Re: OpenSSL 0.9.8m-beta1 release (Build Broblem)

2010-01-25 Thread So Gerald
I built it with VC-Win32 and got a problem: perl Configure VC-WIN32 no-hw enable-capieng -DOPENSSL_ SSL_CLIENT_ENGINE_AUTO=capi -DOPENSSL_CAPIENG_DIALOG ms\do_masm nmake -f ms\ntdll.mak .\ssl\d1_both.c(992) : warning C4761: integral size mismatch in argument; conversion supplied .\ssl\d1_both.

Re: Re-negotiation handshake failed: Not accepted by client withOpenSSL 0.98m-beta1

2010-01-25 Thread Dr. Stephen Henson
On Mon, Jan 25, 2010, Shotton, Fred wrote: > Hi Steve, > > Adding a third case in s3_srvr.c did work, yeah! Applying the Apache fix did > not work. > > Let me know if you need anything else. > I can't reproduce your issue but it does depend critically on the amount of data transferred to repr

RE: Re-negotiation handshake failed: Not accepted by client withOpenSSL 0.98m-beta1

2010-01-25 Thread Shotton, Fred
Hi Steve, Adding a third case in s3_srvr.c did work, yeah! Applying the Apache fix did not work. Let me know if you need anything else. -fred -Original Message- From: Dr. Stephen Henson [mailto:st...@openssl.org] Sent: Monday, January 25, 2010 4:11 PM To: openssl-users@openssl.org Sub

Re: Re-negotiation handshake failed: Not accepted by client with OpenSSL 0.98m-beta1

2010-01-25 Thread Dr. Stephen Henson
On Mon, Jan 25, 2010, Frederick Shotton wrote: > Hi Steve, > > I tried the new fix and it did not work for me. The Apache only fix did > make renegotiation work however. The new fix hangs with the following > output on s_client: > > New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA > Server public

Re: Re-negotiation handshake failed: Not accepted by client with OpenSSL 0.98m-beta1

2010-01-25 Thread Frederick Shotton
Dr. Stephen Henson wrote: > On Sat, Jan 23, 2010, Dr. Stephen Henson wrote: > > >> On Fri, Jan 22, 2010, Michael Stone wrote: >> >> >>> This certainly looks like a 12-byte verify_data field encoded as a >>> variable-length vector (i.e. prefixed with a 1-byte length). >>> >>> 6.

windows build

2010-01-25 Thread Wayne Feick
I've seen posts from time to time about difficulties building on Windows. I had some problems as well and wanted to send this out to maybe save others some time. The INSTALL.W32 and .W64 mention that you could use the Cygwin perl, but when I tried that it just hung on one of the invocations and di

Re: Re-negotiation handshake failed: Not accepted by client with OpenSSL 0.98m-beta1

2010-01-25 Thread Michael Stone
On Sun, 24 Jan 2010 15:12:40 +0100, "Dr. Stephen Henson" wrote: > I've traced the cause this was *fun*. The full story is in: > > http://cvs.openssl.org/chngview?cn=19145 > > This is a case of a bug in OpenSSL (PR#1949) being fixed but a related bug in > Apache still existing in older versions.

Question about Self-Signed Certificates

2010-01-25 Thread Kyle Safford
Hi All, I am using Self-Signed Certificates and had a few questions about them. When running the command to verify whether the certificate chain is valid or not (in weblogic), I receive a message stating that the chain is invalid: java -cp %BEA_HOME%\weblogic81\server\lib\weblo

Re: CRL memory usage

2010-01-25 Thread Dr. Stephen Henson
On Mon, Jan 25, 2010, Vinod.Chaudhary wrote: > Hi, > > I want to know the memory usage of CRL file prior to loading ? > > Basically after call to function "d2i_X509_CRL_bio" to load large CRL file, > my free memory goes down drastically. I understand this behavior because > openssl allocate the

CRL memory usage

2010-01-25 Thread Vinod.Chaudhary
Hi, I want to know the memory usage of CRL file prior to loading ? Basically after call to function "d2i_X509_CRL_bio" to load large CRL file, my free memory goes down drastically. I understand this behavior because openssl allocate the memory to load CRL. I want to understand how this memor

Re: aes key wrap ciphertext with custom test vector: test fails

2010-01-25 Thread protagora27 protagora27
I don't think this is the problem because when i use cryptosys lib in the same mode i see correct output . Bye 2010/1/22 : > > >>On Fri 22/01/10 1:54 PM , protagora27 protagora27 protagor...@gmail.com sent: >>I want to test aes_wrap.c under sourceopenssl/crypto/aes. > > Is this because AES need