OpenSSL compile flags

2006-01-03 Thread Ryan B. Lynch
When building OpenSSL version 0.9.7i (and all prior versions that I've seen) on Linux, the compiler flags passed to 'gcc' include: "-O3 -fomit-frame-pointer -mcpu=pentium" This occurs even when the output of `uname -m` and `arch` are "i486". I have a few machines with hacked 'uname' and 'ar

Re: no EVP_dup?

2006-01-03 Thread Arno Garrels
Perry L. Jones wrote: > How do I dup a private key there is an X509_dup but I don't see a > EVP_PKEY_dup ? Good question, I missed that feature as well. > Thanks, > Perry > __ > OpenSSL Project ht

no EVP_dup?

2006-01-03 Thread Perry L. Jones
How do I dup a private key there is an X509_dup but I don't see a EVP_PKEY_dup ? Thanks, Perry __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@

Re: SSL_accept error... need help

2006-01-03 Thread Bernhard Froehlich
Samy Thiyagarajan wrote: hi, I am testing a basic (an echo)TLS server with the openSSL client s_client. I get the following error [...] Have you checked the samples available on http://www.opensslbook.com/code.html ? If I remember it right there are code samples for a SSL server which mi

Re: regarding usage of SSL_CTX in server

2006-01-03 Thread Peter Sylvester
jimmy wrote: Peter Sylvester wrote: It happened that I played with this a bit. It is not just that you have a list of servers in one context, all parameters of the server e;g. requirements for user certs etc can be different, so a separate SSL_CTX seems useful. does this theoretically rule o

SSL_accept error... need help

2006-01-03 Thread Samy Thiyagarajan
hi, I am testing a basic (an echo)TLS server with the openSSL client s_client. I get the following error   server side : SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:888 client side: SSL_23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:489 I use SSLv23 as my method in the context

RE: a question about building openssl

2006-01-03 Thread Airey, John
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of George R Goffe > Sent: 30 December 2005 22:09 > To: openssl-users@openssl.org > Subject: a question about building openssl > > Howdy, > > I have looked a little on the web sites for the answer to this