Re: [openssl-users] DTLS for SCTP connections

2017-02-21 Thread mahesh gs
Hi, Thank you for sharing the sample code. I tried running SCTP DTLS Echo server and client. I am facing strange problem "ssl_connect" hangs on the client side, even the "ssl_accept" hangs on the server side. Client side back trace (gdb) bt #0 0x003db4c0ea10 in __recvmsg_nocancel () from /

[openssl-users] Specify padding scheme with EVP_VerifyFinal

2017-02-21 Thread openssl
Hello, I am facing a problem regarding an application which uses EVP_VerifyInit_ex, EVP_VerifyUpdate and EVP_VerifyFinal to verify RSA signatures with EVP_get_digestbyname("RSA-SHA256"). Is it correct that ECP_VerifyFinal defaults to PKCS#1 v1.5 padding? We would like to be able to switch to ot

[openssl-users] Question RE certificate chain verification

2017-02-21 Thread Jakob Curdes
Hi, I am new to the list and have a question where it seems I cannot find the answer in archives here or in other sources. We want to verify the certificate chain of an "official" certificate, but including the revocation status of the intermediate certs, via CRL or OCSP. (The chain verificatio

Re: [openssl-users] DTLS for SCTP connections

2017-02-21 Thread Michael Tuexen
> On 21 Feb 2017, at 09:53, mahesh gs wrote: > > Hi, > > We have a client, server applications that is using SCTP as a transport > protocol. We have to secure the connections using DTLS. I am using openssl > version 1.0.2 which supports DTLS. But the problem i am facing is usage of > DTLS SCT

[openssl-users] DTLS for SCTP connections

2017-02-21 Thread mahesh gs
Hi, We have a client, server applications that is using SCTP as a transport protocol. We have to secure the connections using DTLS. I am using openssl version 1.0.2 which supports DTLS. But the problem i am facing is usage of DTLS SCTP related API's. Openssl documentation does not clearly explain