SSL_accept error on AIX multithreads server application

2014-04-04 Thread Hong Ju
Hello, We used gsoap server with openssl in our application server and encountered SSL_accept error when the server threads was pooled to limit the number of threads serving the requests simultaneously. Here is the excerpt of our log: Request #1 accepted on socket 4 connected from IP 10.117.2.40

RE: Question regarding offloading fundamental ECC operations on a hardware

2014-04-04 Thread Salz, Rich
> So if i go on and change the openssl code to offload ECC operations, will i > be breaking any license? If you are buying off-the-shelf hardware, then the vendor probably has the necessary licenses. If you are building your own hardware, purely for your exploration and discovery, then it is

SSL_write consumes 100% cpu

2014-04-04 Thread Jindřich Doležal
hi all, i encounter strange behavior of SSL_write, which causes program to loop and take 100% cpu. i admit the handling of the library is not ideal in this case, but nevertheless i think that the function should return error, not to loop. see attatched source file - there is simple server which ha

openssl && interrupted read(2) call on socket

2014-04-04 Thread Matthias Apitz
Hello, We use openssl im our application servers and encounter the following problem on SunOS Solaris 5.9 on SPARC: the used call r = BIO_gets(slnpSSL[i].io, buf, maxlen); sslError = SSL_get_error(slnpSSL[i].ssl, r); switch (sslError) { case SSL_ERROR_NONE:

RE: Memory leak in ssl3_get_server_certificate

2014-04-04 Thread hicham h
I found my memory leak origin. I didn't free an X509 object when I called SSL_get_peer_certificate function (missing X509_free() call). Hope it will be useful for others Cheers!! From: hicham55...@hotmail.com To: openssl-users@openssl.org Subject: RE: Memory leak in ssl3_get_server_certificate

Re: SHA256 Apache HTTPD/OpenSSL

2014-04-04 Thread Jerry Blasdel
My problem was that my server certificate was not SHA-256 capable. As soon as I generated a new server certificate based on an openssl that supported SHA-256, I was able to communicate with the server. From: Jerry Blasdel/USA/CSC@CSC To: openssl-users@openssl.org Date: 04/03/2014 11

Question regarding offloading fundamental ECC operations on a hardware

2014-04-04 Thread ankur dwivedi
Hi , I want to offload the operations done in fundamental ECC (all curves) to a hardware to improve the performance. After going through the openssl-1.0.1e code i found out that there are some code contributed by Sun Microsystems (now Oracle). A little search on internet revealed that Certicom ho