Disable client initiated renegotiations

renegotiations? Thanks a lot. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs __ OpenSSL Project http://www.openssl.org User Support Mailing List

Check if raw socket connection is SSL

What is the best way to check if a raw socket connection is SSL or not? Or better to say... is there an OpenSSL API that can check if that connection is a supported SSL protocol or not? Thanks a lot. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs

Re: Generate DH parameters on the fly

just 4 files: dh512.pem, dh1024.pem, dh2048.pem, and dh4096.pem? Please let me know. Thanks a lot. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs On 20 Sep 2014, at 15:50, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Beh

Generate DH parameters on the fly

certificates on the fly. How can I do that? Which API should I use? Thanks a lot. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs __ OpenSSL Project http

Get information about current SSL connection

Once a client is connected to a server through SSL_accept, is there a way to get more information about the connection? I am looking for SSL version (sslv3 or TSLv1.1 or more) and which cypher is used. Any help would be really appreciated. Thanks. -- Marco Bambini http://www.sqlabs.com http

Support just selected SSL protocols on client/server

()) on server and: SSL_CTX_new(SSLv3_client_method()) on client I think I should use the SSL_CTX_set_options but It's not clear to me how to just support the above protocols. Any help? -- Marco Bambini

Re: Print SSL errors

It is 1. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs On 11 Aug 2014, at 16:24, Salz, Rich wrote: > What’s the value of err (“%ul”)? > > -- > Principal Security Engineer > Akamai Technologies, Cambridge MA > IM: rs...

Re: Print SSL errors

lib(0):func(0):reason(1) while ERR_print_errors_fp prints: 4349079552:error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned:/SourceCache/OpenSSL098/OpenSSL098-50/src/ssl/s3_srvr.c:2631: -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sq

Print SSL errors

? -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users

Re: Adding client peer verification to my server

nt.pem Thanks a lot for any help. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs On 26 Jul 2014, at 17:19, Michael Wojcik wrote: > Reduce the problem space. Try to connect to your server with openssl > s_client, and to connect y

Re: Adding client peer verification to my server

nt.pem Thanks a lot for any help. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs On 26 Jul 2014, at 17:19, Michael Wojcik wrote: > Reduce the problem space. Try to connect to your server with openssl > s_client, and to connect y

Re: Adding client peer verification to my server

ourceCache/OpenSSL098/OpenSSL098-50/src/ssl/s3_srvr.c:2631: I am surely doing something wrong... probably on client side. Any help? -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs On 25 Jul 2014, at 18:44, Michael Wojcik wrote: > Unless I've

Re: Adding client peer verification to my server

ourceCache/OpenSSL098/OpenSSL098-50/src/ssl/s3_srvr.c:2631: I am surely doing something wrong... probably on client side. Any help? -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs On 25 Jul 2014, at 18:44, Michael Wojcik wrote: > Unless I've

Adding client peer verification to my server

req -in clientreq.pem -sha1 -extensions usr_cert -CA root.pem -CAkey root.pem -CAcreateserial -out clientcert.pem $ cp clientkey.pem clientkey.pem.copy $ openssl rsa -in clientkey.pem.copy -out clientkey.pem $ cat clientcert.pem clientkey.pem rootcert.pem > client.pem Any help would be really really appreciated. Thanks a lot. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs http://instagram.com/sqlabs

SSL_set_fd and socket errors

and WSAGetLastError on Windows? Thanks a lot. -- Marco Bambini http://www.sqlabs.com http://twitter.com/sqlabs __ OpenSSL Project http://www.openssl.org User Support Mailing List