RE: [EXTERNAL] Re: SSL error (78c0100): malloc failure while implementing tls 1.3

2022-06-29 Thread Ramaiah, Ravichandran Bagalur
_ From: Ramaiah, Ravichandran Bagalur Sent: Wednesday, June 29, 2022 12:55 PM To: Matt Caswell ; openssl-users@openssl.org Subject: RE: [EXTERNAL] Re: SSL error (78c0100): malloc failure while implementing tls 1.3 Hi Matt, Below is the error I got

RE: [EXTERNAL] Re: SSL error (78c0100): malloc failure while implementing tls 1.3

2022-06-29 Thread Ramaiah, Ravichandran Bagalur
; openssl-users@openssl.org Subject: [EXTERNAL] Re: SSL error (78c0100): malloc failure while implementing tls 1.3 On 16/06/2022 05:52, Ramaiah, Ravichandran Bagalur wrote: > > *SSL error (78c0100): malloc failure Do you get anything in the OpenSSL error stack for this (e.g. try "ERR_prin

Re: SSL error (78c0100): malloc failure while implementing tls 1.3

2022-06-21 Thread Matt Caswell
On 16/06/2022 05:52, Ramaiah, Ravichandran Bagalur wrote: *SSL error (78c0100): malloc failure Do you get anything in the OpenSSL error stack for this (e.g. try "ERR_print_errors_fp(stdout);"). We need a bit more to go on to figure out where specifically the malloc failure is occurring.

RE: SSL error (78c0100): malloc failure while implementing tls 1.3

2022-06-21 Thread Ramaiah, Ravichandran Bagalur
Hi All, Could anyone tell me if this issue is caused due to application error or an openssl bug? This malloc failure is happening when I try to establish TLS connection between 2 SIP applications. Regards, Ravi From: Ramaiah, Ravichandran Bagalur Sent: Thursday, June 16, 2022 10:23 AM To: ope

Re: SSL error after machine restart.

2013-07-31 Thread Jakob Bohm
On 31-07-2013 11:16, Rajeev Tomar wrote: Hi > We are using openssl 0.9.8 in our application. Things are working fine and suddenly we are having . Linux awtah.dispatchserver1 3.6.11-1.fc16.i686 #1 SMP Mon Dec 17 21:36:23 UTC 2012 i686 i686 i386 GNU/Linux error:1408F119:SSL routines:SSL3_GET_RECOR

Re: SSL error: SSL error code 336151528 (a seemingly rare error/bug?)

2012-03-27 Thread Marek . Marcola
Hello, $ echo "obase=16;336151528" | bc 140943E8 $ openssl errstr 140943E8 error:140943E8:SSL routines:SSL3_READ_BYTES:reason(1000) Best regards, -- Marek Marcola owner-openssl-us...@openssl.org wrote on 03/27/2012 01:09:56 AM: > Blake Mizerany > Sent by: owner-openssl-us...@openssl.org > >

Re: SSL error no start line

2011-03-29 Thread Victor Duchovni
On Tue, Mar 29, 2011 at 10:15:04AM +0200, Aarno Syv?nen wrote: > HI, > > what would error OpenSSL: error:0906D06C:PEM routines:PEM_read_bio:no start > line mean ? A PEM file was expected, but the input was not a PEM file, specifically, it had no "-BEGIN ...-" line. -- Viktor.

Re: SSL error: parse tlsext

2010-04-09 Thread Florent Georges
Dr. Stephen Henson wrote: > > > openssl s_client -connect xxx.org:443 > > > and it should say if secure renegotiation is supported in > > > the output. > > Thanks for the tip! I tried, but I am afraid I cannot tell > > whether it is the case or not, based on this output. I tried > > on googl

Re: SSL error: parse tlsext

2010-04-07 Thread Dr. Stephen Henson
On Wed, Apr 07, 2010, Florent Georges wrote: > Dr. Stephen Henson wrote: > > Thanks for your fast response! > > > That looks like it is only part of the actual error code. > > That's all I have. I guess either Subversion or Neon truncates > the error message. > > > I suspect it is because

Re: SSL error: parse tlsext

2010-04-07 Thread Florent Georges
Dr. Stephen Henson wrote: Thanks for your fast response! > That looks like it is only part of the actual error code. That's all I have. I guess either Subversion or Neon truncates the error message. > I suspect it is because the server doesn't support secure > renegotiation. You can check

Re: SSL error: parse tlsext

2010-04-07 Thread Dr. Stephen Henson
On Wed, Apr 07, 2010, Florent Georges wrote: > Hi, > > I am using openssl from within neon, itself used from within > Subversion. During an svnsync, I receive the following error > message: > > svnsync: PROPFIND of '/svn/xxx': SSL negotiation failed: SSL > error: parse tlsext (https

RE: SSL Error and Info messages

2008-02-25 Thread Shaw Graham George
Hi, This may or may not be helpful ... it depends on your code, and what applications that you are talking to that lead to these errors: (1) reminds me of a problem that can occur when using OpenSSL against some Java implementations. You can test it by using openssl s_client or s_server using th

RE: SSL Error and Info messages

2008-02-25 Thread David Schwartz
> My application calls some library functions, which uses > OpenSSL. When my appliction runs, I believe OpenSSL emitted > some messages described below. Nope. Your application emitted them. OpenSSL detected them and reported them, you chose to print them out. > Does anyone know what caused thos

Re: SSL Error connecting to cia.gov

2007-10-24 Thread Alex Lam
Try this.. ./openssl s_client -tls1 -connect www.cia.gov:443 On 10/24/07, Lutz Jaenicke <[EMAIL PROTECTED]> wrote: > > Isolating the problem is more or less simple: > openssl s_client -connect www.cia.gov:443 > shows the intermittent failures as well, so we can rule out all > applications (cur

Re: SSL Error connecting to cia.gov

2007-10-24 Thread Marek Marcola
On Tue, 2007-10-23 at 22:02 -0700, Alex Lam wrote: > That's TLSv1, not SSLv2. > > : 01 03 01 00 63 00 00 00 10 00 00 39 00 00 38 00 c..9..8. > 0010: 00 35 00 00 88 00 00 87 00 00 84 00 00 16 00 > 00 .5.. > 0020: 13 00 00 0a 07 00 c0 00 00 33 00 00 32 00 00 2f .3..2

Re: SSL Error connecting to cia.gov

2007-10-24 Thread Lutz Jaenicke
Isolating the problem is more or less simple: openssl s_client -connect www.cia.gov:443 shows the intermittent failures as well, so we can rule out all applications (curl, wget, ...). Has to be some basic thing. I tend to observe the failure with s_client not on the first attempt but on the nth

Re: SSL Error connecting to cia.gov

2007-10-23 Thread Alex Lam
That's TLSv1, not SSLv2. : 01 03 01 00 63 00 00 00 10 00 00 39 00 00 38 00 c..9..8. 0010: 00 35 00 00 88 00 00 87 00 00 84 00 00 16 00 00 .5.. 0020: 13 00 00 0a 07 00 c0 00 00 33 00 00 32 00 00 2f .3..2../ 0030: 00 00 45 00 00 44 00 00 41 00 00 07 05 00 80 03 ..E..D

Re: SSL Error connecting to cia.gov

2007-10-23 Thread Jake Goulding
Marek Marcola wrote: > I think that this is CIA webserver problem. > You may test this with: > $ openssl s_client -connect www.cia.gov:443 -state -debug -msg [[-ssl3] > [-tls1]] > and in any combination after some successful connection you will get failed > connections. > For example: > $ opens

Re: SSL Error connecting to cia.gov

2007-10-23 Thread Marek Marcola
Hello, > We use curl to retrieve webpages, and recently started receiving an > intermittent (40-60% of the time) error when retrieving a page from the > CIA. About two weeks ago, they switched to running https only, with the > http URLs being forwarded to the https equivalents. > > The error we re

Re: SSL ERROR on verifying Certificate

2007-07-04 Thread Marek Marcola
Hello, > I am trying to verify a certificate with the folowing command line on a > windows 32 bit plateform: > > C:\OpenSSL\bin> openssl verify -CAfile d:\cert.pem d:\cert2.pem > > It replies me: > > d:\cert2.pem: /C=FR/ST=Cote d Or/L=Saint Apollinaire/O=societe des AUTOROUTES > PARIS RHIN RHO

Re: SSL error (138): cipher or hash unavailable

2007-04-17 Thread Johans Taboada
2007/4/10, Johans Taboada <[EMAIL PROTECTED]>: Hi list, I ask for help please. Still waiting... DatabaseError: SSL error: cipher or hash unavailable\n ... OperationalError: SSL error: cipher or hash unavailable\n ... What does it really mean '''cipher or hash unavailable'''? (SSL Error

Re: SSL Error

2006-08-10 Thread Dr. Stephen Henson
On Wed, Aug 09, 2006, Carlo Agopian wrote: > Hello, > > Has anybody seen the following runtime error message before? > > error::lib(0):func(0):reason(0) > Yes. It normally means "no error has been placed on the queue and the the application wrongly thinks it has and can print it

Re: SSL Error

2006-08-10 Thread Andrew Dennison
You can't reuse a socket for a TCP connection, but you certainly can reuse the same TCP socket for an arbitrary number of SSL connections as long as you don't compromise the TCP connection while you're doing it.  I suspect that is the intention here and from the sounds of things (if all he is getti

RE: SSL Error

2006-08-10 Thread Usman Riaz
sorry if I misunderstood you, but AFAIK, pure sockets API doesnt allow socket reuse as such. You have to have a new socket for every TCP connection, you can't "reuse" a socket. From: "Carlo Agopian" <[EMAIL PROTECTED]>Reply-To: openssl-users@openssl.orgTo: CC: "Carlo Agopian" <[EMAIL PROTECTED]>S

Re: SSL Error

2006-08-10 Thread Andrew Dennison
This error is indicative that there is no error.  You have simply read the error buffer one more time than you should have.  There is absolutely nothing wrong with your application state if you see this reported.  In my experience it wont cause any application problems if you check the error queue

Re: SSL error: no cipher list

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, Yuriy Synov wrote: > In fact I'm not using OpenSSL library directly. I use an open source library > Indy which in turn makes use of OpenSSL. I discovered that POP3 servers that > use DES-CBC3-SHA work correctly with my program, and the server that fails > uses RC4-SHA. I got

Re: SSL error: no cipher list

2005-01-24 Thread Yuriy Synov
eters, but it means that I will need to modify Indy (the lib I'm using) which is not a very simple task. I will report to this list if I get any positive results. - Original Message - From: "mclellan, dave" <[EMAIL PROTECTED]> To: Sent: Sunday, January 23, 2005 3:12

Re: SSL error: no cipher list

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, Yuriy Synov wrote: > > See if you can connect to the server using the s_client test program. For > > example: > > > > openssl s_client -conntect hostname:995 > > > > (use whatever port it uses for POP4+SSL, 995 is standard). > > Output from 'openssl s_client' follows: > > [

Re: SSL error: no cipher list

2005-01-24 Thread Yuriy Synov
lf signed certificate in certificate chain) --- +OK <[EMAIL PROTECTED]> (mtiwpxc03) Maillennium POP3/PROXY server #2 and after that I can enter POP3 commands. - Original Message - From: "Dr. Stephen Henson" <[EMAIL PROTECTED]> To: Sent: Saturday, January 22, 2005 2:19

RE: SSL error: no cipher list

2005-01-23 Thread mclellan, dave
ftware Engineer EMC Corporation 228 South St. Hopkinton MA 01748 phone: 508-249-1257 fax 508-497-8030 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Henry Su Sent: Friday, January 21, 2005 3:11 PM To: openssl-users@openssl.org Subject: RE: SSL error:

Re: SSL error: no cipher list

2005-01-22 Thread Dr. Stephen Henson
On Sat, Jan 22, 2005, Yuriy Synov wrote: > > No sure if you have set it or not. If not, you can try following example: > > > > #define CIPHER_LIST "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" > > > > SSL_CTX_set_cipher_list(ctx, CIPHER_LIST) ; > > I tried to set that cipher list, and now I get the followi

Re: SSL error: no cipher list

2005-01-22 Thread Yuriy Synov
[EMAIL PROTECTED]> To: Sent: Friday, January 21, 2005 10:10 PM Subject: RE: SSL error: no cipher list > No sure if you have set it or not. If not, you can try following example: > > #define CIPHER_LIST "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" > > SSL_CTX_set_cipher_list

RE: SSL error: no cipher list

2005-01-21 Thread Henry Su
No sure if you have set it or not. If not, you can try following example: #define CIPHER_LIST "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" SSL_CTX_set_cipher_list(ctx, CIPHER_LIST) ; -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Yuriy Synov Sent: Friday, January 2

Re: SSL error status: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

2002-12-05 Thread Lutz Jaenicke
On Wed, Dec 04, 2002 at 01:56:12PM -0500, Will Day wrote: > >I tried to verify my cert using: > >error 20 at 0 depth lookup:unable to get local issuer certificate > > > >What does error 20 mean? The cert works when using https, imaps, pop3s, > >etc. unable to get local issuer certificate means th