How to disable compression?

2010-12-13 Thread Corin Lawson
Hi All, Is it possible to establish an SSL connection with no compression? How? While I'm at it, is it possible to use no encryption? I.e. I only want SSL to authenticate/verify identity (handshake). Cheers, Corin. __ OpenSSL

Error 20 at 0 depth lookup:unable to get local issuer certificate

2010-12-13 Thread Vinay Kumar L
Hi all, I have generated certificate chain using Openssl(OpenSSL 0.9.8e). The certificate hierarchy is as follows: ca.pem >cert1.pem>cert2.pem->last.pem Openssl doesn't give any error when verifying these certificate chain(Certificate chain verification is successful) during TLS

RE: Problems building FIPS Openssl under Server 2008 R2

2010-12-13 Thread Christopher A Hotchkiss
> Just a quick note. There was a bug in the 1.2 module which meant Win64 ASM > builds didn't function properly. A change letter has addressed this and the > newly uploaded 1.2.2 module should now work fine with Win64 ASM. > > Steve. Does the updated 1.2.2 module need to be revalidated before we c

Re: OCSP_BASICRESP_free() segmentation fault

2010-12-13 Thread Dr. Stephen Henson
On Mon, Dec 13, 2010, Bin Lu wrote: > OK, let me look into this. > > But could you please let me know where these _free functions are defined, for > OCSP_BASICRESP_free(), OCS_RESPONSE_free(), OCSP_REQUEST_free()? > The actual definition is in crypto/ocsp/ocsp_asn.c but that wont help much bec

RE: OCSP_BASICRESP_free() segmentation fault

2010-12-13 Thread Bin Lu
OK, let me look into this. But could you please let me know where these _free functions are defined, for OCSP_BASICRESP_free(), OCS_RESPONSE_free(), OCSP_REQUEST_free()? Thanks, -binlu -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On

Multithreading heap corruption issue

2010-12-13 Thread Marin Bek
Hello, I have developed a C++ application (developed under VS 2008) which uses Axis2 library, which uses OpenSSL. Application is multithreaded, and each thread initiates new axis instance using SSL. Issues occur mostly after second thread is created, but it sometimes takes a bit longer: various fu