[Fwd: Memory leak in TLS client side app]

2002-04-25 Thread Krishnaswamy R.
Hi all, This is a resend of a previous message. Any pointers or tips will be very much appreciated. thanks, Krishna Original Message Hi all, I have written a TLS client using the OpenSSL library. It uses memory BIOs as the input/output BIOs to the SSL connection. The code f

Using 3DES algorithm in SSL with only 2 keys

2002-04-15 Thread Krishnaswamy R.
Hello, In OpenSSL, is it possible to use the 3DES algorithm in an SSL connection so that only 2 keys are used (so that the first and third keys are they same) ? If so, could you please tell me how to do it. The need for this is to use only 112bit key length because of 128bit key export restricti

Memory leak in TLS client side app

2002-04-15 Thread Krishnaswamy R.
Hi all, I have written a TLS client using the OpenSSL library. It uses memory BIOs as the input/output BIOs to the SSL connection. The code flow of the client is as follows * SSL_CTX_new(...) * SSL_CTX_use_certificate_ASN1(...) * SSL_CTX_use_RSAPrivateKey_ASN1(...) * X509_STORE_add_cert() /

Re: Maximum size of server certificate

2002-01-24 Thread Krishnaswamy R.
Thanks a lot for the information. I checked out www.openssl.org. It mentions OpenSSL 0.9.6c (21-Dec-2001) as the latest release. Any idea when OpenSSL 0.9.7 is scheduled to be released? thanks and regards, Krishna Lutz Jaenicke wrote: > On Wed, Jan 23, 2002 at 05:42:58PM +0530, Krishnaswam

Re: Maximum size of server certificate

2001-12-20 Thread Krishnaswamy R.
connection and reject certificates bigger than that size. thanks, Krishna Eric Rescorla wrote: > Oops. Hit send too early. Here's the complete resonse. > > "Krishnaswamy R." <[EMAIL PROTECTED]> writes: > > Is there is any maximum size defined in TLS for a server&

Maximum size of server certificate

2001-12-18 Thread Krishnaswamy R.
Hi all, Is there is any maximum size defined in TLS for a server's certificate sent to the client? Or is there is any practical implementation size limit defined in OpenSSL for the size of a server's certificate. thanks, Krishna _

Identifying peer cert in verify_callback

2001-11-21 Thread Krishnaswamy R.
Hi all, Iam using a certificate verification callback function as follows SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER, cert_verify_cb); In the callback function, in addition to the standard certificate verification done by OpenSSL, i need to check the subject-name of the peer certificate. Since

Setting CA cert for verification.

2001-11-21 Thread Krishnaswamy R.
Hi all, Iam working on a TLS client using OpenSSL on VxWorks. I need to do server authentication. The openssl function SSL_CTX_load_verify_locations() takes a file as a parameter for the CA certificate. In my application, there is no standard file system and I have the CA cert(DER form) in memory

Re: Multi-threading support in OpenSSL

2001-10-21 Thread Krishnaswamy R.
Hi all, I didn't any receive replies on this. Any inputs or pointers will be very much appreciated. thanks, Krishna > Hi, > > I have question regarding enabling multi-thread support in OpenSSL. > We have ported OpenSSL library to VxWorks. We are having two > applications (one server and one cli

Multi-threading support in OpenSSL

2001-10-17 Thread Krishnaswamy R.
Hi, I have question regarding enabling multi-thread support in OpenSSL. We have ported OpenSSL library to VxWorks. We are having two applications (one server and one client). These two applications will run as separate tasks, each having its own SSL context. These tasks can concurrently do SSL op