Re: Set Time out for SSL read

2010-09-30 Thread Raj
Hi Thank you so much for your reply Can you please let me know how can I set time out as a whole. I think you are mentioning about SSL_CTX_Set_timeout function. If it is so then I have set the time out using this function, and sadly I didn't get the expected result. Thanks, Raj Rajmohan SK

RE: Signed Certificates and Revoking the Certs with CRLs

2010-09-30 Thread Hasan Rezaul-CHR010
Thank You sooo much Kyle and Tomas, Another question. I have a Linux machine that is running openssl 0.9.8g. It looks like it uses CRL Version 1 ? Is this correct ? Is there a way to force my openssl 0.9.8g to use CRL version 2 ??? In my network system, I have a Linux machine that has its

Re: (Help) Verification using OCSP

2010-09-30 Thread shizumi
i solved the problem. it should add SSL_library_init(); in the begining of the code. thank you Dr. Stephen Henson wrote: > > On Wed, Sep 29, 2010, shizumi wrote: > >> >> Hi all, >> >> i try to do the ocsp verification in my application by using >> openssl-0.9.8o, >> but when call OCSP_bas

Re: DLL issues with Windows

2010-09-30 Thread William A. Rowe Jr.
On 9/30/2010 11:42 AM, Jakob Bohm wrote: > > In Windows XP, Microsoft introduced their own badly designed idea of > "versioned so-names" in the form of so-called "Assemblies". Unless > you are writing .NET code, you should really avoid that nonsense. I expect SxS packages for openssl (and severa

Re: DLL issues with Windows

2010-09-30 Thread Jakob Bohm
On 30-09-2010 17:34, Carter Browne wrote: I would like to request that when changes are made to verification items such as the hash code for certification validation that the Windows operation be taken into consideration. DLLs are a global resource in Windows and are identified by name. Once

Re: LNK4078 and LNK4210 linking with x64 static libs

2010-09-30 Thread Jakob Bohm
Update, According to the NASM manual at http://www.nasm.us/doc/nasmdoc7.html#section-7.5.1 The following change to the generated .asm file should fix this without having to modify .obj files: Current: section.CRT$XCU Fixed: section.CRT$XCU rdata align=8 I have not yet test

DLL issues with Windows

2010-09-30 Thread Carter Browne
I would like to request that when changes are made to verification items such as the hash code for certification validation that the Windows operation be taken into consideration. DLLs are a global resource in Windows and are identified by name. Once a DLL is loaded, any other request of that sa

Problem with COFF section flags on 64bit Windows (VC2008) sometimes raises CPU exception

2010-09-30 Thread Gero Peters
Dear colleagues,   the linker warning LNK4078 (static builds only) SHOULD NOT be ignored on Win64. The problem is known and is connected to the automatic invocation of OPENSSL_cpuid_setup by placing "dq OPENSSL_cpuid_setup" in the special COFF section CRT$XCU.   The problem is that you cannot speci

Re: Set Time out for SSL read

2010-09-30 Thread David Schwartz
On 9/29/2010 11:41 PM, Raj wrote: Hi All Is there any method to set time our for SSL _read function. As from the Open SSL document SSL_read will not return if there is no data to read from the socket You really shouldn't need this. If you know for sure that it's the other side's turn to trans

Re: (Help) Verification using OCSP

2010-09-30 Thread Dr. Stephen Henson
On Wed, Sep 29, 2010, shizumi wrote: > > Hi all, > > i try to do the ocsp verification in my application by using openssl-0.9.8o, > but when call OCSP_basic_verify, it always return me -1. i test to print the > error message. and it show me this line > > 4616:error:0D0C50A1:lib(13):func(197):re

AES in counter mode with OpenSSL and cryptodev

2010-09-30 Thread Henrik Grindal Bakken
Hi. I'm writing software which does AES-128 in counter mode (for srtp) on hardware where a crypto chip (talitos) is available. I have cryptodev and the talitos driver working, and it appears to work just fine in CBC mode. >From what I can gather from the code in CVS, a new EVP_aes_128_ctr() EVP