Use of no-deprecated for VC-WIN32 configuration

2005-08-11 Thread C L
Hey all, So having read the NEWS announcement for 0.9.8, I was eager to try re-compiling openssl without the old deprecated functionality. However, util\mk1mf.pl complains about no-deprecated being an unknown option. My system setup is as follows: OS: WinXP SP2 Perl: ActiveState 5.8.4 build

Odd PRNG behavior between 0.9.7g and 0.9.8

2005-08-11 Thread Robert Zilbauer
Hello. I ran into some odd PRNG related errors after switching from OpenSSL 0.9.7g to 0.9.8 on Solaris 2.7 today. I checked through the archives of this mailing list that I could find and I didn't see an answer in the FAQ, but if there's a place I missed please let me know. I'd happily RTFM. Co

RE: Newbie SSL_write question

2005-08-11 Thread David Schwartz
> When I try and write more than 32k I get the following messages... > > - Attempting to write 59266 bytes > - Written 16384 bytes > - Written 16384 bytes > - SSL_ERROR_SYSCALL: error::lib(0):func(0):reason(0) > > I have SSL_load_error_strings() earlier in my code, but don't get any > more

Does anybody know what this file is???

2005-08-11 Thread David Templar
It is like an x509 cert in that it has some plain text along with other non-readable stuff... I have tried asn1parse (with various offsets used) and I get some readable stuff... The file contains stuff relating to an x509 cert that I need to override What exactly is it??? Thanks in adva

Re: apachectl startssl started, but viewing https in browser does not

2005-08-11 Thread dmitrik
CA.pl -sign finally worked. - the other method's of making certificates seemed to work, but I'm not sure if they were actually good certificates. When CA.pl -sign finally worked, the https did too. Thanks for all the helpful responses. -Original Message- From: Jorey Bump <[EMAIL PROTE

Re: corrupt/invalid certificate: could not establish an encrypted connection

2005-08-11 Thread Dr. Stephen Henson
On Thu, Aug 11, 2005, [EMAIL PROTECTED] wrote: > seeing error 8182 > > corrupt/invalid certificate: could not establish an encrypted connection > > when trying to browse to https://ipaddress > > any ideas? > What browser? > also, when tyring to create certificates using CA.pl > > the last

corrupt/invalid certificate: could not establish an encrypted connection

2005-08-11 Thread dmitrik
seeing error 8182 corrupt/invalid certificate: could not establish an encrypted connection when trying to browse to https://ipaddress any ideas? also, when tyring to create certificates using CA.pl the last step, CA.pl -sign does not work. http://www.vanemery.com/Linux/Apache/apache-SSL.html

Re: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-11 Thread Michael Wang
Thanks Andy! Michael On 8/11/05, Andy Polyakov <[EMAIL PROTECTED]> wrote: > > 5. I still needed to change the MLFLAGS and LFLAGS in cedll.mak and > > ce.mak from machine:ARM to machine:thumb. Otherwise, the compiler > > compains about an incompatibility with winsock.lib (winsock.dll), > > which

Re: Newbie SSL_write question

2005-08-11 Thread Michael
On 8/11/05, David Schwartz <[EMAIL PROTECTED]> wrote: > > My code uses blocking sockets, has the SSL_CTX > > SSL_MODE_ENABLE_PARTIAL_WRITE option set and loops on the ssl_read but > > the socket is closed after the first 32k is sent. > > > > Why, if a message block size is 16k, does the first 32

Re: Signature verification problem

2005-08-11 Thread Peter BENKO,VSE IT Sluzby,+421-55-610-2045,+421-903-855532
On Tue, Aug 09, 2005 at 08:54:44PM +0200, Dr. Stephen Henson wrote: > On Tue, Aug 09, 2005, Peter BENKO,VSE IT > Sluzby,+421-55-610-2045,+421-903-855532 wrote: > > > I have problem with signature verification: > > > > When I try to verify the SMIME signed message (hello.txt.p7m - see > > attachm

Re: Replay attack

2005-08-11 Thread Jagannadha Bhattu Gosukonda
>From my understanding of the code, in case of bad record mac an alert is sent to peer. The recipient application gets an error in SSL_read. JB On 8/11/05, BG for OpenSSL <[EMAIL PROTECTED]> wrote: > TLS allows for the detection of a (post-handshake) replay attack > by detecting incorrect values

Re: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-11 Thread Andy Polyakov
5. I still needed to change the MLFLAGS and LFLAGS in cedll.mak and ce.mak from machine:ARM to machine:thumb. Otherwise, the compiler compains about an incompatibility with winsock.lib (winsock.dll), which was linked with machine:thumb. http://cvs.openssl.org/chngview?cn=14356. a. _

OpenSSL on VxWorks

2005-08-11 Thread kyran
Hello, This is a follow up to an earlier post I made with regard to some problems I'm facing in running some code that uses OpenSSL on VxWorks. The same code, with the same certificate files runs on Solaris, Linux and Windows. On VxWorks, however, I get: 30209:error:14094412:SSL routines:SSL3_REA

RE: Newbie SSL_write question

2005-08-11 Thread David Schwartz
> I have a 'problem' that has been reported before, namely that only the > first 32k of my messages are being sent/read by my openSSL > client/server. > > The original post is here: > http://marc.theaimsgroup.com/?l=openssl-users&m=101180918225646&w=2. > > The solution given was to read the man pa