Re: SSL_accept and SIGALRM

2006-02-19 Thread Alberto Alonso
sigaction, which works perfect. I hope this helps anybody else reading this list. Alberto On Sun, 2006-02-19 at 01:16 -0600, Alberto Alonso wrote: > I am getting an unexpected behavior where SSL_accept doesn't > return after a SIGALRM > > The thread's SIGALRM handler is c

SSL_accept and SIGALRM

2006-02-18 Thread Alberto Alonso
to having SSL_MODE_AUTO_RETRY enabled on my end? Thanks, Alberto -- Alberto AlonsoGlobal Gate Systems LLC. (512) 351-7233http://www.ggsys.net Hardware, consulting, sysadmin, monitoring and remo

Re: SSL_shutdown and SIGPIPE

2006-02-13 Thread Alberto Alonso
he write operation; if it fails, we > close the socket and clean up the memory allocated to that connection. > > On 2/12/06, Alberto Alonso <[EMAIL PROTECTED]> wrote: > > I personally don't know why pipes are even in use in the openssl > > internals (though I bet there is a

Re: SSL_shutdown and SIGPIPE

2006-02-12 Thread Alberto Alonso
> > > Thanks > > --G3 > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Alberto Alonso > > Sent: Sunday, February 12, 2006 2:08 PM > > To: openssl-users@openssl.org > > Subject: SSL_shutdown a

RE: SSL_shutdown and SIGPIPE

2006-02-12 Thread Alberto Alonso
he wire, > i.e the closure alerts..and if a FIN was received meanwhile, > you will catch a SIGPIPE..this piece of code, actually > saves me from this.. > > Thanks > --G3 > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of

SSL_shutdown and SIGPIPE

2006-02-12 Thread Alberto Alonso
generates a SIGPIPE on the server. Is there anything I should be checking for before calling SSL_shutdown to make sure the connection is still OK? Thanks, Alberto -- Alberto AlonsoGlobal Gate Systems LLC. (512) 351-7233http://www.ggsys.net Hardware

Re: Hard-coded keys and cert in the image

2006-02-11 Thread Alberto Alonso
What would be the equivalent to do the root certificate to be used during validation? Basically the next step for me is not having to have the SSL_CTX_load_verify_locations call. The SSL_CTX_set_cert_store seems to be what I want, but I don't find documentation on how to create the store in the f

Re: Hard coding keys and certs

2006-02-06 Thread Alberto Alonso
Thanks, this is exactly what I was looking for. And thanks also to Peter for pointing out the already built options openssl x509 -C which produce the perfect C stub code. Alberto On Mon, 2006-02-06 at 10:04 +, Katie Lucas wrote: > On Fri, Feb 03, 2006 at 02:54:38PM -0600, Alberto Alo

Hard coding keys and certs

2006-02-03 Thread Alberto Alonso
would also like to have already in memory the cert chain for the root cert. The goal is to distribute a single binary that doesn't depend on any external files that can verify that it is connecting to the right server. Thanks, Alberto -- Alberto AlonsoGlobal

Multithreaded app segfault on ssl3_dispatch_alert

2006-01-17 Thread Alberto Alonso
Any ideas on what I need to be looking at? Thanks, Alberto -- Alberto AlonsoGlobal Gate Systems LLC. (512) 351-7233http://www.ggsys.net Hardware, consulting, collocation, monitoring and remote ba

Generating ASN1 buffers from PEM key and cert files

2004-10-27 Thread Alberto Alonso
:140AC00D:SSL routines:SSL_CTX_use_certificate_ASN1:ASN1 lib:ssl_rsa.c:556: Any ideas as to how I can get the ASN1 data so that I can put it on a char buffer? Thanks, Alberto -- Alberto AlonsoGlobal Gate Systems LLC. (512) 260-2523http://www.ggsys.net

When does "sslv3 alert bad record mac" happen?

2004-04-07 Thread Alberto Alonso
berto -- Alberto AlonsoGlobal Gate Systems LLC. (512) 260-2523http://www.ggsys.net Hardware, consulting, collocation, monitoring and remote backups __ OpenSSL Pr

Re: Openssl in multithreaded environment segfaults

2004-02-20 Thread Alberto Alonso
it worked ? If you > have a problem with this setup then it must be coming from your code, > and you might want to post your initialization code in the NG. > > Regards, -- Alberto AlonsoGlobal Gate Systems LLC. (512) 260-2523ht

Re: Openssl in multithreaded environment segfaults

2004-02-20 Thread Alberto Alonso
utexes in libcrypto, see CRYPTO_set_locking_callback for > this. > The second option is to have one SSL_CTX per thread, as mentionned by > Stephen. > > Regards, -- Alberto AlonsoGlobal Gate Systems LLC. (512) 260-2523http://w

Re: Openssl in multithreaded environment segfaults

2004-02-20 Thread Alberto Alonso
SL_CTX or EVP_CIPHER_CTX? Thanks, Alberto -- Alberto AlonsoGlobal Gate Systems LLC. (512) 260-2523http://www.ggsys.net Hardware, consulting, collocation, monitoring and remote backups ___

Openssl in multithreaded environment segfaults

2004-02-20 Thread Alberto Alonso
eeds encrypting. Any ideas as to where I need to be looking to figure this out? Thanks, Alberto -- Alberto AlonsoGlobal Gate Systems LLC. (512) 260-2523http://www.ggsys.net Hardware, consulting, collocation, monitoring and