SSL_ERROR_SSL: error:1409441B:SSL routines:SSL3_READ_BYTES:tlsv1 alert decrypt error

2005-02-17 Thread Manu Narang
Hi, OS: Linux-Suse 9.0 Ent.Server I am creating a webservice in C++ using gSOAP 2.6.2 with OpenSSL-v0.9.7e. It is a standalone application. Client authentication is enabled. The first request works and command executes successfully, but the second request(and subsequent) fails with the following

RE: Renegotiation with reader and writer threads.

2005-02-17 Thread Kumar, Sunil
I apologize for the late reply but I got pulled onto something else. I did some tests by enveloping the calls to ssl read and ssl writes by mutex. My re-negotiation still fails. Eventually I traced it down to where it was failing. File : s3_pkt.c. Function: ssl3_read_bytes(); (I hope that the f

Re: Memory Growth during multi-threaded connections

2005-02-17 Thread Dr. Stephen Henson
On Thu, Feb 17, 2005, Haney John-CJH043 wrote: > I'm seeing the CPU usage increase when running a multi-threaded application > doing many connections. This appears to be a function of the number of > connections which have been established AND the rate at which new > connections are being establi

Apache/SSL prob.

2005-02-17 Thread Keith H. Christoffers, Ph.D.
I have HTTPS set up for my web server (Apache 1.3.33). Apache in windows server 2K crashes frequently with error:--[Thu Feb 10 10:37:26 2005] [crit] (10038)An operation was attempted on something that is not a socket: Parent: WSADuplicateSocket failed for socket 320.[Thu Feb 10 10:37

Memory Growth during multi-threaded connections

2005-02-17 Thread Haney John-CJH043
Title: Message I'm seeing the CPU usage increase when running a multi-threaded application doing many connections.  This appears to be a function of the number of connections which have been established AND the rate at which new connections are being established.  The CPU graph is v

RE: bad record mac in handshake

2005-02-17 Thread Frédéric Donnat
Hi, I remember some error like this, when implemeting SSL in java and testing whith openssl. This can be due to a bad use of encryption/decryption (i advise you to check if data before encrption are the same as the one after decryption). Fred -Original Message- From: [EMAIL PROTECTE

RE: ENGINE implementaion done but facing errors

2005-02-17 Thread Frédéric Donnat
Hi, Just take a look at man engine.. ;) We already encouter this probleme when implementing our one ENGINE for our NSCrypto board, especially xhen adding symmetric ciphering.. The error you describe "could" comes from a bad symmetric enc/dec. A "bad mac record with READ" sounds like openssl de

Re: Moving openssl servers

2005-02-17 Thread Bernhard Froehlich
Adrian Chow wrote: Hi, I got a question regarding migrating servers. I have a root CA running openssl. And I want to move it to another server. The current root CA have already create and signed a lot of certificates. My concern is the procedure to take so that when the new server is up and