RE: HTTPS connection hangs during SSL handshake

2012-09-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Leonardo Laface de Almeida > Sent: Tuesday, 11 September, 2012 10:08 > To: openssl-users@openssl.org > For any SSL connection, you have to assure that: > > 1- The cpu's can reach each other (the hostname > "test.mydomain.com" must be also reso

RE: Enabling Logging in OpenSSL

2012-09-11 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar >Sent: Tuesday, 11 September, 2012 02:10 >On Tue, Sep 11, 2012 at 8:08 AM, Dave Thompson wrote: > I didn't notice before, but 1433 on Windows is usually SQLServer. > If so, SQLServer doesn't start in SSL; it starts in a

RE: openssl on a home LAN

2012-09-11 Thread John A. Wallace
Charlie, Frankly, you condescending manner is starting to annoy me, considerably. Furthermore, your name is not on this page as one of the moderators of this group: http://www.openssl.org/about/. Moreover, I don't believe I need your permission to "hang out here". You need to read the

RE: Parsing X509 certificate subjectAltName

2012-09-11 Thread Charles Mills
Thanks! Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Tuesday, September 11, 2012 3:46 PM To: openssl-users@openssl.org Subject: Re: Parsing X509 certificate subjectAltName On Tue, Sep 11, 2

Re: Parsing X509 certificate subjectAltName

2012-09-11 Thread Dr. Stephen Henson
On Tue, Sep 11, 2012, Charles Mills wrote: > > { > > case GEN_DNS: > > case GEN_URI: > > case GEN_IPAD

Re: Why is the OpenSSL documentation incomplete?

2012-09-11 Thread Matt Caswell (fr...@baggins.org)
On Wed, 2012-09-12 at 00:28 +0300, farmdve data.bg wrote: > I have seen a lot of applications that utilize the OpenSSL library, > however I see that the majority of the documentation is incomplete. > > > In particular, I need some documentation for the EC package in the > 'crypto' sub-folder, I m

RE: openssl on a home LAN

2012-09-11 Thread Erik Tkal
You don't "use OpenSSL" on a home LAN, you use applications or OS layers that might use OpenSSL in their implementation. In general OpenSSL is a toolkit that provides cryptography and SSL/TLS implementations. I think you have to be more specific about what you mean by phrases like "connect Win

Why is the OpenSSL documentation incomplete?

2012-09-11 Thread farmdve data.bg
I have seen a lot of applications that utilize the OpenSSL library, however I see that the majority of the documentation is incomplete. In particular, I need some documentation for the EC package in the 'crypto' sub-folder, I mean, it's not possible for application developers to generate Elliptic

RE: Parsing X509 certificate subjectAltName

2012-09-11 Thread Charles Mills
bool Comm::isAltNameMatch(X509 *certificate, const char *nodeName) { // there is alternative code on page 136 of O'Reilly OpenSSL unsigned char *pBuffer = NULL; int length = 0; GENERAL_NAMES *subjectAltNames; b

Parsing X509 certificate subjectAltName

2012-09-11 Thread Kenneth Goldman
I'm 90% deep into parsing an X509 certificate, but I can't find sample code for the last piece. I found the extension, and located the ASN1_OBJECT with nid 85, OID 2.5.29.17, the subjectAltName. From the dumpasn output, I see that this is an octet string of a sequence, etc. I have to pull out

RE: openssl on a home LAN

2012-09-11 Thread Charles Mills
Right. Are you an application developer? In other words, do you write computer programs? Does the following mean anything to you? int main(int argc, char *argv[]) { printf("hello world\n"); return 0; } Or alternatively, are you a Web site operator? Do you host a Web site that others acc

RE: openssl on a home LAN

2012-09-11 Thread John A. Wallace
Hi, Ted. What you said makes good sense and answers my question completely. I appreciate your help. Thank you. John From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Ted Byers Sent: Tuesday, September 11, 2012 1:35 PM To: openssl-users@openssl.o

RE: openssl on a home LAN

2012-09-11 Thread John A. Wallace
Hi. I am not trying to be mean or something, but you may want to take a look at this page: http://www.openssl.org/support/community.html Focusing on the part that describes this list, one can read this about its purpose: Application Development, OpenSSL Usage, Installation Problems, et

Re: openssl on a home LAN

2012-09-11 Thread Ted Byers
On Tue, Sep 11, 2012 at 12:36 PM, John A. Wallace wrote: > ** > > I am trying to figure out whether there is any point in using openssl on > a home LAN between two computers. Would that improve on security in any > way? Would I be limited in the types of OS connections? I mean, could > Iconnect

RE: openssl on a home LAN

2012-09-11 Thread Charles Mills
Do you write computer programs, or are you a home user of personal computers? If you don't write computer programs, then using OpenSSL at the level addressed by this mailing list is not what you are looking for. Some of the products you might buy might use OpenSSL "under the covers," but yo

Re: openssl on a home LAN

2012-09-11 Thread Gayathri Sundar
unless somebody is gonna tap your LAN connection, I don't see a point in using SSL. Generally its useful only when you want to send secure application data over the internet. Intranets are safe esp ur 2 home computers :). thanks --Gayathri On Tue, Sep 11, 2012 at 11:36 AM, John A. Wallace wrote:

openssl on a home LAN

2012-09-11 Thread John A. Wallace
I am trying to figure out whether there is any point in using openssl on a home LAN between two computers. Would that improve on security in any way? Would I be limited in the types of OS connections? I mean, could I connect Windows with Linux? Also, if I want to make such a connection between two

RES: HTTPS connection hangs during SSL handshake

2012-09-11 Thread Leonardo Laface de Almeida
For any SSL connection, you have to assure that: 1- The cpu's can reach each other (the hostname "test.mydomain.com" must be also resolved). You may use ping, HTTP, FTP to check it out; 2- Certificates or CA chain from each endpoint must be inserted in the opposite side as trust cert; 3- The bo

Re: FIPS linking a shared object

2012-09-11 Thread Jason Todd
Found my own answer on an earlier thread. You need the option "-Wl,-Bsymbolic" to link a shared libary (that has static linked ssl-fips) correctly On Mon, Sep 10, 2012 at 5:43 PM, Jason Todd wrote: > So I can build a fips compliant executable and turn fips on/off (this is > on linux). > > But wh

Re: HTTPS connection hangs during SSL handshake

2012-09-11 Thread Supratik Goswami
Is there no one in the community who can help me to find the cause of the problem ? On Tue, Sep 4, 2012 at 7:21 PM, Supratik Goswami wrote: > I am using OpenSSL version : openssl-1.0.0j in our production. > > I am facing a strange problem where the SSL connection simply hangs > during initial han