Re: [openssl-users] DTLS Handshake fails with DTLSv1_listen

2017-02-23 Thread Matt Caswell
On 23/02/17 18:02, Vijayakumar Kaliaperumal wrote: > Hi, > > While writing a DTLS server using DTLSv1_listen(), I found that > when I receive a fragmented clienthello from the client, DTLS handshake > fails. DTLSv1_listen stuck in the while loop (in the app). > When I checked the man pa

Re: [openssl-users] Specify padding scheme with EVP_VerifyFinal

2017-02-23 Thread openssl
Hi Michel, it looks like what I am looking for, but the software uses EVP_VerifyInit_ex which is a typedef for EVP_DigestInit_ex. How are those functions related to EVP_DigestVerifyInit? Can I use EVP_DigestVerify* functions along with EVP_Verify* functions? I must not break compatibility with

[openssl-users] DTLS Handshake fails with DTLSv1_listen

2017-02-23 Thread Vijayakumar Kaliaperumal
Hi, While writing a DTLS server using DTLSv1_listen(), I found that when I receive a fragmented clienthello from the client, DTLS handshake fails. DTLSv1_listen stuck in the while loop (in the app). When I checked the man page of DTLSv1_listen(), it clearly says that API does not handle a

Re: [openssl-users] Specify padding scheme with EVP_VerifyFinal

2017-02-23 Thread Michel
Hi, > Is it possible to specify a different padding scheme (e.g. > RSA_PKCS1_PSS_PADDING) using this API ? > If not, what is the easiest way to work around this "limitation" ? Isn’t it what you are looking for : EVP_PKEY_CTX_set_rsa_padding() ? https://www.openssl.org/docs/manmaster/man3/

Re: [openssl-users] Question RE certificate chain verification

2017-02-23 Thread Jakob Curdes
Hi, I am new to the list and have a question where it seems I cannot find the answer in archives here or in other sources. We want to verify the certificate chain of an "official" certificate, but including the revocation status of the intermediate certs, via CRL or OCSP. (The chain verificatio