RE: Connection Resetting

2010-08-31 Thread David Schwartz
> I'm writing a SSL proxy (which is working great except for this issue) > and every time I got to attach a file in an email the connection resets, > and it gets caught in an infinite retransmit loop. There are two totally different ways you can make an SSL proxy, and to figure out your issue, w

How to check client certificate for expiration

2010-08-31 Thread David Woodhouse
In my VPN client I'd like to warn the user when their certificate is almost out of date. Is there a way to get the client certificate from the SSL_CTX after the client cert has been loaded? As discussed elsewhere, it's quite painful for an application simply to undertake the task of "load a clien

RE: reading and writing into pem file

2010-08-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of krishnamurthy santhanam > Sent: Tuesday, 31 August, 2010 13:33 > #include > writekey(RSA *key2) You're obviously using a C89 (or earlier) compiler or mode. Snipped most non-I/O steps: > { > EVP_PKE

RE: Connection Resetting

2010-08-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Sam Jantz > Sent: Monday, 30 August, 2010 13:50 > I have just now fixed the bug. The source of the problem > was an SSL_read call on the client half of the proxy. This was triggering This is ambiguous; do you mean the

ssl_error_handshake_failure_alert hints?

2010-08-31 Thread Work
Hi everyone -- I'm an OpenSSL noob trying to debug some code written by someone that's smarter than me. It's basically a small HTTPS server using self-signed certs. It works fine with IE and Google Chrome, but not Firefox. Even after adding a security exception for Firefox, I still get

Re: Connection Resetting

2010-08-31 Thread Sam Jantz
Okay so the fix for the bug that I mentioned before introduced a much worse bug (That's what I get for not knowing exactly what is going on). This new bug causes the system to keep all threads alive for the length of the proxy so with enough sites visited the computer the proxy is running on becom

reading and writing into pem file

2010-08-31 Thread krishnamurthy santhanam
Hi, i had tried to generating the key and writing in the pem file...but it is giving segmentation fault...without .readprivatekey and readpublickey functions these is generating pem file...i dont know why? any knows guide me #include #include #include #include RSA *generatersa() { RSA *rsa; rsa

Re: Openssl changes 19759-19762 (AES_wrap_key)

2010-08-31 Thread Dr. Stephen Henson
On Mon, Jul 12, 2010, Victor Duchovni wrote: > > In changes: > > http://cvs.openssl.org/chngview?cn=19759 > http://cvs.openssl.org/chngview?cn=19760 > http://cvs.openssl.org/chngview?cn=19761 > http://cvs.openssl.org/chngview?cn=19762 > > a bug is fixed in AES_wrap_key(), but th