RE: SSL documentation

2011-10-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Jakob Bohm > Sent: Wednesday, 19 October, 2011 06:04 > On 10/19/2011 6:10 AM, Mohan Radhakrishnan wrote: > > > > Hi, > > > > Is there any material available that shows flows of one-way/two-ssl > > and different types of CA architectures ? We us

RE: Failing to verify the certificate of one specific site

2011-10-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Lucas Clemente Vella > Sent: Wednesday, 19 October, 2011 22:44 > Then I found this directory in my system, "/etc/ssl/certs", containing > my installed CA roots, which I provided to OpenSSL, instead of the > certificate file: > It seems to me t

Help Needed: SSL Connect starting from a weird state

2011-10-20 Thread Jeff Saremi
We've been running our SSL code for a while now with no issues. But recently one of our developers started encountering this problem. We did the best we could to troubleshoot to no avail. I know the problem is not OpenSSL and it's something we're doing incorrectly, probably at the start up. The p

FIPS_mode_set call fails

2011-10-20 Thread Sert, Banu Cicek
Hello, I just want to ask for help on a point. I have openssl 0.9.8r development version and just build the FIPS 1.2.3 modules.When I call FIPS_mode_set(1) in my application , it always returns 0. What I have done so far is the following: *I have set up perl *I have downloaded the openssl fips

OpenSSL Engine - configurable ciphers/digests

2011-10-20 Thread com...@gmx.ch
Hi, I need some help with a special case: a dynamic engine with non-static or configureable ciphers. While I do not use cryptodev, the code provides a good example of the intial problem: http://cvs.openssl.org/fileview?f=openssl/crypto/engine/eng_cryptodev.c&v=1.23 I basically have it wor

Problem with Server-Client Sessions with SSL proxy

2011-10-20 Thread saurabh pandya
Hi all, Problem seems very wired to me. please bear some deficiency in explaining the problem I am writing one Small HTTPS proxy (trasparent proxy only ) for study work. Client(IE)---Encrypted traffic---> || ClientSocket <---Plain text> ServerSocket --Encrypted traffic-->Https_WebServer In