RE: last data bytes not delivered when read in several small buffers

2009-03-26 Thread David Schwartz
> the application read the first > 1500 bytes, then "select(...)" no more indicates that something has to > be read on the fd. So the OFTP application behind the gateway doesn't > send the new "credit authorisation" because it didn't receive the > complete previous credit. And the sender waits unt

Re: 答复: How to install 2 instances of openssl on the same machine

2009-03-26 Thread Kyle Hamilton
Er... no. If you want to install two separate versions on the same machine, you MUST put them in separate --prefixes. You also need to make sure that each compilation of Apache refers to the correct prefix. (You cannot rely on the system Doing The Right Thing, here, you must compile your own.)

答复: How to install 2 instances o f openssl on the same machine

2009-03-26 Thread shawnlau
Just download openssl-0.9.8i.tar.gz, and install it in a folder what defined all by yourself. Just like /usr/local/openssl, then using the follow commands: tar -zxvf openssl-0.9.8i.tar.gz cd openssl-0.9.8i ./config --prefix=/usr/local/openssl shared threads make make test (if there have no error i

Re: SSL_connect() fails after upgrade from OpenSSL 0.9.7d to OpenSSL 0.9.8j

2009-03-26 Thread Kyle Hamilton
If it is returning SSL_ERROR_SYSCALL, you need to examine the value of errno, possibly with perror(). Basically, the library is returning this because the underlying OS has signalled (via errno) that some system call has failed with an error condition. If you don't understand what could be causin

Re: how to uninstall openSSL Urgent help needed

2009-03-26 Thread The Doctor
On Thu, Mar 26, 2009 at 04:42:41PM -0500, Srinivas Jonnalagadda wrote: > Hi, > > I would like to know how to uninstall openssl from my unix machine. > What machine/box are you running? Linux? BSD? AIX? Sun? > > Thanks, > Srinivas Jonnalagadda > ___

Re: how to uninstall openSSL Urgent help needed

2009-03-26 Thread Kyle Hamilton
This is a -users question, not a -dev question. If openssl was installed from a package provided by or in the format of your OS vendor, uninstall it using the vendor's packaging tools. I've attached a list of files that are installed on my MacOSX machine by 'make install'. (the './' at the begin

Re: SSL_connect() fails after upgrade from OpenSSL 0.9.7d to OpenSSL 0.9.8j

2009-03-26 Thread Srinivas Jonnalagadda
Hi Vivek. How  did u upgrade i would like to know the process like how did you uninstall the previous version and install new version. I am sorry fo  you but i neded some inf on how to do this.   Sincerely, srinivas J -Original Message- From: "Vivek Mathew -X (vivmathe - WIPRO at Cisco)"

how to uninstall openSSL Urgent help needed

2009-03-26 Thread Srinivas Jonnalagadda
Hi, I would like to know how to uninstall openssl from my unix machine. Thanks, Srinivas Jonnalagadda __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenss

SSL_connect() fails after upgrade from OpenSSL 0.9.7d to OpenSSL 0.9.8j

2009-03-26 Thread Vivek Mathew -X (vivmathe - WIPRO at Cisco)
Hi, Our application was previously making use of the OpenSSL 0.9.7d library. Recently we have upgraded to the 0.9.8j version and have re-built both the Client and Server executables. However, after the upgrade we are facing a problem with the client side failing to connect to the server. After

could anybody help me elaborate on the CVE-2009-0590 bug?

2009-03-26 Thread 施威
Hi all, We just ported the openssl-0.9.8j to our hpux 11.11 and 11.23 and 11.31. But here it comes the the openssl-0.9.8k. I really dont know if we have to port the openssl-0.9.8k as we couldn't understand the CVE-2009-0590 bug. So could anybody help me elaborate it ? It would be greate if

openssl for arm platform

2009-03-26 Thread Shankar Marimuthu
Hi, I need a clarification regarding the openssl. I am trying to compile openssl for ARM platform i found there is no support for arm when i checked with the Configure file i tried 0.9.8e, 0.9.8g & 0.9.8i openssl versions. Please let me how can i compile for ARM platform. Regards Shankar M

Re: openssl fips 1.2 / gcc 4.2 patch

2009-03-26 Thread Dr. Stephen Henson
On Thu, Mar 26, 2009, ABDUL BASIT wrote: > Hi Folks, > > I am using the patch provided by > http://people.freebsd.org/~kan/openssl-gcc42.diff to prevent > gcc 4.2.3 issuing warnings on openssl fips 1.2 build such as :- > > -- > p5_pbev2.c: In function 'PKCS5_pbe2_set': > p5_pbev2.c:167: wa

openssl fips 1.2 / gcc 4.2 patch

2009-03-26 Thread ABDUL BASIT
Hi Folks, I am using the patch provided by http://people.freebsd.org/~kan/openssl-gcc42.diff to prevent gcc 4.2.3 issuing warnings on openssl fips 1.2 build such as :- -- p5_pbev2.c: In function 'PKCS5_pbe2_set': p5_pbev2.c:167: warning: function called through a non-compatible type p5_pbev

TLS: last data bytes not delivered when read in several small buffers

2009-03-26 Thread Francis GASCHET
Hello, I've an application (OFTP protocol) which runs over TLS. Actually OFTP is one application and TLS is managed by a gateway application running in a DMZ. The gateway application is linked against OpenSSL libraries version 0.9.8g What occurs: OFTP negotiate a "credit" at start session tim

OpenSSL how to build certificate chain

2009-03-26 Thread Goblin_Queen
Hello, I'm working with a combination of pkcs11-helper and OpenSSL, and I was wondering how I could build a certificate chain from an X509 certificate? I need to be able to get the issuer from the certificate as an object of type X509. I didn't find how this was possible, I only found methods to

How to install 2 instances of openssl on the same machine

2009-03-26 Thread Srinivas Jonnalagadda
Hi, I need to have 2 separate installations of apache2 http server refereing to 2 different versions of openssl. One is using 0.9.8b and the other uses 0.9.8i. How do i install open ssl in such a scenario. Help is urgently needed. Thanks in advance, Regards, Srinivas Jonnalagadda _

Re: Server crash while starting service

2009-03-26 Thread Dr. Stephen Henson
On Thu, Mar 26, 2009, Uma G. Nayak wrote: > That was very clear and great help Kyle!! Even though I had spent time on > Security Policy earlier, the build procedure was not clear, atleast for me, > until now. > > If you wouldn't mind, could you answer one more question of mine? > > I want to use

Re: Server crash while starting service

2009-03-26 Thread Kyle Hamilton
First: You should run vcvars32.bat before doing anything in that window. It's necessary for several reasons, not the least of which is helping the configuration process figure out what it's actually using. Also, you should really upgrade from 0.9.8j to 0.9.8k. (The OpenSSL team recommends always

Re: How to use the ec command

2009-03-26 Thread Kyle Hamilton
You should be using 0.9.8k, as it's the latest. 0.9.8k has EC enabled by default. You should also ensure that the version of openssl that you are using is the one that you compiled. 'which openssl' and 'openssl version' should tell you which one you're using. (Many OS versions, particularly UNI

RE: Server crash while starting service

2009-03-26 Thread Uma G. Nayak
That was very clear and great help Kyle!! Even though I had spent time on Security Policy earlier, the build procedure was not clear, atleast for me, until now. If you wouldn't mind, could you answer one more question of mine? I want to use the libeay32.dll and ssleay32.dll from the above build

Re: OpenSSL version 0.9.8k release

2009-03-26 Thread Dr. Stephen Henson
On Thu, Mar 26, 2009, rajan chittil wrote: > Is this new release openssl 9.8k supports fips capability > It can be linked against the 1.2 validated module. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage

答复: How to use the ec command

2009-03-26 Thread shawnlau
I suggest you to read the INSTALL file that has already contained in the openssl.tar.gz package! This opton I haven’t used before! 发件人: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl. org] 代表 huangjun_cauc 发送时间: 2009年3月25日 10:49 收件人: openssl-users@openssl.org 主题: How to us

答复: [FWD] How to disable SSL

2009-03-26 Thread shawnlau
I think maybe you should install the openssl by manual compile and install it all by yourself. And when you do that, you could remove these cifrates levels below 128 bits. That's just my option! I'm still not very good at openssl skill . -邮件原件- 发件人: owner-openssl-us...@openssl.org [mail

答复: How can I change the limits in openssl

2009-03-26 Thread shawnlau
For your question, I just want to know the environment of what you are using for now! The openssl Just for web? Or for a lot of concurrent connections that user request for their own certificate? 发件人: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl. org] 代表 Sachin Kumar (st