Re: about ec_point and ec_group

On 2009.06.01 at 22:05:48 +0800, jazeltq wrote: >hello, > where can i find the definition of ec_point_st and ec_group_st >what i found are: >typedef struct ec_point_st EC_POINT; >typedef struct ec_group_st >111 /* >112 EC_METHOD *meth; >113 -- field d

RE: sslv3 alert certificate unknown

> From: owner-openssl-us...@openssl.org On Behalf Of Kyle Hamilton > Sent: Friday, 29 May, 2009 20:29 > "certificate unknown" means that the Java side sent an alert > to state that there's a problem with the certificate, but > it's not going to tell you what it is. It probably it > relates to

OpenSSL fips mode problem

Hi All, When loading OpenSSL FIPS DLLs, and using FIPS_mode_set function, the following error is being returned: 9220:error:2D06906F:FIPS routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does not match nonpic relocated:.\fips\fips.c:236: As i understand it, the DLL could not be loaded to the a

Re: TLS compatibility problem -- can connect to server with NSS but not OpenSSL.

On Sun, May 31, 2009 at 10:13:59AM +0100, David Woodhouse wrote: > That makes a certain amount of sense; thanks. Forgive my ignorance -- is > there a way to ensure that the full trust chain is included in the > certificate itself, rather than having to provide the -CAfile option to > openssl(1) se

undefined symbol with AES_unwrap_key

I'm currently receiving this error and was hoping someone could help me resolve it. When I call the AES_wrap_key or AES_unwrap_key functions I get the following error: hostapd: symbol lookup error: hostapd: undefined symbol: AES_wrap_key I don't have any problems with the EVP_DigestInit, EVP_Dig

Re: does openssl support aes128xcbc?

Hi, Thus wrote vichy (vichy@gmail.com): > but I cannot find aes128xcbc. > Do I miss something or there is really no support of aes128xcbc mode > in openssl? if the answer is the later, where I can find the sample > code of it. AES-XCBC-MAC is not directly supported. However, it's very simp

RE: compiling 1.0.0-beta2 on OpenVMS

I'm compiling 0.9.8k on VAX and experienced the same problem with seed.c causing the compiler to get stuck. Moving it to COMPILEWITH_CC5 resolved the problem. When compiling on ia64 I got an error in VMS.MAR on a BSB 41$ that I think should be a BRB 41$ -Original Message- From: Richar

OpenSSL FIPS mode problem

Hi All, When loading OpenSSL FIPS DLLs, and using FIPS_mode_set function, the following error is being returned: 9220:error:2D06906F:FIPS routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does not match nonpic relocated:.\fips\fips.c:236: As i understand it, the DLL could not be loaded to the a

does openssl support aes128xcbc?

Dear all: I find the openssl so far support following ase cryptos: #define CBC_128_AES 16 #define CBC_192_AES 17 #define CBC_256_AES 18 #define IGE_128_AES 26 #define IGE_192_AES 27 #define IGE_256_AES 28 but I cannot find aes128xcbc. Do I miss something or there is really no support of aes12

about ec_point and ec_group

hello, where can i find the definition of ec_point_st and ec_group_st what i found are: typedef struct ec_point_st EC_POINT; typedef struct ec_group_st 111 /* 112 EC_METHOD *meth; 113 -- field definition 114 -- curve coefficients 115 -- optional generator with associated i

Re: TLS handshake is not intiated when the SSL-ctx object has client certificate and private key on Openssl 0.9.8k

I have seen this problem earlier too .Many of them has reported this problem earlier also. I think this problem is becuase from openssl 9.8k onwards tls extension is enabled by default . My doudt is that if this is the case will the openssl 9.8k will work with any of the older openssl version too

RE: Non-blocking socket, SSL_write returned SSL_WANT_READ, what bad can happen if I call SSL_read when select detects data is available, and then re-call SSL_write with prev data plus more

Asanka Kumara > 1. Called SSL_write with data 'abc' > 2 this returned SSL_ERROR_WANT_READ > 3. Wait on a 'select' until data arrives. > 4. Called SSL_read with this socket. Why are you calling SSL_read? > 5. If SSL_read returns 'SSL_ERROR_NONE' or 'SSL_ERROR_WANT_READ' , then > call SSL_write w

TLS handshake is not intiated when the SSL-ctx object has client certificate and private key on Openssl 0.9.8k

Hi All, I am using OpenSSL 0.9.8.k. We are using the following function to configure device certificate and private key: SSL_CTX_use_certificate_chain_file() and SSL_CTX_use_PrivateKey_file(). When SSL_ctx object is loaded with the client certificate and private key using above 2 functions, the

Non-blocking socket, SSL_write returned SSL_WANT_READ, what bad can happen if I call SSL_read when select detects data is available, and then re-call SSL_write with prev data plus more

1. Called SSL_write with data 'abc' 2 this returned SSL_ERROR_WANT_READ 3. Wait on a 'select' until data arrives. 4. Called SSL_read with this socket. 5. If SSL_read returns 'SSL_ERROR_NONE' or 'SSL_ERROR_WANT_READ' , then call SSL_write with data 'abcdef' (i.e. 'abc' in step 1 plus some more d