RE: OCSP Responder

2012-11-30 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Rainer Rill > Sent: Sunday, 25 November, 2012 08:04 [in zone -5] I don't know what happened to this post. Headers (as resent) show originator stamp Nov 25 14:04 +1 and initial transmission .superkabel.de to .hosteurope.de to master.openssl.org

segfault in libcrypto

2012-11-30 Thread Jeremy Mortis
Hi folks: I'm having an issue where wget (and curl) segfaults in libcrypto when trying to access a particular https site. The site can be accessed via IE or Firefox without problems. I'm running 64-bit Ubuntu 12.04 LTS with OpenSSL version 1.0.1 14 Mar 2012. I can easily imagine that the site o

Re: Issue with OpenSSL in multithreaded environment

2012-11-30 Thread Jeffrey Walton
On Fri, Nov 30, 2012 at 1:42 PM, Jeffrey Walton wrote: > On Fri, Nov 30, 2012 at 12:24 PM, NuSkooler wrote: >> I think responses like this would be much more helpful without the FUD. > I have no fear since I don't suffer uncertainty. The macros are broken. > >> WaitForSingleObject() and WaitForMu

Re: Issue with OpenSSL in multithreaded environment

2012-11-30 Thread Jeffrey Walton
On Fri, Nov 30, 2012 at 12:24 PM, NuSkooler wrote: > I think responses like this would be much more helpful without the FUD. I have no fear since I don't suffer uncertainty. The macros are broken. > WaitForSingleObject() and WaitForMultipleObjects() return WAIT_ABANDONED if > the mutex has been c

Re: Issue with OpenSSL in multithreaded environment

2012-11-30 Thread Jakob Bohm
On 11/30/2012 6:24 PM, NuSkooler wrote: I think responses like this would be much more helpful without the FUD. WaitForSingleObject() and WaitForMultipleObjects() return *WAIT_ABANDONED *if the mutex has been closed. WAIT_OBJECT_0 would only be expected if you didn't read the documentation. I su

Re: Issue with OpenSSL in multithreaded environment

2012-11-30 Thread NuSkooler
I think responses like this would be much more helpful without the FUD. WaitForSingleObject() and WaitForMultipleObjects() return *WAIT_ABANDONED *if the mutex has been closed. WAIT_OBJECT_0 would only be expected if you didn't read the documentation. I suggest you both do so before utilizing thes

Re: Issue with OpenSSL in multithreaded environment

2012-11-30 Thread Jeffrey Walton
On Thu, Nov 29, 2012 at 9:57 AM, Staneva, Yana wrote: > Help please. > > I have a Win32 application (service) that loads several dlls that make > OpenSSL calls. Also there is a separate dll that takes care of the OpenSSL > initialization (thread setup, SSL_library_init(), SSL_CTX_new() ). > > I’ve

Issue with OpenSSL in multithreaded environment

2012-11-30 Thread Staneva, Yana
Help please. I have a Win32 application (service) that loads several dlls that make OpenSSL calls. Also there is a separate dll that takes care of the OpenSSL initialization (thread setup, SSL_library_init(), SSL_CTX_new() ). I've followed the samples online on how to do the thread setup, so I h

OCSP Responder

2012-11-30 Thread Rainer Rill
Hi, Hello, i have a question. I use Ubuntu 12.04 64bit server. The openssl version is 1.0.1-4ubuntu5.5 On the same server is installed apache2 with ssl support. Everything works well. Now I want to use the ocsp responder for testing. I start in terminal 1: >openssl ocsp -index /etc/ssl/index.tx

Re: EVP_PKEY_sign and EVP_PKEY_CTX_set_signature_md

2012-11-30 Thread Michel
Thank you very much for the answer. Le 30/11/2012 12:54, Dr. Stephen Henson a écrit : On Fri, Nov 30, 2012, Michel wrote: Before trying to use it, I was misleaded by the documentation (and the example) of the EVP_PKEY_sign() call at : http://www.openssl.org/docs/crypto/EVP_PKEY_sign.html I'l

Re: EVP_PKEY_sign and EVP_PKEY_CTX_set_signature_md

2012-11-30 Thread Dr. Stephen Henson
On Fri, Nov 30, 2012, Michel wrote: > Before trying to use it, I was misleaded by the documentation (and > the example) of the EVP_PKEY_sign() call at : > http://www.openssl.org/docs/crypto/EVP_PKEY_sign.html > I'll add a clarification to the manual page. > What is not yet clear to me is : > if

EVP_PKEY_sign and EVP_PKEY_CTX_set_signature_md

2012-11-30 Thread Michel
Before trying to use it, I was misleaded by the documentation (and the example) of the EVP_PKEY_sign() call at : http://www.openssl.org/docs/crypto/EVP_PKEY_sign.html I believed it was [quite] the same behavior than with EVP_DigestSignFinal() before undestanding that the input has to be a dige

Who signed this time stamp request?

2012-11-30 Thread Stefan Froehlich
I am working on an application which supports generating and signing time stamp requests for various documents, with the option to choose from a list of services.