Re: [openssl-users] Building libcrypto/libssl without symbolic link

2015-04-21 Thread Erik Forsberg
Not sure what platform the other person is using, but, for the record the soname 1.0.0 causes big problems on Solaris 11 and up. Solaris 11 ships an OpenSSL 1.0.0 version in standard library locations, if anyone just builds anything higher than that, and do NOT modify build to add -R runtime load

Re: [openssl-users] Building libcrypto/libssl without symbolic link

2015-04-21 Thread Viktor Dukhovni
On Wed, Apr 22, 2015 at 12:12:45AM +, Shanku Roy wrote: > lrw-r--r-- root root 2015-04-10 02:33 libcrypto.so -> > libcrypto.so.1.0.0 > -rw-r--r-- root root 1988088 2015-04-10 02:27 libcrypto.so.1.0.0 > > Is there any configure option in OpenSSL build scripts to not

Re: [openssl-users] Delete a post to openssl-user mailing list

2015-04-21 Thread Viktor Dukhovni
On Tue, Apr 21, 2015 at 09:21:47PM +, Vollaro, John wrote: > Is it possible to remove a message I posted to the openssl-user email forum? No. -- Viktor. ___ openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinf

[openssl-users] Building libcrypto/libssl without symbolic link

2015-04-21 Thread Shanku Roy
Hello OpneSSL Community, OpenSSL build system currently creates symbolic links to actual binaries and actual binaries are named as *.so.1.0.0 : lrw-r--r-- root root 2015-04-10 02:33 libcrypto.so -> libcrypto.so.1.0.0 -rw-r--r-- root root 1988088 2015-04-10 02:27 libc

[openssl-users] Builing libcrypto/libssl without symbolic link

2015-04-21 Thread Shanku Roy
Hello OpneSSL Community, OpenSSL build system currently creates symbolic links to actual binaries and actual binaries are named as *.so.1.0.0 : lrw-r--r-- root root  2015-04-10 02:33 libcrypto.so -> libcrypto.so.1.0.0 -rw-r--r-- root root  1988088 2015-04-10 02:27 libcry

[openssl-users] Delete a post to openssl-user mailing list

2015-04-21 Thread Vollaro, John
Is it possible to remove a message I posted to the openssl-user email forum? This e-mail, including attachments, may include confidential and/or proprietary information, and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipien

[openssl-users] BIO_new_dgram() called in apps/s_server.c

2015-04-21 Thread Scott Neugroschl
Reposting because I sent it to the "mta" address: I am building OpenSSL 1.0.2a with no-dgram and no-dtls1. When I do so, I get a linker error that BIO_new_dgram() is undefined. The following appears to fix the issue: cut here --- s_server.c.orig 2015-03-19 17:17:53 -0700 ++

Re: [openssl-users] Compiling for multiple platforms?

2015-04-21 Thread Salz, Rich
> Is there a way to specify where objects and binaries go? Or, alternatively, > where the source lives (rather like OpenSSH's --srcdir option)? Not currently. This might change as the make "system" is being reviewed and overhauled. Until then, rsync is your best option, as long as all your p

[openssl-users] Compiling for multiple platforms?

2015-04-21 Thread Scott Neugroschl
I'm cross-compiling for multiple platforms. Any changes I make to platform A have to be reflected in platform B. Currently, I have to have two full source trees, and ensure that they're in sync. Is there a way to specify where objects and binaries go? Or, alternatively, where the source liv

Re: [openssl-users] af_alg engine: digests work but ciphers do not?

2015-04-21 Thread Barbe, Charles
That was it... thank you so much!!! Charles A. Barbe Senior Software Engineer Allworx, a Windstream company 245 East Main St | Rochester NY | 14604 charles.ba...@allworx.com | 585.421.5565 From: openssl-users [openssl-users-boun...@openssl.org] on behalf

Re: [openssl-users] NULL EVP_PKEY

2015-04-21 Thread Vollaro, John
It does not work using the openssl command-line tool. I suspect that the .pem file I have only has the public key. -Original Message- From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Salz, Rich Sent: Monday, April 20, 2015 5:25 PM To: openssl-users@openssl.org;

Re: [openssl-users] af_alg engine: digests work but ciphers do not?

2015-04-21 Thread Dr. Stephen Henson
On Tue, Apr 21, 2015, Barbe, Charles wrote: > I've spent the last few days configuring the cryptodev engine on my platform > and I am also seeing the same behavior with that engine as I did with af_alg. > It seems like OpenSSL does not even attempt to use the engine for ciphers. My > next step

Re: [openssl-users] af_alg engine: digests work but ciphers do not?

2015-04-21 Thread Barbe, Charles
I've spent the last few days configuring the cryptodev engine on my platform and I am also seeing the same behavior with that engine as I did with af_alg. It seems like OpenSSL does not even attempt to use the engine for ciphers. My next step is to start plowing through the openssl code to figur

Re: [openssl-users] Peer closing connection with a FIN without first sending a close_notify

2015-04-21 Thread Jason Schultz
Thanks for your response, Viktor. You views fall in line with our opinions on how the situation should be handled. Any other opinions? > Date: Mon, 20 Apr 2015 16:26:43 + > From: openssl-us...@dukhovni.org > To: openssl-users@openssl.org > Subject: Re: [openssl-users] Peer closing connection

Re: [openssl-users] BIO_new_dgram() called in apps/s_server.c

2015-04-21 Thread Jakob Bohm
Obvious simplification: cut here --- s_server.c.orig 2015-03-19 17:17:53 -0700 +++ s_server.c 2015-04-20 11:27:30 -0700 @@ -2183,6 +2183,7 @@ # endif #endif +#ifndef OPENSSL_NO_DGRAM if (stype == SOCK_DGRAM) { sbio = BIO_new_dgram(s, BIO_NOCLOSE); @@ -2220,6 +2221,9

Re: [openssl-users] Peer closing connection with a FIN without first sending a close_notify

2015-04-21 Thread Jakob Bohm
On 20/04/2015 18:26, Viktor Dukhovni wrote: On Mon, Apr 20, 2015 at 03:03:37PM +, Jason Schultz wrote: We have also read that this particular behavior is not unheard of in SSL implementations, and treating the TCP FIN as a proper way to close the connection as described above is OK. Only w

Re: [openssl-users] CTX_free crash

2015-04-21 Thread dE
On 04/20/15 00:10, Salz, Rich wrote: Sometimes, the program crashes when doing an SSL_CTX_free; before the crash, ctx is an invalid pointer, that's why I can get a valid value from SSL_CTX_get_max_cert_list (ctx), so it's not a double free problem. You mean it's a VALID pointer? We'll need a mo