Re: writing an SSH server

2011-10-28 Thread Eric S. Eberhard
Thank you! Thank is great info for me if I ever need SSH (meaning SSL with the protocol). It may also help the original person as he may be able to solve his problem using inetd and openssh ... which is easy and reliable and works great if you have remotely reasonable traffic. Also, way less

Re: writing an SSH server

2011-10-28 Thread David Durham
On Fri, Oct 28, 2011 at 12:26 PM, David Durham wrote: > > I'm just sending the message to cout.  If you can point me to > information on outputting the full OpenSSL error stack, I'd appreciate > it. replied too soon, looks like this is what I want: ERR_print_errors(sbio); -Dave

Re: writing an SSH server

2011-10-28 Thread David Durham
On Thu, Oct 27, 2011 at 4:55 PM, Dave Thompson wrote: > If you just want confidentiality with truly no authentication, > SSL/TLS (and OpenSSL) can do that with the anonymous-DH and > anonymous-ECDH suites. I assume you understand and accept the > vulnerabilities you are creating by not authenticat

Re: writing an SSH server

2011-10-28 Thread Jakob Bohm
On 10/28/2011 2:08 AM, Eric S. Eberhard wrote: I end up using SSL because, weirdly, credit card companies and shipping companies (I do business software), and so forth, all use SSL -- almost always HTTPS -- and I don't have a call for a protocol. It would be REALLY cool if you could make a wra

RE: writing an SSH server

2011-10-27 Thread Eric S. Eberhard
I end up using SSL because, weirdly, credit card companies and shipping companies (I do business software), and so forth, all use SSL -- almost always HTTPS -- and I don't have a call for a protocol. It would be REALLY cool if you could make a wrapper on stunnel to handle the "H" protocol port

RE: writing an SSH server

2011-10-27 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of David Durham > Sent: Thursday, 27 October, 2011 16:48 > I'm new to C++ and libssl, but nevertheless trying to write an SSH > server. I have gone through tutorials and believe I have a working > server that initializes and SSL context, binds and

Re: writing an SSH server

2011-10-27 Thread David Durham
On Thu, Oct 27, 2011 at 4:09 PM, Eric S. Eberhard wrote: > I believe the last function, the write, is missing a return false with the > error message? Doesn't matter though, it's not an issue. Thanks. __ OpenSSL Project

Re: writing an SSH server

2011-10-27 Thread Eric S. Eberhard
I believe the last function, the write, is missing a return false with the error message? Writing servers is VERY difficult to make 100% reliable, good logging, etc. I have many years experience and still avoid it when I can. You need to understand blocking and non-blocking calls, your netw