Re: SSL_get_peer_certificate fails with 0.9.8k, works with 0.9.8j

2009-05-01 Thread Kyle Hamilton
s_client is your friend. Especially with the -debug and -showcerts options. As well as -cert and -key and -prexit and -state. -Kyle H On Fri, May 1, 2009 at 3:54 PM, Jeff Davey wrote: > Hi, > > I recently ran into an issue with OpenSSL 0.9.8k returning NULL when calling > SSL_get_peer_certific

SSL_get_peer_certificate fails with 0.9.8k, works with 0.9.8j

2009-05-01 Thread Jeff Davey
Hi, I recently ran into an issue with OpenSSL 0.9.8k returning NULL when calling SSL_get_peer_certificate() after a successful handshake. The issue doesn't occur every time, but often enough. I reverted to OpenSSL 0.9.8j, and haven't been able to replicate the problem. To verify, I again went 0.9

Re: BIO_flush with BIO_pairs?

2009-05-01 Thread Victor Duchovni
On Fri, May 01, 2009 at 10:16:27AM -0700, Nate Leon wrote: > That's what I figured, but then I came across the "WARNING" on the > BIO_new_bio_pair page: > http://www.openssl.org/docs/crypto/BIO_new_bio_pair.html > > "As the data is buffered, SSL_operation() may return with a > ERROR_SSL_WANT_READ

RE: BIO_flush with BIO_pairs?

2009-05-01 Thread Nate Leon
That's what I figured, but then I came across the "WARNING" on the BIO_new_bio_pair page: http://www.openssl.org/docs/crypto/BIO_new_bio_pair.html "As the data is buffered, SSL_operation() may return with a ERROR_SSL_WANT_READ condition, but there is still data in the write buffer. An application