Re: [OpenSSL] [SSL_READ and SSL_WRITE] [Edge Trigged EPOLL]

2014-08-13 Thread David Hinkle
I would recommend using epoll in level triggered mode. Edge triggered mode is extremely unforgiving. I've used epoll with openssl in level triggered mode quite extensively and had success with it. On Mon, Aug 11, 2014 at 8:12 AM, Harikrishnan R < harikrish...@marketsimplified.com> wrote: >

SSL3_WRITE_PENDING:bio not set error during SSL_read

2014-08-13 Thread David Hinkle
I have a SSL proxy server. Intermittently, SSL_read will fail. It's been very hard for me to get debugging information because it is intermittent, but I have a core dump now (I used an assert to get the core, the library did not segfault or anything). This seems to happen even though the connec

Re: 1.0.1i fails on make test

2014-08-13 Thread Jason Schultz
Thank you for the fast reply. > On Aug 13, 2014, at 4:31 PM, "Jeffrey Walton" wrote: > >> On Wed, Aug 13, 2014 at 5:19 PM, Jason Schultz wrote: >> I've been trying to build the latest (1.0.1i) OpenSSL, and I'm having >> problems with the self-tests. >> ... > http://groups.google.com/d/msg/mail

Re: 1.0.1i fails on make test

2014-08-13 Thread Jeffrey Walton
On Wed, Aug 13, 2014 at 5:19 PM, Jason Schultz wrote: > I've been trying to build the latest (1.0.1i) OpenSSL, and I'm having > problems with the self-tests. > ... http://groups.google.com/d/msg/mailing.openssl.users/1PzVX75ic_s/Oba578nnpWIJ

1.0.1i fails on make test

2014-08-13 Thread Jason Schultz
I've been trying to build the latest (1.0.1i) OpenSSL, and I'm having problems with the self-tests. The steps I followed were the same steps I used to build a FIPS enabled 1.0.1h. I built the FIPS object module using the 2.0.6 ecp module without issue. When I attempt to build the FIPS capable

Netware support?

2014-08-13 Thread Salz, Rich
Is anyone willing to step up and maintain the Netware port? If not, then we will probably remove it after the next release. /r$ -- Principal Security Engineer Akamai Technologies, Cambridge MA IM: rs...@jabber.me Twitter: RichSalz

Re: SSL Library Error: error:2D06D075:FIPS routines:fips_pkey_signature_test:test failure (Type=RSA SHA1 X931)

2014-08-13 Thread Abdul Anshad
The official version of OpenSSL works fine when compiled against the upstream FIPS module. Yes, It's distribution specific and reverting the file fixed the issue. Thanks for your time. Regards, Abdul On 13-Aug-14 7:02 PM, Dr. Stephen Henson wrote: On Wed, Aug 13, 2014, Abdul Anshad wrote:

Re: SSL Library Error: error:2D06D075:FIPS routines:fips_pkey_signature_test:test failure (Type=RSA SHA1 X931)

2014-08-13 Thread Dr. Stephen Henson
On Wed, Aug 13, 2014, Abdul Anshad wrote: > I use the src rpm downloaded from > http://koji.fedoraproject.org/koji/buildinfo?buildID=551423 . > > Inquired about this issue with one of the package maintainers from > koji.fedoraproject.org and following was his comment. > > "Apparently the Known a

multiple handshake message

2014-08-13 Thread Sanju Gurung
how to send multiple handshake message

Re: Forcing client to send Certificate record

2014-08-13 Thread Fedor Indutny
Viktor, Despite being a protocol violation, it is accepted by the OpenSSL's server implementation. But I do see now that this is indeed covered by RFC 5246. Sorry, I have missed that line in the Client Certificate section. On Wed, Aug 13, 2014 at 1:48 AM, Salz, Rich wrote: > > There is no nee