RE: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

2009-05-25 Thread David Schwartz
> Background: the TR-069 client uses the gSoap system that in turn > calls OpenSSL. The communications to the server at HTTP/SOAP > based using SSL or non_SSL. The problems are being experienced in > Linux 2.6.x systems 32-bit and 64-bit, on MIPS and AMD processors; > i.e. both embedded Linux sys

RE: TLS compatibility problem -- can connect to server with NSS but not OpenSSL.

2009-05-25 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of David Woodhouse > Sent: Friday, 22 May, 2009 05:49 > To: openssl-users@openssl.org > Subject: Re: TLS compatibility problem -- can connect to > server with NSS but not OpenSSL. > > On Thu, 2009-05-21 at 22:44 +0100, David Woodhouse wrote: > > I

RE: Openssl : disable sslv2

2009-05-25 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Gaël REGUER > Sent: Monday, 25 May, 2009 10:35 > I cannot disable sslv2 : What makes you think that? > Openssl s_server –no_ssl2 > > Loading ‘screen into random stat – done >

Re: Openssl : disable sslv2

2009-05-25 Thread Kyle Hamilton
Use a MUCH more recent version of OpenSSL. However, accept error 10004 is (on Windows) a "system call interrupted" error, if I am given to understand properly. which means that you ctrl+c'd, you interrupted the system call (accept()) which was waiting for a connection. Not sure what port it was

Re: unresolved symbols when linking with vs2005

2009-05-25 Thread Ger Hobbelt
Answer below... On Mon, May 25, 2009 at 10:38 PM, gary marlow wrote: > perl util/copy.pl "out32\ssleay32.lib" "C:\tmpopenssl\lib" > Copying: out32/ssleay32.lib to C:/tmpopenssl/lib/ssleay32.lib > perl util/copy.pl "out32\libeay32.lib" "C:\tmpopenssl\lib" > Copying: out32/libeay32.lib to C:/tmpope

unresolved symbols when linking with vs2005

2009-05-25 Thread gary marlow
Hello, I have built openssl 098k with visual studio 2005 using the following script (batch file) perl.exe Configure VC-WIN32 --prefix=C:\tmpopenssl no-idea no-mdc2 no-rc5 no-asm no-shared ms\do_ms nmake -f ms\nt.mak nmake -f ms\nt.mak install openssl builds with no problem reporti

OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

2009-05-25 Thread Mark Laubach
Greetings OpenSSL Users list, In the TR-069 WAN management space, the plethora of user devices in the home have to support SSL-based communications with the server (over the WAN). Recently, one of our integration customers has been subjecting their client to WAN congestion simulation using WANem

Openssl : disable sslv2

2009-05-25 Thread Gaël REGUER
Hello, I cannot disable sslv2 : Openssl s_server -no_ssl2 > Loading 'screen into random stat - done > Usign default temp DH Parameters > ACCEPT After i'm block => Ctrl + C > accept error 10004 Information : Openssl version : 0.9.6g 9 Aug 2002 Can you he

error: Unable to link with SSL

2009-05-25 Thread Vududevil
Hi there I'm installing Globus Toolkist from source in a Sun Blade 100 and when it starts building openssl I get this error but I can't find what it is: ** Dependencies Complete checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is s

Re: Question about x509

2009-05-25 Thread Steffen DETTMER
* loody wrote on Fri, May 22, 2009 at 21:51 +0800: > 2009/5/22 David Schwartz : > > > >> Dear all: > >> at the end of letter, I append the the public key I excerpted from my > >> certificate by openssl x509. > >> Since the key is 2048 bits, 256 bytes, I find the length of > >> 00:af:..14:f7 > >

Re: On the fly certificate generation to send to the client

2009-05-25 Thread Steffen DETTMER
* AngelWarrior wrote on Wed, May 20, 2009 at 15:18 -0500: > "I dont need to know with whom I am contacting but after > contact my messages should be private." If you sent your message to just anybody, how can it be private? oki, Steffen --[ End of message ]--

Re: On the fly certificate generation to send to the client

2009-05-25 Thread Steffen DETTMER
* Scott Gifford wrote on Wed, May 20, 2009 at 21:52 -0400: > AngelWarrior writes: > > > but this still requires a CA kind of certificate right.I dont > > know if the client will be have a CA certificate to > > authenticate it.If I am wrong please explain me how it can be > > done. > > Regular SS

building for Arm in wince

2009-05-25 Thread Satish Kumar Raju
Hi All, Has anyone built the OPENSSL for arm in wince, i am using the platform builder of wince6 , I have been getting the following error "tmp32dll_ARMV4I\cryptlib.obj : fatal error LNK1112: module machine type 'X86' co nflicts with target machine type 'THUMB' " it looks like the Crypto is be

Re: Is there XOR , OR and AND operation on BN?

2009-05-25 Thread Victor B. Wagner
On 2009.05.22 at 20:31:44 +0800, sofian sindhi wrote: > > By your suggestion, if I have BN a,1024bits, and b, 2048 bits, the > only way I can do OR is using char *BN_bn2hex(const BIGNUM *a) to > transform each one as 2 char*. > Then do the OR byte by byte? No, you completely misunderstood me.