Re: [openssl-users] reasons for negative return value from BIO_do_connect

2018-10-17 Thread Richard Welty
On 10/16/18 1:44 PM, Richard Welty wrote: > i'm trying to figure out why BIO_do_connect is failing with > a negative value. so far as i know i've done all preliminaries > correctly, but apparently i've missed something. i am dumping > the SSL errors from ERR_get_error but am not getting any in > th

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Matt Caswell
On 17/10/2018 22:07, Steffen Nurpmeso wrote: > | > |This is definitely an environmental issue. I just installed an Alpine > |Linux VM. I got the above error consistently when using clang as the > |compiler (whether or not I added "-DOPENSSL_NO_ASYNC"). I got a > |successful build if I used

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Steffen Nurpmeso
Good evening. Matt Caswell wrote in <18466c3a-430a-f1cb-8277-1f742e1b4...@openssl.org>: |On 17/10/2018 14:09, Steffen Nurpmeso wrote: |> Matt Caswell wrote in : |>|On 17/10/2018 13:43, Steffen Nurpmeso wrote: |>|> Matt Caswell wrote in |> >: |>|>|On 17/10/2018 13:12, Steffen Nurpmeso wrote:

[openssl-users] openssl 1.1.1 Cannot find fucntion

2018-10-17 Thread Mark Shnaider via openssl-users
Hello , I use openssl 1.1.1 and cannot find function : lh_X509_NAME_free, lh_X509_NAME_insert, lh_X509_NAME_retrieve referenced in function _SSL_load_client_CA_file in file ssl_cert.c Please help me to solve this problem Mark -- openssl-users mailing list To unsubscribe: https://mta.openss

Re: [openssl-users] sendmail, openssl 1.1.1, tls1.3

2018-10-17 Thread Matt Caswell
On 16/10/2018 05:19, Viktor Dukhovni wrote: > [ Carl sent me the CA bundle off-list ] With the provided CA bundle > I was able to easily reproduce the same symptoms with: Please can someone send me the same CA bundle so that I might also reproduce this? Thanks Matt > > $ openssl s_client

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Matt Caswell
On 17/10/2018 14:09, Steffen Nurpmeso wrote: > Matt Caswell wrote in : > |On 17/10/2018 13:43, Steffen Nurpmeso wrote: > |> Matt Caswell wrote in : > |>|On 17/10/2018 13:12, Steffen Nurpmeso wrote: > |>|> I have built final 1.1.1 yesterday on AlpineLinux musl after > |>|> running a prelease

Re: [openssl-users] To disable CBC ciphers

2018-10-17 Thread murugesh pitchaiah
Hi, You may list down what ciphers configured : "openssl ciphers" Choose CBC ciphers and add them to the list of 'ssl_ciphers' with "!" prefix appended to current ssl_ciphers. > ssl_ciphers HIGH:!aNULL:!MD5:!DH+3DES:!kEDH:!AAA_CBC_BBB: Ref: https://serverfault.com/questions/692119/meaning-of-ss

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Steffen Nurpmeso
Matt Caswell wrote in : |On 17/10/2018 13:43, Steffen Nurpmeso wrote: |> Matt Caswell wrote in : |>|On 17/10/2018 13:12, Steffen Nurpmeso wrote: |>|> I have built final 1.1.1 yesterday on AlpineLinux musl after |>|> running a prelease from end of May before. My makefile rule for |>|> this bo

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Matt Caswell
On 17/10/2018 13:43, Steffen Nurpmeso wrote: > Matt Caswell wrote in : > | > | > |On 17/10/2018 13:12, Steffen Nurpmeso wrote: > |> Hello, and fyi. > |> > |> I have built final 1.1.1 yesterday on AlpineLinux musl after > |> running a prelease from end of May before. My makefile rule for

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Steffen Nurpmeso
Matt Caswell wrote in : | | |On 17/10/2018 13:12, Steffen Nurpmeso wrote: |> Hello, and fyi. |> |> I have built final 1.1.1 yesterday on AlpineLinux musl after |> running a prelease from end of May before. My makefile rule for |> this box is (excerpt) |> |> ./config --prefix=$(

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Nicola
Might this be related to https://github.com/openssl/openssl/issues/7406 and https://github.com/openssl/openssl/pull/7420 ? Nicola On Wed, 17 Oct 2018 at 15:12, Steffen Nurpmeso wrote: > Hello, and fyi. > > I have built final 1.1.1 yesterday on AlpineLinux musl after > running a prelease from en

Re: [openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Matt Caswell
On 17/10/2018 13:12, Steffen Nurpmeso wrote: > Hello, and fyi. > > I have built final 1.1.1 yesterday on AlpineLinux musl after > running a prelease from end of May before. My makefile rule for > this box is (excerpt) > > ./config --prefix=$(MYPREFIX) zlib-dynamic no-hw shared \ >

[openssl-users] no-async needs -DOPENSSL_NO_ASYNC nonetheless?

2018-10-17 Thread Steffen Nurpmeso
Hello, and fyi. I have built final 1.1.1 yesterday on AlpineLinux musl after running a prelease from end of May before. My makefile rule for this box is (excerpt) ./config --prefix=$(MYPREFIX) zlib-dynamic no-hw shared \ no-deprecated no-async no-tests \ -

Re: [openssl-users] openssl ca pkcs11 UI_set_result_ex:result too large:crypto/ui/ui_lib.c:910:You must type in 4 to 32 characters

2018-10-17 Thread Richard Levitte
In message on Tue, 16 Oct 2018 10:34:31 +0200, Peter Magnusson said: > Sorry, I am an idiot =) No you're not. > Problem resolved, user error. -key was the problem and should not be > used as I showed. > > -key has a different meaning for openssl ca than for openssl req, so > my PIN was my