Re: OpenSSL file destinations

2004-01-19 Thread John S. Wolter
John: Yes, OpenSSL was installed as part of SUSE 8.1 standard install.  Thanks for the heads up. [EMAIL PROTECTED] wrote: I'm not sure why you'd want to run the query against a package that isn't installed (that's what the p option does). Surely he wants to check it is installed, then use

Re: determining incoming connection address using BIOs

2004-01-19 Thread Joseph Bruni
int sk; BIO_get_fd(bio,&sk); getpeername(sk,&address,&address_len); On Jan 19, 2004, at 4:44 PM, Zac Hansen wrote: I'm trying to figure out how to get the client address/port when using BIOs to accept new connections. __ OpenSS

Re: Alternative CRL formats

2004-01-19 Thread Rich Salz
> How do we escape from this deadlock? Well, at least there is the option of taking things into own's own hands and coding it up. Granted, that's not always feasible, esp for digging into the depths of openssl code. :( On the other hand, at least two core developers are looking for financial sup

determining incoming connection address using BIOs

2004-01-19 Thread Zac Hansen
I'm trying to figure out how to get the client address/port when using BIOs to accept new connections. I guess I can use normal accept() to od this, but I already have everything else written and working and I'd rather not go back and mess with it if there's an easy way I'm missing. Thanks.

Re: Alternative CRL formats

2004-01-19 Thread Michael Helm
Class -- compare and contrast -- Rich Salz writes: > > Well, make that hard choice: do you want to have your software fail > > when an up-to-date CRL is not available, or do you want to make your > > software susceptible to a denial-of-service attack on the CRL distro > > process? > > Exactly. S

Re: NON-BLOCKING I/O

2004-01-19 Thread Joseph Bruni
No. My understanding of ZERO_RETURN means that the SSL session has been closed down by the other end. I've been doing some experimenting, and a no-data condition results in a WANT-READ. I just want to know if that means I'm stuck, unable to send data, until something arrives. -Original M

NON-BLOCKING I/O

2004-01-19 Thread Joseph Bruni
As a quick follow-up to my previous question. If I call SSL_read and receive a WANT result, does that also preclude me from calling SSL_write if the socket is currently writable? __ OpenSSL Project

Re: NON-BLOCKING I/O

2004-01-19 Thread KOverton
Somebody please correct me if I'm wrong, but I believe in that case you'd receive a separate error, SSL_ERROR_ZERO_RETURN.  I have, for example, experienced conditions where the end of data transmission occurred precisely on my reading buffer size.  So the next SSL_raed() that I attempt results in

Re: SSL_state_string outputs

2004-01-19 Thread Lutz Jaenicke
On Mon, Jan 19, 2004 at 09:23:59PM +0800, Patrick Coleman wrote: > Thanks for the help. I had a look through the headers, and found an (undocumented?) > function > SSL_is_init_finished(). This seems to do what I want. SSL_get_error, of course, > would work as well. > (Though I might to have to ke

NON-BLOCKING I/O

2004-01-19 Thread Joseph Bruni
I have yet another question regarding non-blocking I/O and the OpenSSL library. With normal sockets that have been set to non-blocking, an attempt to read when no data is present will return an EAGAIN. In my case, no data on a read is fine, since that just means there are no messages to pick up.

[leadership/opensource] invitation to online survey

2004-01-19 Thread NeXTstep
Dear all, I have just put online a survey addressing the topic of "good leadership in the open-source environment". Basically, my objective is to identify the personal conceptions of good leadership that reside in the minds of the contributors, in terms of leaders' _behaviors_ and _character

Distinguished names

2004-01-19 Thread Raymund Tump
Hi all, I trying to decode the issuer and subject of X509 certs into distinguished names. Mainly I'm doing this: e = X509_NAME_get_entry(x->cert_info->issuer, i); int nid = OBJ_obj2nid(e->object); switch(nid) I think there must be a better way to do this. Additionally

Re: Prob: multiple encryptions from openssl_public_encrypt in PHP 4.3.4, OpenSSL 0.9.7c (2nd try...)

2004-01-19 Thread Dr. Stephen Henson
On Mon, Jan 19, 2004, IndiWEB - Jochen Roendigs wrote: > Hi, > > if I encrypt the same data with the same public key I get different > encrypted data back which I (in 9 of 10 cases) cannot decrypt with my > private key. Here's the details: > > $string="Some Important Data"; // <- This is what I

Prob: multiple encryptions from openssl_public_encrypt in PHP 4.3.4, OpenSSL 0.9.7c (2nd try...)

2004-01-19 Thread IndiWEB - Jochen Roendigs
Hi, if I encrypt the same data with the same public key I get different encrypted data back which I (in 9 of 10 cases) cannot decrypt with my private key. Here's the details: $string="Some Important Data"; // <- This is what I want to encrypt $fp=fopen ("server.crt","r"); // read the public key $