Re: Openssl and tls 1.2

2019-08-13 Thread Somshekar C Kadam
Thanks Viktor for clarification Regards Somshekar C Kadam 9036660538 On Wed, Aug 14, 2019 at 9:43 AM Viktor Dukhovni wrote: > Java's TLS library is not OpenSSL. This is not the right list > for help with TLS in JDK8. Speculatively, the timeout might be > related to IPv6 being enabled on the

Re: Openssl and tls 1.2

2019-08-13 Thread Viktor Dukhovni
Java's TLS library is not OpenSSL. This is not the right list for help with TLS in JDK8. Speculatively, the timeout might be related to IPv6 being enabled on the board with JDK8 and Linux 4.x. Perhaps you're trying the IPv6 address, timing out, and then failing over to IPv4. Or some middle-box i

Openssl and tls 1.2

2019-08-13 Thread Somshekar C Kadam
Hi , we are running java 1.6 (older build) and java 1.8(newer build) on the same arm target board with different builds. On 1.6 java we have Linux Kernel 2.6.35 and with Java 1.8 Linux kernel 4.x. version. so 2 environments and 2 use cases newer and older build. while we access https website link h

IPv6 address encoding in commonName

2019-08-13 Thread Robert Moskowitz
I am fiddling around with an intermediate CA signing cert that the CA's 'name' is it HIP (RFC 7401) HIT which is a valid IPv6 address. Actually a Hierarchical HIT as in draft-moskowitz-hierarchical-hip (to be revised soon). For a client cert, it would be easy to put the HIT in subjectAltName p

Open SSL Android ignoring setenv-android.sh

2019-08-13 Thread chrisfahlin
Hey All Im trying to cross compile openssl for android using the *setenv-android.sh* script according to the steps on the wiki, It sets the environment variables correctly but when I run ./config from within the project it proceeds to target i686-apple-darwin instead of android. I had this worki

RE: OPENSSL_init_crypto with OPENSSL_INIT_NO_ATEXIT issue

2019-08-13 Thread Michael Wojcik
The output certainly suggests something is calling TlsAlloc between the call made for destructor_key.value and the one for private_drbg, and that index is never freed. You always get 7 when allocating destructor_key.value because that index was freed when you unloaded OpenSSL, and so it's the ne

Re: OPENSSL_init_crypto with OPENSSL_INIT_NO_ATEXIT issue

2019-08-13 Thread Matt Caswell
On 13/08/2019 19:16, Dan Heinz wrote: > On 09/08/2019 14:33, Dan Heinz wrote: >>> I have a static library using OpenSSL (built as static library with the >>> no-pinshared parameter in the configuration) that is then included in a >>> DLL that gets loaded and unloaded many times by the calling ap

RE: OPENSSL_init_crypto with OPENSSL_INIT_NO_ATEXIT issue

2019-08-13 Thread Dan Heinz
On 09/08/2019 14:33, Dan Heinz wrote: >> I have a static library using OpenSSL (built as static library with >> the no-pinshared parameter in the configuration) that is then included >> in a DLL that gets loaded and unloaded many times by the calling >> application.  Now that the code is in 1.1.

About truncation in SM2 signature !!

2019-08-13 Thread Hareesh D
Can someone please tell me if Digest has to be Truncated while generating and verifying SM2 signatures. I see it has to be truncated in case of Ecdsa signature. Thanks !!