...

2000-06-29 Thread Arora Meenakshi
Title: RE: memory leaks in openssl - urgent... latest ERR_remove_state() reduced some of them but not all... hello i would suggest u all to replace the ERR_remove_state() in ur crypti\err.c file, with the foll. one(if don't have the latest one). it would reduce many of ur memory leaks. t

RE: memory leaks in openssl - urgent.......

2000-06-29 Thread Arora Meenakshi
Title: RE: memory leaks in openssl - urgent... hello i tried to build my application with the latest function ERR_remove_state() from the snapshot from openssl site , as suggested , but still the memory leak remains as such..the new function looks like void ERR_remove_state(unsigned long

Re: memory leaks in openssl - urgent.......

2000-06-29 Thread Dr Stephen Henson
> Arora Meenakshi wrote: > > hello > Please reply to this mail if anyone has any suggestions. i have posted > this question a lot of times but no success so i am again giving it a > try. > > i am running my openssl code in bounds checker & i am getting the > memory leaks in*CRYPTO_malloc(int num

RE: memory leaks in openssl - urgent.......

2000-06-29 Thread Arora Meenakshi
Title: RE: memory leaks in openssl - urgent... hello Pls. if u could tell me which function should i call to free SSL_METHOD structure??? thanx meenakshi -Original Message- From: Taral [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 29, 2000 2:30 PM To: [EMAIL PROTECTED] Cc: [EMA

RE: memory leaks in openssl - urgent.......

2000-06-29 Thread Richard Levitte - VMS Whacker
Hey! Repeating your message x times doesn't solve anything. On the contrary, it may piss people off, and then I'll just say "happy isolation!" to you. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \

RE: memory leaks in openssl - urgent.......

2000-06-29 Thread Taral
On 29 Jun, Arora Meenakshi wrote: > hello > just a suggestion.. > i have found that even if i call the > ctx = SSL_CTX_new (meth); > followed by no other calls to openssl & then clean up the stuff > i still get this memory leak > meenakshi Did you free the SSL_METHOD structure?

RE: memory leaks in openssl - urgent.......

2000-06-29 Thread Arora Meenakshi
Title: RE: memory leaks in openssl - urgent... i don't think i repeated my question (x > 1) times , yes i asked the same question a week back , waited for a week , no response & then thought of reposting with a clear indication that's its already posted did i do anything wrong? so

RE: memory leaks in openssl - urgent.......

2000-06-29 Thread Arora Meenakshi
Title: RE: memory leaks in openssl - urgent... hello just a suggestion.. i have found that even if i call the   ctx = SSL_CTX_new (meth); followed by no other calls to openssl & then clean up the stuff i still get this memory leak meenakshi -Original Message- From:

Re: Must certificates be stored in the working directory?

2000-06-29 Thread Lutz Jaenicke
On Thu, Jun 29, 2000 at 04:18:53PM +0100, [EMAIL PROTECTED] wrote: > Hi all again > > I found a strange behaviour when loading CA certificate by calling the > following functions. > > I find that if my CA certificate is not in working directory the app will > not find it although I submit the

RE: ERR_print_errors_ft(stderr) fails

2000-06-29 Thread Andrey Romanov
This could be stupid question, but did you sure stderr is initialized (i.e. your application is CONSOLE one)? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Roger Furtenheim Sent: Thursday, June 29, 2000 11:40 AM To: [EMAIL PROTECTED] Subject: ERR_print_

Re: client authentication

2000-06-29 Thread Lutz Jaenicke
On Thu, Jun 29, 2000 at 11:52:54AM +0200, Albert Serra wrote: > Sorry, this mail will be long with a C code program attached. If you > don't want to read, it dooesn't matter, but if somebody want to help me > and read it and try to solve my problem, tkank you in advance. > > The question is: as

RE: ERR_print_errors_ft(stderr) fails

2000-06-29 Thread Francis Delhaye
Got the same problem with the same config. I by-passed it by just duplicating the source code for ERR_print_errors_fp in my own code. Yours, Francis > > Trying to get ERR_print_errors_fp(stderr) to work but it fails. > > I'm using MS visual C++ on Win2000. > > Application Error returned: >

client authentication

2000-06-29 Thread Albert Serra
Sorry, this mail will be long with a C code program attached. If you don't want to read, it dooesn't matter, but if somebody want to help me and read it and try to solve my problem,  tkank you in advance. The question is: as I have written in my previous mail, I have modified the cli.cpp and serv

RE: ERR_print_errors_ft(stderr) fails

2000-06-29 Thread Wirta, Ville
Trying to get ERR_print_errors_fp(stderr) to work but it fails. I'm using MS visual C++ on Win2000. Application Error returned: The memory could not be "written". Can anyone tell me what is wrong?!! Thanks, Roger I don't know what the problem might be, but I'm all ears, if someone has

ERR_print_errors_ft(stderr) fails

2000-06-29 Thread Roger Furtenheim
Trying to get ERR_print_errors_fp(stderr) to work but it fails. I'm using MS visual C++ on Win2000. Application Error returned: The memory could not be "written". Can anyone tell me what is wrong?!! Thanks, Roger Get free

Re: CSR process

2000-06-29 Thread Gao Yuhang
See FAQ. Hazel > > Please point me towards the documentation for the Certificate Signing > Request for OpenSSL. > > Thanks > > - > For every action there is an equal > and opposite government program. > > http://3522508374/ > -

Re: User Certificate

2000-06-29 Thread Gao Yuhang
Try SSLDisable to turn off SSL, or SSLVerifyClient 0 to turn off client cert requesting. Hazel > > Quick question: What is the directive to turn off the requirements for a > User Certificate. I get > a message each time connecting. I have the following set: > > SSLVerifyClient 3 > SSLVerifyDe

Help generating a server.crt file?

2000-06-29 Thread Don Fike
Hello, I am using openssl-0.9.5a on Windows 2000 and am having a difficult time generating a signed server.crt file for use with mod_ssl and Apache. Following the steps from the mod_ssl FAQ chapter 6 I get to the "openssl ca" step and die as stated in the fact. I then try to use the CA.pl script

RE: Legality - just heated up

2000-06-29 Thread Harry W. Waddell
On Wed, 28 Jun 2000 [EMAIL PROTECTED] wrote: > Now, it is possible that RSA just _might_ launch a frivolous lawsuit with > the intention of trying to scare people away from using openssl (and hense > paying licensing fees to RSA). There are many lawsuits of this nature. > If so, some poor smuck

Re: Legality - just heated up

2000-06-29 Thread Douglas Wikström
hello. > You don't play poker do you. There is not way that RSA has any claim to > openSSL at all and outside of the US they have no claim to patent > protection either. Of course, if you were a salesman sitting behind an > RSA desk and you had someone dumb enough to ask - what do you think the