Re: SSL_poll() ???

2003-02-10 Thread Bodo Moeller
On Fri, Feb 07, 2003 at 03:57:17PM +0100, Alexander Biehl wrote: > but, is there no way to use blocking sockets and to use poll() or > select()? When select() or poll() indicate that *some* data is available for reading, there is no guarantee that it is enough data for OpenSSL to continue without

Re: SSL_accept hang

2003-02-10 Thread Bodo Moeller
On Fri, Feb 07, 2003 at 12:15:31PM -0800, David Schwartz wrote: > On Fri, 7 Feb 2003 20:42:50 +0100, Jasper Spit wrote: >> My point was to make clear that your statement that 'it is almost always >> an error to use select() with non blocking sockets' is simply not true. >> I think that might be re

Threads

2003-02-10 Thread Franco Sabini
Hi, We are developing a program on Solaris 8 using gcc. It is a multi threaded server that handle a large number of ssl connections with java applets. Our first versione doesn't set CRYPTO_set_locking_callback and it sometime (once or twice per day) crash. We have defined the locking callback and

Re: undefined symbols in libssl

2003-02-10 Thread Aram Perez
Check is Solaris has an older version of libcrypto already installed. Something similar happens with Mac OSX, see the file PROBLEMS that part of the distribution. Regards, Aram Perez Marco Donati wrote: > Greetings, > > we have posted this a couple of times but never get an answer... > > We ha

Re: Creating self-signed certificates

2003-02-10 Thread Paul Dekkers
Hi, [EMAIL PROTECTED] wrote: Write out database with 1 new entries Data Base Updated Segmentation fault I had this problem in 0.9.7 Use 0.9.6h to create your CA and certs! Well, I can do that, but there is no support for an external-extensions-file in 0.9.6h, is there? I tried to includ

Creating self-signed certificates

2003-02-10 Thread Paul Dekkers
Hi I tried to make self-signed certificates for testing with FreeRadius and Radiator in combination with EAP/TLS and EAP/TTLS (and eventually PEAP). With the radiator certificate example script and the scripts I saw on the net for FreeRadius implementations I keep getting errors creating the ce

Re: Tunneling Client Certs

2003-02-10 Thread Dr. Stephen Henson
On Mon, Feb 10, 2003, Chandrasekhar R S wrote: > It seems I have not explained myself ably. > > I completly understand that Private Keys should and would never be sent > across. > > But assume that you are going through a proxy using SSL. And the proxy has > no capability to verify the certs.

undefined symbols in libssl

2003-02-10 Thread Marco Donati
Greetings, we have posted this a couple of times but never get an answer... We have written an intermediate library for our applications based upon OpenSSL ''libcrypto''. All is OK on all platform (win32, Solaris, Linux) If we try to extent our library with ssl capabilities and include the ''lib

Re: Tunneling Client Certs

2003-02-10 Thread Vadim Fedukovich
On Mon, Feb 10, 2003 at 10:02:30AM +0530, Chandrasekhar R S wrote: > It seems I have not explained myself ably. > > I completly understand that Private Keys should and would never be sent > across. > > But assume that you are going through a proxy using SSL. And the proxy has > no capability to