Re: SSL_CTX_use_certificate_chain_file failure

2007-08-29 Thread Marek Marcola
Hello, > I am trying to use SSL_CTX_use_certificate_chain_file to load a > chained certificate, but it return non-1. The wired thing is that it > doesn't print any error, I try everything ERR_print_errors_fp(), > Err_get_error(), etc. > > The first thing I want to rule out is that the file can

SSL_CTX_use_certificate_chain_file failure

2007-08-29 Thread Yolanda Liu \(liuyu\)
Hi, all: I am trying to use SSL_CTX_use_certificate_chain_file to load a chained certificate, but it return non-1. The wired thing is that it doesn't print any error, I try everything ERR_print_errors_fp(), Err_get_error(), etc. The first thing I want to rule out is that the file can't be fou

Re: SSL_connect returns -1 on HPUX

2007-08-29 Thread Marek Marcola
Hello, > and now to switch to new gcc compiler you should only set: > $ export PATH=/usr/local/gcc-4.1.1/bin Should be: $ export PATH=/usr/local/gcc-4.1.1/bin:$PATH Best regards, -- Marek Marcola <[EMAIL PROTECTED]> _

Re: SSL_connect returns -1 on HPUX

2007-08-29 Thread Marek Marcola
Hello, > Thanks for the quick response. Unfortunately I run into a compilation > error when trying to compile in debug mode (I had not compiled the > libraries before as I obtained precompiled libraries). Unfortunately > I am stuck on gcc 2.8.1 and can't install a new compiler and I'm > afraid th

Re: SSL_connect returns -1 on HPUX

2007-08-29 Thread Jason Proctor
yuck. ok in that case just try getting rid of the optimiser flags? worked for me. that's all i can suggest... Thanks for the quick response. Unfortunately I run into a compilation error when trying to compile in debug mode (I had not compiled the libraries before as I obtained precompiled

Re: SSL_connect returns -1 on HPUX

2007-08-29 Thread Andrew Hale
Thanks for the quick response. Unfortunately I run into a compilation error when trying to compile in debug mode (I had not compiled the libraries before as I obtained precompiled libraries). Unfortunately I am stuck on gcc 2.8.1 and can't install a new compiler and I'm afraid that may prevent me

RE: SSL_peek vs. SSL_pending...

2007-08-29 Thread David Schwartz
> Actually, this page says: > "A descriptor shall be considered ready for reading when a > call to an input function with O_NONBLOCK clear would not > block, whether or not the function would transfer data > successfully." Right, that is a hypothetical concurrent read. > Is that not to say that

Re: SSL_connect returns -1 on HPUX

2007-08-29 Thread Jason Proctor
this is exactly the symptom i got when the optimiser on my compiler got a few things confused and SSL_connect() was thinking a simple allocation had failed when it had in fact succeeded. i got round that by building a library without the optimiser flags. can you do a regular ./configure? if so

SSL_connect returns -1 on HPUX

2007-08-29 Thread Andrew Hale
I am trying to open a client ssl connection and SSL_connect() is returning -1 on my HPUX port of my code. Note this exact code currently works (connects successfully and can send and receive data) on Linux, SunOS, INTERIX(Windows Services for UNIX). What I know SSL_connect() returns -1 errno is 0

Re: SSL_peek vs. SSL_pending...

2007-08-29 Thread Yves Rutschle
On Wed, Aug 29, 2007 at 08:07:04AM -0700, David Schwartz wrote: > > Yes, and additionally, there may be implementations supporting a > > select function but at the same time not even conforming the > > standard, I think such `TCP stacks' exist. > > BTW, which standard would it be, `4.4BSD'? > > I'

RE: Problem building Windows 64-bit

2007-08-29 Thread Shaw Graham George
FYI. I found the problem. Our build environment had the following environment variable set: LINK=/manifest:no Removing this environment variable solved the problems. G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaw Graham George Sent: 24 Aug

RE: SSL_peek vs. SSL_pending...

2007-08-29 Thread David Schwartz
> Hi! > > * David Schwartz wrote on Tue, Aug 28, 2007 at 08:56 -0700: > > > I think it is important to note that a blocking read usually > > > should return if one single byte is available (even if more had > > > been requested) > > > > Correct. > > > > > and a blocking write should return as soon

Re: how to avoid "No client certificate CA names sent" with s_server?

2007-08-29 Thread Marek Marcola
Hello, > both with openssl, I am trying to have a server and client that perform > client certificate authentication. > > So, I start the server as follows: >openssl s_server -www -key /dir/server-key.pem -cert /dir/server-cert.pem > -CAfile /dir/cacert.pem -state > > and as per the previous

Re: GOST in openssl - SSL

2007-08-29 Thread Victor B. Wagner
On 2007.08.29 at 09:46:11 +0200, Andr? Ziermann wrote: > Hello all, > > I was playing with a snapshot of openssl of July 26th to learn more about > running SSL with GOST ciphers. > > So I tried to start an SSL server (openssl s_server) with a GOST2001 key and > a self signed certificate. > It

Re: SSL_peek vs. SSL_pending...

2007-08-29 Thread Steffen DETTMER
Hi! * David Schwartz wrote on Tue, Aug 28, 2007 at 08:56 -0700: > > I think it is important to note that a blocking read usually > > should return if one single byte is available (even if more had > > been requested) > > Correct. > > > and a blocking write should return as soon as at > > least o

GOST in openssl - SSL

2007-08-29 Thread André Ziermann
Hello all, I was playing with a snapshot of openssl of July 26th to learn more about running SSL with GOST ciphers. So I tried to start an SSL server (openssl s_server) with a GOST2001 key and a self signed certificate. It does not work, saying that the certificate type is unknown. When looking