RE: fips build error on HP PA32

2010-02-18 Thread Vikram Arwade
Hi David, Thanks for the help. I already have a HP system, but getting the error mentioned below when building a .sl. Regards, --Vikram -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. David Kirkby Sent: Thursday, Februa

RE: Multi-threaded application sharing SSL object

2010-02-18 Thread David Schwartz
Martin Domke wrote: > Do I have to protect the SSL object on my own from concurrent access? Yes, you do. If you didn't that's your problem. Both SSL_read and SSL_write are logically modification operations on the SSL object (because they can change its state). You cannot perform a modification o

Re: Obsolete functions...

2010-02-18 Thread Dr. Stephen Henson
On Thu, Feb 18, 2010, barcaroller wrote: > > I have inherited some legacy OpenSSL code where the author uses the > following functions for decryption: > > EVP_CIPHER_CTX_init() > EVP_CipherInit() > EVP_Cipher() > EVP_CIPHER_CTX_cleanup() > > > The code works fine but the second

Re: s_server + compression

2010-02-18 Thread Dr. Stephen Henson
On Thu, Feb 18, 2010, barcaroller wrote: > How can I force s_server (and s_client) to use compression (DEFLATE)? > The only supported compression algorithm is zlib. You can get that by compiling OpenSSL with zlib support: it is then used automatically. Steve. -- Dr Stephen N. Henson. OpenSSL pr

Obsolete functions...

2010-02-18 Thread barcaroller
I have inherited some legacy OpenSSL code where the author uses the following functions for decryption: EVP_CIPHER_CTX_init() EVP_CipherInit() EVP_Cipher() EVP_CIPHER_CTX_cleanup() The code works fine but the second function (EVP_CipherInit) is obsolete and the third function (E

s_server + compression

2010-02-18 Thread barcaroller
How can I force s_server (and s_client) to use compression (DEFLATE)? __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated Lis

Re: Multi-threaded application sharing SSL object

2010-02-18 Thread Martin Domke
For all interested this is the output of the ssldump. As you can see at the end the connection abruptly aborts with the error "Length missmatch". > SSL3_READ_BYTES:sslv3 alert bad record mac:s3_pkt.c:1061:SSL alert number 20 > sudo /usr/sbin/ssldump -dA -i lo port 9111 New TCP connection #1: loc

Multi-threaded application sharing SSL object

2010-02-18 Thread Martin Domke
Hi, I have read some postings on the mail-archive so far, but I could not find out what goes wrong in my application. I have a client server architecture where the server master waits for incoming connections from the client and then forks a slave which will then start a TLS connection to the c

Add test failed! / make[1]: *** [test_bn] Error 1

2010-02-18 Thread Stefan Weiß
Hello, If I do "make test" I get this Error: starting big number library test, could take a while... test BN_add Add test failed! make[1]: *** [test_bn] Fehler 1 make[1]: Verlasse Verzeichnis '/home/st/Desktop/openssl-0.9.8m-beta1/test' make: *** [tests] Fehler 2 What can I do to fix that problem

Multi-threaded application sharing SSL object

2010-02-18 Thread Martin Domke
Hi, I have read some postings on the mail-archive so far, but I could not find out what goes wrong in my application. I have a client server architecture where the server master waits for incoming connections from the client and then forks a slave which will then start a TLS connection to the c

Re: SSL crypto library

2010-02-18 Thread Dr. Stephen Henson
On Thu, Feb 18, 2010, carlyo...@keycomm.co.uk wrote: > > > On Thu 18/02/10 3:31 PM , Robert Doncaster b...@edp.co.uk sent: > > Hello, > > > > Is there a programmatic way to give a list of available cypher names (eg > > AES-128-ECB...)? > > i.e a list of the names that could be supplied to EVP_g

Re: SSL crypto library

2010-02-18 Thread carlyoung
> On Thu 18/02/10 3:31 PM , Robert Doncaster b...@edp.co.uk sent: > Hello, > > Is there a programmatic way to give a list of available cypher names (eg > AES-128-ECB...)? > i.e a list of the names that could be supplied to EVP_get_cipherbyname(). > > the openssl enc.c example shows a function

SSL crypto library

2010-02-18 Thread Robert Doncaster
Hello, Is there a programmatic way to give a list of available cypher names (eg AES-128-ECB...)? i.e a list of the names that could be supplied to EVP_get_cipherbyname(). Thanks, Bob Doncaster --

Re: pkcs#12 format

2010-02-18 Thread Nicolas Pelloux-Prayer
I figured out where the (lame) bug really was. The password GUI had a non null-terminated string issue with the password, which worked in some case and not with this one... I should slap myself each time I don't check the simple things first, sorry for the inconvenience guys. btw I use openssl-0.9

Re: pkcs#12 format

2010-02-18 Thread Dr. Stephen Henson
On Wed, Feb 17, 2010, Nicolas Pelloux-Prayer wrote: > I'm trying to extract the cert/private key pair from a pkcs#12 file using > the PKCS12_parse method. It works fine for most p12 I used before, then I > ran into a strange p12 which doesnt work (returned cert & pkey are both > NULL). > [snip]

RE: auto login

2010-02-18 Thread PMHager
The correct URL syntax (in accordance with RFC 1738/2396) for your request is: https://admin:ad...@192.168.167.166/ On Wed February 17 2010, cerr wrote: > > Hi There, > > I would like to open a session to an open ssl http server on port 443 > without any manual keyboard entry. > > I've trie

Re: pkcs#12 format

2010-02-18 Thread Nicolas Pelloux-Prayer
The output is the same as "openssl pkcs12 -in "User.p12" -info" Thanks for your response. Nicolas Pelloux-Prayer 2010/2/17 Ashok Kumar > I am not sure if you are using the following command. It parses the > certs & keys. > > #openssl pkcs12 -info -nodes -in > > Thanks > -Ashok > > On Wed, Feb