Re: Query reg AES_NI usage with OpenSSL-1.0.1h

2014-09-18 Thread Jeffrey Walton
> I have integrated code from below link of HasAESNI() and HasRDRAND() in my > application code. AESNI is enabled but RDRAND is not. RDRAND is a different CPU capability. I've got a Mac Book Pro that has AES-NI, but does not have RDRAND. Cat /proc/cpuinfo and see if its available. See http://unix.

Re: SSL v3.0 is not set as default protocol upon disabling v2.

2014-09-18 Thread Viktor Dukhovni
On Thu, Sep 18, 2014 at 04:47:22PM -0400, John Lane Schultz wrote: > The documentation says that a client will use a TLS hello even > when SSLv3 is one of its supported protocols. The problem then > is, how can such a client communicate with an SSLv3 only server, > which probably won't understand

RE: compilation error

2014-09-18 Thread Scott Neugroschl
It’s -lssl, not -lopenssl. From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Amir Reda Sent: Thursday, September 18, 2014 1:33 PM To: openssl-users@openssl.org Subject: compilation error /usr/bin/ld: cannot find -lopenssl this is the error when i have t

Re: SSL v3.0 is not set as default protocol upon disabling v2.

2014-09-18 Thread John Lane Schultz
Actually, Abhijit, I think your question still has merit. The documentation says that a client will use a TLS hello even when SSLv3 is one of its supported protocols. The problem then is, how can such a client communicate with an SSLv3 only server, which probably won’t understand the TLS hello

compilation error

2014-09-18 Thread Amir Reda
/usr/bin/ld: cannot find -lopenssl this is the error when i have tried to compile the code i attached below i install the openssl lib in ubuntu 12.10 i use eclipse and add at the linker setting openssl usr/include/openssl i don't know how to solve this problem please help -- Warmest regards and b

Re: TLS handshake failure i/o timeout

2014-09-18 Thread espeake
Kyle, Thanks for the reply. It was certificate issue. After I was able to line the correct certs with the correct key it started working as advertised. Thank you, Eric Speake Web Systems Administrator O'Reilly Auto Parts (417) 862-2674 Ext. 1975 From: Kyle Hamilton To: openssl-users

Re: Query reg AES_NI usage with OpenSSL-1.0.1h

2014-09-18 Thread Mukesh Yadav
Thanks Jeff for really good amount of info.. I have integrated code from below link of HasAESNI() and HasRDRAND() in my application code. AESNI is enabled but RDRAND is not. http://stackoverflow.com/questions/25284119/how-can-i-check-if-openssl-is-suport-use-the-intel-aes-ni . I am using EVP inter

Re: TLS handshake failure i/o timeout

2014-09-18 Thread Kyle Hamilton
This may sound basic, but have you verified that the firewall on the server is set up to allow communication from the client? I think Ubuntu's firewall rejects all traffic to ports that don't match what its installed and configured packages claim they run on, without external configuration. -Ky

read call hangs in SSL library

2014-09-18 Thread Aditham, Radhakrishna
Hi, We have an LDAP client that calls into OpenSSL libraries to talk to a secure LDAP server. If for any reason we lose connection to the LDAP server, the LDAP handle is freed. As part of ldap_unbind(LDAP *ld), the ssl3_shutdown() is called, which calls "read" and hangs. The stack is as follow

Re: Query reg AES_NI usage with OpenSSL-1.0.1h

2014-09-18 Thread Jeffrey Walton
> I have written application code for encryption and decryption using OpenSSL > library. > I am testing on machine where AES-NI support is present. I am not sure how > can I confirm > whether execution is using AES-NI instruction set. > > ... > Any pointers will be appreciated.. OpenSSL has a test

TLS handshake failure i/o timeout

2014-09-18 Thread espeake
I have an ubuntu 14.04 with openssl 1.0.1f-1ubuntu2.3 server running and a another server connecting as the client with ubuntu 12.04 with openssl 1.0.1-4ubuntu5.16. I am getting an error about the TLS handshake failing i/o timeout. I have tried using our internal wildcard certs on both servers s

Query reg AES_NI usage with OpenSSL-1.0.1h

2014-09-18 Thread Mukesh Yadav
Hi, I have written application code for encryption and decryption using OpenSSL library. I am testing on machine where AES-NI support is present. I am not sure how can I confirm whether execution is using AES-NI instruction set. When run command line openssl speed -evp aes128, I was seeing aesni_

Re: SSL v3.0 is not set as default protocol upon disabling v2.

2014-09-18 Thread abhijit pai
Thanks John, After reading through http://tools.ietf.org/html/rfc2246#appendix-E I understood what you meant here, and couls make sense about fallback to SSLv3. " TLS version 1.0 and SSL 3.0 are very similar; thus, supporting both is easy. TLS clients who wish to negotiate with SSL 3.0 serve

Re: openssl 1.0.1i

2014-09-18 Thread Tulasi
Yes this worked .thanks. On Thu, Sep 18, 2014 at 12:31 PM, Øystein Larsen wrote: > On 18.09.14 00:04, Tulasi wrote: > >> Hi >> I installed openssl 1.0.1i fips enabled (fips 2.0.7) >> When i run the command openssl version, i get this OpenSSL 1.0.0-fips >> 29 Mar 2010 >> Why doesn't it show

Re: openssl 1.0.1i

2014-09-18 Thread Øystein Larsen
On 18.09.14 00:04, Tulasi wrote: Hi I installed openssl 1.0.1i fips enabled (fips 2.0.7) When i run the command openssl version, i get this OpenSSL 1.0.0-fips 29 Mar 2010 Why doesn't it show 1.0.1i in the version information. Please help. Did you run 'which openssl' and double-check the p