[openssl-users] Trouble with BIO_s_mem() and SSL_new() on OpenSSL-1.1.0-pre7-dev

2016-08-05 Thread Jim Carroll
We have a non-blocking windows app that we are migrating to from OpenSSL 1.0.2i to 1.1.0-pre7-dev. We move data from sockets to SSL via BIO_s_mem() objects. rbio = BIO_new(BIO_s_mem()); wbio = BIO_new(BIO_s_mem()); ssl = SSL_new(ssl_ctx); SSL_set_bio(ssl, rbio, wbio);

[openssl-users] Unexpected SSL23_GET_SERVER_HELLO unsupported protocol Error

2016-08-05 Thread Welling, Conrad Gerhart
--- Reformatted and resent --- I am encountering curl-7.44.0+openssl-1.0.2d (FIPS-capable) TLS session-initialization failures like ... * TLSv1.2 (OUT), TLS header, Certificate Status (22): * TLSv1.2 (OUT), TLS handshake, Client hello (1): * error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:uns

[openssl-users] Unexpected SSL23_GET_SERVER_HELLO unsupported protocol Error

2016-08-05 Thread Welling, Conrad Gerhart
I am encountering curl-7.44.0+openssl-1.0.2d (FIPS-capable) TLS session-initialization failures like ... * TLSv1.2 (OUT), TLS header, Certificate Status (22): * TLSv1.2 (OUT), TLS handshake, Client hello (1): * error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol on on

[openssl-users] Unknown record type 207: what is it, and why does it cause SSL to fail?

2016-08-05 Thread Graham Leggett
Hi all, I am having a problem where an iPhone running iOS v9.3.3 is attempting to connect to httpd+openssl on CentOS7 and suddenly failing when this used to work in the past. The client (iOS) seems to believe the SSL handshake is successful, and so attempts to send some application data. The s