Re: SSL_write retruns with SSL_ERROR_WANT_WRITE on a non-blocking socket. Do I need to re-insert the same data when socket is ready.

Thanks for the replys ! Experimently I found that on non-blocking socket when SSL_write is returned with SSL_ERROR_WANT_WRITE, If the same data is not re-inserted then there will be data loses in other side. So the *same data should be re-inserted when 'select' detects that socket is wr

Re: Handshake fails on HPUX IA64 Release bits

Further investigation suggests that the issue is with optimization of s3_pkt.c . build the library by keeping O3 optimization for all .c file and no optimization for s3_pkt.c , the handshake was successful it now means that there is some issue in s3_pkt.c code which fails because of optimizati

[no subject]

hello, If there is a large file, I want to use BIO_read to read it to buff[4096] in a loop, but i found it start from the second loop, BIO_read from the file begining. I use BIO_seek to solve it. But it not work. Is there any good suggestion ? Thank you _

Re: specific cert extensions needed for smartcards?

Grrr - and I find the answer within minutes of sending this! As always, the hardest part with using Google is to find the right words to search for. Anyway, Microsoft have whitepapers on using 3rd-party CAs for smartcards, and so using certutil I was able to initialize our AD so that it would wor

Problem with s_client and no certificates

I am testing a server that supports encryption without certificates. Build is 0.9.8k. When I test it with 'openssl s_client -connect host:port', openssl throws the following error: 3780:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:.\ssl\s23_clnt.c:596: My SS

RE: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

> Hi Victor, > > One Linux is Fedora 5, the other is another embedded Linux > running on MIPS, > both are 2.6.x vintage and therefore may share the same networking stack > heritage. However, on both separate systems: > > App+gSoap+TCP/IP+50% packet loss congestion => works fine > > App+gSoap+Open

Re: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

Hi Victor, One Linux is Fedora 5, the other is another embedded Linux running on MIPS, both are 2.6.x vintage and therefore may share the same networking stack heritage. However, on both separate systems: App+gSoap+TCP/IP+50% packet loss congestion => works fine App+gSoap+OpenSSL+TCP/IP+50% pac

Re: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

On Wed, May 27, 2009 at 02:35:23PM -0700, Mark Laubach wrote: > Thanks Victor and Kyle, > > The gSoap version being used implemented the fcntl() method. If a non-blocking file-descriptor blocks on a read(2) system call, you should be seeking help from the O/S vendor. OpenSSL is irrelevant in thi

Re: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

Thanks Victor and Kyle, The gSoap version being used implemented the fcntl() method. Mark On 5/27/09 1:40 PM, "Victor Duchovni" wrote: > On Wed, May 27, 2009 at 12:57:26PM -0700, Kyle Hamilton wrote: > >> Is it open()ed as O_NONBLOCK, or is it ioctl()'d to O_NONBLOCK? I >> believe it require

Re: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

On Wed, May 27, 2009 at 12:57:26PM -0700, Kyle Hamilton wrote: > Is it open()ed as O_NONBLOCK, or is it ioctl()'d to O_NONBLOCK? I > believe it requires ioctl. I don't believe that socket(2) supports O_NONBLOCK. So generally sockets are born blocking, though accepted(2) sockets are born non-bloc

Re: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

Is it open()ed as O_NONBLOCK, or is it ioctl()'d to O_NONBLOCK? I believe it requires ioctl. -Kyle H On Wed, May 27, 2009 at 10:52 AM, Mark Laubach wrote: > On 5/26/09 9:40 PM, "David Schwartz" wrote: > >> Make sure the connections are in fact set non-blocking. Make sure you don't >> refuse t

Convert SSH2 to PEM/DER

Hello, I have a question regadring conversion of a SSH2 key to either a pem or der file. Is this possible only using OpenSSL? Or do I first need to convert the SSH2 key to something else before I can convert it to pem/der? Thanks for helping. The key is: BEGIN SSH2 PUBLIC KEY Com

Re: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

On 5/26/09 9:40 PM, "David Schwartz" wrote: > Make sure the connections are in fact set non-blocking. Make sure you don't > refuse to perform an operation unless the SSL state machine has specifically > directed you to do so. > > Note that you cannot, either with or without SSL, make a connectio

Re: OpenSSL and kernel __read_nocancel() blocking under heavy network congestion

On 5/26/09 7:43 PM, "Geoff Thorpe" wrote: > If the sockets aren't being set up correctly, it's likely to be the > layer above openssl - ie. gSoap. Perhaps run this issue by them? > > Regards, > Geoff Thanks Geoff, gSoap opens the connection as non-blocking. Having said that and the responses

RE: unresolved symbols when linking with vs2005

My bad. Had to add the library names in the additional dependency box of the link properties > Date: Mon, 25 May 2009 23:21:44 +0200 > Subject: Re: unresolved symbols when linking with vs2005 > From: g...@hobbelt.com > To: openssl-users@openssl.org > > Answer below... > > On Mon, May 25, 2009