RE: CAPI and Private keys

2013-09-27 Thread Fili, Tom
My mistake. I was looking at Common Name, Organization Unit Name, Organization Name. I can definitely see collisions with this approach. If I want to make a more specific string to avoid any wrong certificates, what format should it be in for the capi engine to accept is. I've tried X509_NAME_

Re: possible SSL_connect/accept bug?

2013-09-27 Thread Viktor Dukhovni
On Fri, Sep 27, 2013 at 07:49:06AM -0700, Roger Miller wrote: > My initial call to 'connect' was returning 'WSAEWOULDBLOCK' (to > be expected on a non-blocking socket). At that point the appropriate thing to do is to select the socket for write in your event loop. Once the socket reports ready (

RE: possible SSL_connect/accept bug?

2013-09-27 Thread Roger Miller
> -Original Message- > From: Roger Miller > > Using OpenSSL libraries to provide basic encryption between client and > server. > Using non-blocking sockets, and client can connect to multiple servers. > > I have an intermittent issue where server reports > 'SSL3_GET_RECORD:wrong version n

iOS arm64 question

2013-09-27 Thread Jerry Wang
Hi all, Has anyone run into issues with openssl 0.98y on the Apple iOS arm64 architecture? I built a simple test app with s_client - the SSL connection succeeds with armv7, but fails with arm64 during the SSL handshake. Any input will be much appreciated! Best, Jerry