Re: SSL_MODE_AUTO_RETRY and non-blocking sockets

2004-01-16 Thread Joseph Bruni
On Jan 16, 2004, at 8:26 PM, David Schwartz wrote: The AUTO_RETRY flag disables a case where the SSL/TLS code would signal a retry even though the underlying transport did not during a session renegotiation. This is there to support some applications which brokenly use select() and blocking I/O.

Re: Win32 OpenSSL Updates/Announcements...

2004-01-16 Thread Thomas J. Hruska
At 08:00 AM 1/13/2004 -0500, John S. Wolter writeth: >Thomas: > >Thank you for the Win32 information, I just joined the list and had >assumed Win32 announcements would be included but I guess I'll have to >join the Win32 list. > >Second please add square brackets around [Win32 OpenSSL] to help >

RE: SSL_MODE_AUTO_RETRY and non-blocking sockets

2004-01-16 Thread David Schwartz
> > The AUTO_RETRY flag disables a case where the SSL/TLS code would > > signal a retry even > > though the underlying transport did not during a session > > renegotiation. This is > > there to support some applications which brokenly use select() and > > blocking I/O. > Now you have me curious:

Re: SSL_MODE_AUTO_RETRY and non-blocking sockets

2004-01-16 Thread Joseph Bruni
On Jan 16, 2004, at 5:57 PM, Dr. Stephen Henson wrote: On Fri, Jan 16, 2004, Joseph Bruni wrote: After reading the man page for SSL_CTX_set_mode, I have to ask, what happens if you set AUTO_RETRY with a non-blocking socket? The AUTO_RETRY flag disables a case where the SSL/TLS code would signal

Re: SSL_MODE_AUTO_RETRY and non-blocking sockets

2004-01-16 Thread Dr. Stephen Henson
On Fri, Jan 16, 2004, Joseph Bruni wrote: > After reading the man page for SSL_CTX_set_mode, I have to ask, > what happens if you set AUTO_RETRY with a non-blocking socket? > The AUTO_RETRY flag disables a case where the SSL/TLS code would signal a retry even though the underlying transport did

SSL_MODE_AUTO_RETRY and non-blocking sockets

2004-01-16 Thread Joseph Bruni
After reading the man page for SSL_CTX_set_mode, I have to ask, what happens if you set AUTO_RETRY with a non-blocking socket? __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: new CA & crlDistributionPoints

2004-01-16 Thread Dr. Stephen Henson
On Fri, Jan 16, 2004, Charles Harmon wrote: > Hello all, > > I am desperately trying to get crlDistributionPoints stamped to my > (server/client) certificates. For some reason it does not get added to > any certificate I generate. I have read through the openssl.txt file > and it just says to a

RE: new CA & crlDistributionPoints

2004-01-16 Thread Charles Harmon
It is set to /usr/local/ssl/openssl.cnf I even tried to use the -extensions usr_cert to specify the section to pull the crlDistributionPoints parameter. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bommareddy, Satish (Satish) Sent: Friday, January 1

RE: new CA & crlDistributionPoints

2004-01-16 Thread Bommareddy, Satish (Satish)
what is the env variable OPENSSL_CONF pointing to? if not defined then is the change you made in the "/usr/local/ssl/openssl.cnf"??? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Charles Harmon Sent: Friday, January 16, 2004 11:47 AM To: [EMAIL PROTECTED] S

new CA & crlDistributionPoints

2004-01-16 Thread Charles Harmon
Hello all, I am desperately trying to get crlDistributionPoints stamped to my (server/client) certificates. For some reason it does not get added to any certificate I generate. I have read through the openssl.txt file and it just says to add the following to the x509_extensions section: crlDist

Handshake returns error

2004-01-16 Thread Alexis Lefort
Hi all, I have a problem with my handshake. When the server does not require the client certificate, all works fine. But when it requires the client certificate, It stops in the handshake and return me that error: 1:error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returne