Re: 0.9.8b + zlib + "-bugs"?

2006-05-07 Thread Victor Duchovni
On Mon, May 08, 2006 at 12:04:24AM +0200, Dr. Stephen Henson wrote: > > > It looks like I can call SSL_COMP_get_compression_methods(), and if I > > > get a non-null stack, check whether the stack depth is > 0. > > > > > > static void my_set_options(SSL_CTX *ctx) > > > { > > > long

Re: 0.9.8b windows binaries

2006-05-07 Thread William A. Rowe, Jr.
Mike Ehlert wrote: but what I'm after now is some information on any tricks to compiling the DLL's with only the features needed for my application to reduce their size. Typically one links to the static library then, which of course will only link in .obj files that are consumed. One bit of

Re: 0.9.8b + zlib + "-bugs"?

2006-05-07 Thread Dr. Stephen Henson
On Sun, May 07, 2006, Victor Duchovni wrote: > On Sun, May 07, 2006 at 04:28:22PM -0400, Victor Duchovni wrote: > > > It looks like I can call SSL_COMP_get_compression_methods(), and if I > > get a non-null stack, check whether the stack depth is > 0. > > > > static void my_set_options(SSL_C

Re: 0.9.8b + zlib + "-bugs"?

2006-05-07 Thread Victor Duchovni
On Sun, May 07, 2006 at 04:28:22PM -0400, Victor Duchovni wrote: > It looks like I can call SSL_COMP_get_compression_methods(), and if I > get a non-null stack, check whether the stack depth is > 0. > > static void my_set_options(SSL_CTX *ctx) > { > long options = SSL_OP_ALL; > >

Re: 0.9.8b + zlib + "-bugs"?

2006-05-07 Thread Victor Duchovni
On Sat, May 06, 2006 at 10:45:53PM -0400, Victor Duchovni wrote: > Is there any > way to determine at run-time whether the OpenSSL library is a 0.9.8[ab] > release with zlib enabled? > > For Postfix 2.3 (and perhaps even a 2.2 patch at some point) I would like > to use (SSL_OP_ALL & ~SSL_OP_TLS_B

Re: Improving ssl conection time

2006-05-07 Thread Joseph Oreste Bruni
You might want to check out SSL_set_session() and friends. This will allow your programs to reuse a session and avoid the negotiation. On May 7, 2006, at 8:03 AM, Marco Rossi wrote: Dear all, I'm working with an xml messaging protocol where messages are exchaged by means of ssl connections

Re: 0.9.8b + zlib + "-bugs"?

2006-05-07 Thread Victor Duchovni
On Sun, May 07, 2006 at 02:36:10PM +0200, Dr. Stephen Henson wrote: > On Sat, May 06, 2006, Victor Duchovni wrote: > > > > > I'll gladly test any snapshot that addresses this issue. > > OK, please try the next snapshot and/or this patch: > > http://cvs.openssl.org/chngview?cn=15251 > Prelimi

"Random" errors in openssl apps

2006-05-07 Thread Diffenderfer, Randy
Title: "Random" errors in openssl apps Folks, Using RedHat ES3.0 stock openssl RPM, for which "openssl version" yields 'OpensSSL 0.9.7a Fed 19 2003", I get "random" SEGVs while doing pk7out or verify operations using "openssl smime -pk7out" or "openssl smime -verify".  The discouraging thin

Re: 0.9.8b windows binaries

2006-05-07 Thread hunter
On 5/7/06, Mike Ehlert <[EMAIL PROTECTED]> wrote: Oops. looks like I sent a blank reply to the list earlier this morning. My apologies to all. >> Hummm. I downloaded the binary from http://hunter.campbus.com/, I was going to comment that this site does not offer the 0.9.8b binaries, but what I'

openssl speed -engine chil error

2006-05-07 Thread ahmad mirzakhaani
Hi, I installed openssl 0.9.8a from www.sunfreeware.com for my solaris 10 server. I have a nfast's www.nChiper.com Crypto device. This version can make use of nfast module using the CHIL(Cryptographic Hardware Interface Library), because following command says: #openssl engine chil CHIL hardwa

Improving ssl conection time

2006-05-07 Thread Marco Rossi
Dear all, I'm working with an xml messaging protocol where messages are exchaged by means of ssl connections. The client needs to open/close a new connection for every message to sent (the server adopts this policy and it is not possible to change it), so I was trying to understand a little more

Re: 0.9.8b windows binaries

2006-05-07 Thread Mike Ehlert
Oops. looks like I sent a blank reply to the list earlier this morning. My apologies to all. Hummm. I downloaded the binary from http://hunter.campbus.com/, I was going to comment that this site does not offer the 0.9.8b binaries, but what I'm after now is some information on any tricks to com

Re: 0.9.8b windows binaries

2006-05-07 Thread Mike Ehlert
- Original Message - From: "Wai Wu" <[EMAIL PROTECTED]> To: Sent: Saturday, May 06, 2006 2:36 PM Subject: RE: 0.9.8b windows binaries Hummm. I downloaded the binary from http://hunter.campbus.com/, and I am using Visual Studio 2005 C++, and everything works fine. Ofcourse, I have t

Re: 0.9.8b + zlib + "-bugs"?

2006-05-07 Thread Dr. Stephen Henson
On Sat, May 06, 2006, Victor Duchovni wrote: > > I'll gladly test any snapshot that addresses this issue. OK, please try the next snapshot and/or this patch: http://cvs.openssl.org/chngview?cn=15251 Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core d

Re: 0.9.8b + zlib + "-bugs"?

2006-05-07 Thread Marek Marcola
Hello, > Interesting that the initial session is uncompressed, but the resumed > session is... With default configuration (enabled ssl2/3,tls1) OpenSSL client sends SSL2 ClientHello packet (with TLS1 protocol version) which has no support for compression information. > I'll gladly test any snapsh