how to use session ticketing at client/server level

2022-10-21 Thread Sethuraman Venugopal
Dear Team, Please provide me the list of API's(or any sample programs) to be used at server/client side to process session ticketing. Currently we are in the process of migrating from session ID usage to session ticketing. Regards, Sethu V

Re: Best Practice of Creating TLS Client /Server in C?

2022-02-11 Thread Matt Caswell
/server with best practices? After googling for some time, I am unable to find an recent example of how to create a TLS client/server  in C.  I even tried compiling and running the demo/client-arg.c/server-arg.c,  but the running generated some alerts and warnings. I’m hoping to learn the best way

Re: Best Practice of Creating TLS Client /Server in C?

2022-02-11 Thread Steffen Nurpmeso
Viktor Dukhovni wrote in : |On Fri, Feb 11, 2022 at 09:13:05PM +, Joseph Chen via openssl-users \ |wrote: |> Could someone point me to some good reads or C code examples for |> creating a TLS client/server with best practices? ... |In Postfix, you'll find clean, well commente

Re: Best Practice of Creating TLS Client /Server in C?

2022-02-11 Thread Viktor Dukhovni
On Fri, Feb 11, 2022 at 09:13:05PM +, Joseph Chen via openssl-users wrote: > Could someone point me to some good reads or C code examples for > creating a TLS client/server with best practices? Best practices vary between application applications. For example, a Web browser retriev

Best Practice of Creating TLS Client /Server in C?

2022-02-11 Thread Joseph Chen via openssl-users
Hello, Could someone point me to some good reads or C coed examples for creating a TLS client/server with best practices? After googling for some time, I am unable to find an recent example of how to create a TLS client/server in C. I even tried compiling and running the demo/client-arg.c

Re: client/server communication with OpenSSL && with passwords or passphrase

2022-01-24 Thread Jan Just Keijser
Hi, On 21/01/22 11:29, Matthias Apitz wrote: Hello, we develop a business application as client/server with TCP/IP communication and a human readable protocol, which is encrypted by OpenSSL. The servers are C-written on top of PostgreSQL on Linux, while the clients are mostly Java-written and

client/server communication with OpenSSL && with passwords or passphrase

2022-01-21 Thread Matthias Apitz
Hello, we develop a business application as client/server with TCP/IP communication and a human readable protocol, which is encrypted by OpenSSL. The servers are C-written on top of PostgreSQL on Linux, while the clients are mostly Java-written and running on Win10 PCs of the staff, talking over

Re: Performance related queries for SSL based client server model

2014-09-09 Thread Alok Sharma
yone share me sample SSL based client server programme which I could use to measure performance. Regards, Alok On Tue, Sep 9, 2014 at 3:54 AM, Iñaki Baz Castillo wrote: > > 2014-09-08 19:46 GMT+02:00 Alok Sharma : > > One thing I observerd by looking into scp > > code that it doe

Re: Performance related queries for SSL based client server model

2014-09-08 Thread Iñaki Baz Castillo
stand if there is any way to > improve performance of SSL_Read or SSL_write to achive high performance. > Following are my client server programmes. Here client writes file on > server machine in hardcoded location and name. You have lot of errors in your program. I suggest that you first prop

Re: Performance related queries for SSL based client server model

2014-09-08 Thread Viktor Dukhovni
On Mon, Sep 08, 2014 at 11:16:46PM +0530, Alok Sharma wrote: > while ( (n = read(fd, recvBuff, sizeof(recvBuff)-1)) > 0) > { > recvBuff[n] = 0; > mode=n; > i=0; > while(mode>0) > { > len=SSL_write(ssl, recvBuff, mode); >

Re: Performance related queries for SSL based client server model

2014-09-08 Thread Alok Sharma
Hi, I am trying with simple client server model where it is reading datat from a file and calling SSL_write and similar thing is happening on other end i.e. reading from SSL using SSL_read and writing to file. Itis taking 40 mins of time to copy file of size 600 MB and if I run a non-ssl

Re: Performance related queries for SSL based client server model

2014-09-07 Thread Viktor Dukhovni
On Sun, Sep 07, 2014 at 01:00:17PM +0530, Alok Sharma wrote: >I am writing one sample ssl based client server model which uses > SSL_Read & SSL_Write API provided by openssl. If you transfering each block of data as an RPC, with a round-trip acknowledgement before sending the next

RE: Performance related queries for SSL based client server model

2014-09-07 Thread Dave Thompson
-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Alok Sharma Sent: Sunday, September 07, 2014 03:30 To: openssl-...@openssl.org; openssl-users@openssl.org Subject: Performance related queries for SSL based client server model Hi, I am writing one sample ssl based

Performance related queries for SSL based client server model

2014-09-07 Thread Alok Sharma
Hi, I am writing one sample ssl based client server model which uses SSL_Read & SSL_Write API provided by openssl. But I found that my application is very slow it takes around 40 mins to copy 700MB file. While same file using scp finishes in 10 mins. So my query is that is there

Support just selected SSL protocols on client/server

2014-08-22 Thread Marco Bambini
Hello, I am working on a custom client/server C applications and I would like to support: SSLv3, and TLSv1, TLSv1.1 or TLS v1.2 on server side (because I need to support older clients too) and just TLSv1.1 or TLS v1.2 on client side. Actually I am just using: SSL_CTX_new(SSLv3_server_method

Re: certificate regeneration problem: how to create certs for use in a client/server application

2014-07-23 Thread Jeffrey Walton
On Wed, Jul 23, 2014 at 9:21 PM, Daniel Bertrand wrote: > Specifically, what can lead me backwards from the > > "Error with certificate at depth: 0, Error with issuer” error code? > > I was hoping for a specific reason why this line > > X509_NAME_oneline(X509_get_issuer_name(cert), data, 256); >

Re: certificate regeneration problem: how to create certs for use in a client/server application

2014-07-23 Thread Daniel Bertrand
to test/verify your setup: > >openssl s_client -connect : -CAfile > > It should complete with "Verify OK (0)" or similar. > > Jeff > > On Wed, Jul 23, 2014 at 4:24 PM, Daniel Bertrand > wrote: >> Hi, >> >> I have inherited s

Re: certificate regeneration problem: how to create certs for use in a client/server application

2014-07-23 Thread Jeffrey Walton
rify OK (0)" or similar. Jeff On Wed, Jul 23, 2014 at 4:24 PM, Daniel Bertrand wrote: > Hi, > > I have inherited some c code which implements client/server communication. > The certs expired last week and there is no documentation as to how the > certs were generated. > > I

certificate regeneration problem: how to create certs for use in a client/server application

2014-07-23 Thread Daniel Bertrand
Hi, I have inherited  some c code which implements client/server communication. The certs expired last week and there is no documentation as to how the certs were generated. I would like to know the correct sequence of openssl commands to generate the certificate files on server S and client

SSL client/server reconnect

2012-11-25 Thread Sergej Fotler
Hi everybody, I have a few questions to SSL development. In our company we are developing a server - client application. Server runs on AS400 IBM and client on windows and linux systems. For the server side we are using Global Secure Toolkit (GSKit) and for the client side we want to use OpenSSL.

RE: openssl client/server connection

2012-09-26 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of sa...@zxid.org > Sent: Wednesday, 26 September, 2012 06:46 > Matthias Apitz said: > > and was a bit surprised that the connection went fine and > the "wserver" > > accepts the SSL connection and responds fine with its dummy > message. The > >

Re: openssl client/server connection

2012-09-26 Thread sampo
Matthias Apitz said: > and was a bit surprised that the connection went fine and the "wserver" > accepts the SSL connection and responds fine with its dummy message. The > openssl client does not need any key files to connect... In normal SSL, only the server needs certificate and private key. In

openssl client/server connection

2012-09-26 Thread Matthias Apitz
Hello, I'm on the way to change some TCP/IP client server application to use Openssl to cipher the traffic. To get understanding of Openssl I started with the openssl-examples-20020110 some weeks ago. After struggling some time with the way of creating the CA and certificate (because the

RE: client server management of client SSL certificates

2012-07-29 Thread Ted Byers
> -Original Message- > From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of yyy > Sent: July-29-12 11:18 AM > To: openssl-users@openssl.org > Subject: Re: client server management of client SSL certificates > > On 2012

Re: client server management of client SSL certificates

2012-07-29 Thread yyy
On 2012.07.29. 17:49, Ted Byers wrote: > Thanks > > Are you talking about an object available in the browser object and > accessible via JavaScript, or a JavaScript file I'd include in my web page? > Can you provide an URL to a resource where I can learn more about it? > > It is a html form elemen

RE: client server management of client SSL certificates

2012-07-29 Thread Ted Byers
> From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jason Goldberg > Sent: July-29-12 9:43 AM > To: > Subject: Re: client server management of client SSL certificates > Thanks Jason, > There are Javascript libraries which range from ge

RE: client server management of client SSL certificates

2012-07-29 Thread Ted Byers
> -Original Message- > From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of yyy > Sent: July-29-12 10:09 AM > To: openssl-users@openssl.org > Subject: Re: client server management of client SSL certificates > > On 2012.07

Re: client server management of client SSL certificates

2012-07-29 Thread yyy
On 2012.07.29. 8:52, Sanford Staab wrote: > Good questions and similar to what is on my mind. Please let me know > if you get any good answers to these questions. > > * There is SPKAC, which generates rsa key pairs in browser (firefox, chrome, opera)(ie not supported) and sends certificate reque

Re: client server management of client SSL certificates

2012-07-29 Thread Jason Goldberg
answers to these questions. From: Ted Byers<mailto:r.ted.by...@gmail.com> Sent: Saturday, July 28, 2012 12:15 PM To: openssl-users@openssl.org<mailto:openssl-users@openssl.org> Subject: client server management of client SSL certificates I am familiar with basic usage of openssl to m

Re: client server management of client SSL certificates

2012-07-28 Thread Sanford Staab
Good questions and similar to what is on my mind. Please let me know if you get any good answers to these questions. From: Ted Byers Sent: Saturday, July 28, 2012 12:15 PM To: openssl-users@openssl.org Subject: client server management of client SSL certificates I am familiar with basic

RE: setting up an openssl client/server connection

2012-07-23 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Matthias Apitz > Sent: Sunday, 22 July, 2012 02:54 > I'm trying to build openssl keys to be used in a client/server connection > and neeed some step by step guide for this, as I'm doing it for the > first time. > 1

setting up an openssl client/server connection

2012-07-22 Thread Matthias Apitz
Hello, I'm trying to build openssl keys to be used in a client/server connection and neeed some step by step guide for this, as I'm doing it for the first time. I found and started with the following procedure: http://acs.lbl.gov/~boverhof/openssl_certs.html Generating Cli

Re: sample client-server code withh ssl

2011-01-06 Thread michel
the source code available here was also usefull for me : http://www.opensslbook.com/ excerpt from the book can be found online with google preview Le 06/01/2011 00:00, Bhola Ray a écrit : Hello, Can anyone provide me with a working client-server code with SSL. If there is a pointer to a

Re: sample client-server code withh ssl

2011-01-05 Thread oscaruser
See openssl/apps, s_client.c and s_server.c, both of which you can invoke using openssl tool. -Original Message- From: Bhola Ray To: openssl-users@openssl.org Sent: Wed, Jan 5, 2011 3:00 pm Subject: sample client-server code withh ssl Hello, Can anyone provide me

sample client-server code withh ssl

2011-01-05 Thread Bhola Ray
Hello, Can anyone provide me with a working client-server code with SSL. If there is a pointer to a site from which I can download that's fine also. Any input would be greatly appreciated. Thanks in advance, Warm regards, bhola

Re: openssl 1.0.0 - client-server programs/demos don't work anymore?

2010-05-19 Thread Mihai Militaru
> Basically, what one has to do to reproduce the bug is to build the > example in the source archive: openssl-1.0.0/demos/bio. It used to > work, but it doesn't anymore. If someone is interested in a quick > howto for reproducing it, to test on their machine, here it is: If anyone tests this, plea

openssl 1.0.0 - client-server programs/demos don't work anymore?

2010-05-18 Thread Mihai Militaru
Hey, I'm trying to find out whether this is a bug or something changed in version 1.0.0 in such a way that previous correct workflows to write openssl servers are not valid anymore, at least on Linux. Basically, what one has to do to reproduce the bug is to build the example in the source archive

Re: about the security of a tipical client/server application.

2009-11-10 Thread Kirk81
; of a burden on your server. > i'm going to implement the ECDSA with SHA-256, (of course with a longer key than secp160k1). and i'm gonna have a look to the performace. Thanks -- View this message in context: http://old.nabbl

Re: about the security of a tipical client/server application.

2009-11-09 Thread Jeffrey Walton
Hi Kirk, > I've already implemented the ECDSA scheme in my application: > using SHA-1 and secp160k1. In that case, consider using ECDSA. > I'm pretty faster on the signer's side, but i'm actually > much slower on the verification side. Compare apples to apples: use an appropriate RSA moduli. Sinc

Re: about the security of a tipical client/server application.

2009-11-09 Thread John R Pierce
Kirk81 wrote: Does a individual hackers have the NASA's PC? assume they can have clusters of 100s/1000s of computers at their bidding (aka 'botnets' of trojan-infected PC's scattered around the world.) __ OpenSSL Project

Re: about the security of a tipical client/server application.

2009-11-09 Thread Kirk81
#x27;m actually much slower on the verification side. Of course, with ECDSA, the lifetime of my key is quite longer, since HW attacks appear infeasible on secp160k1. So, should i worry about an attack on the SHA-1? or on the # of sent messages? thanks -- View this message in context: http://o

Re: about the security of a tipical client/server application.

2009-11-09 Thread Jeffrey Walton
Hi Kirk, > I'm pretty sure that the weakness of all the mechanism is the key-length and > I'd like to avoid the brute force attack or the worst birthday attack...so > here's my questions. There's no need to find collisions on the hash. The key is the weak point. Your attacker will factor N, change

about the security of a tipical client/server application.

2009-11-09 Thread Kirk81
irk -- View this message in context: http://old.nabble.com/about-the-security-of-a-tipical-client-server-application.-tp26259295p26259295.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __ OpenSSL

regarding verification client /server certificates using cross certification

2008-11-12 Thread vijay sankar
hi friends, i have developed software(client & server programs using C lang) for mutual authentication between client and server using OpenSSL APIs on Linux O.S.it's working fine. Now, i want to do cross certrification of two root CAs & verification of cl

NEW Bee Please help in writing a client server program

2008-09-17 Thread Deepak Mundra
Hi everybody .. I am new to open ssl .. I am trying to write a simple client server program ... I have already created client server program .. now i have to add ssl code snippet so that i can send and recive data using ssl.. and please tel me how to create certificates for server and clients

Re: client - server authentication

2008-08-24 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dhaval Thakar wrote: | Hi list, Hello Daval, | i have a hosted site over internet for the branch users, which i want to | restrict over internet, | e.g only certain computers will be allowed to access site. | i want to restrict it to only branch comp

client - server authentication

2008-08-24 Thread Dhaval Thakar
Hi list, i do not have much experience in ssl/tls certificates & i know almost nothing about it. i have a hosted site over internet for the branch users, which i want to restrict over internet, e.g only certain computers will be allowed to access site. i want to restrict it to only branch comput

Re: Doubt with VeriSign certificate and client-server: must I install it on server?

2008-01-29 Thread Marek . Marcola
Hello, > Using cURL with Linux, I want to make a webservice request to a remote > server which requires an X509 cert. > > I got a Trial SSL Certificate by Verisign and obtained three files which I > copied into my machine (client): > - ssl.key (private key, generated by my server) > - verisign.cr

Doubt with VeriSign certificate and client-server: must I install it on server?

2008-01-28 Thread tarmstrong
com/Doubt-with-VeriSign-certificate-and-client-server%3A-must-I-install-it-on-server--tp15045595p15045595.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __ OpenSSL Project http://w

Re: Understanding Client/Server encryption

2006-04-04 Thread Girish Venkatachalam
I do a "man ciphers" and I see all the cipher suites. I don't see Diffie Hellman being used with RSA. However I do see TLS_DH_RSA_WITH_AES_128_CBC_SHA DH-RSA-AES128-SHA My guess is that Diffie Hellman is used for key agreement and RSA is used for signatures. Hope it helps. regards, Girish

Re: Understanding Client/Server encryption

2006-04-04 Thread michael Dorrian
Not boring at all and thank you for your detailed reply. I guess the last part of my question was pretty vague. I just wanted to know how the diffie-hellman  and RSA public key algorithms work together. It seems both are used. But i am not sure about exactly how they are used. The diffie hellman on

Re: Understanding Client/Server encryption

2006-04-04 Thread Girish Venkatachalam
Kyle is the best person to explain these things to you. However I will make an attempt. Please find answers inline. --- michael Dorrian <[EMAIL PROTECTED]> wrote: > I make a client and server certificate and then sign > it with the root cert.Are these generated > certificates the public keys? Yes

Understanding Client/Server encryption

2006-04-04 Thread michael Dorrian
I make a client and server certificate and then sign it with the root cert.Are these generated certificates the public keys?. I can attach small data to an RSA key but usually RSA is not used for actually encrypting the data. Is that right?. A specified cipher suite(e.g sha1 for hashing etc.) is u

client & server cumminucation problem

2006-03-29 Thread anil kumar dahiya
Hi I have written a client program using openssl  to talk with Gateway (running on i386 machine) I compiled program test.c as below on linux (i386 ) and macos 10.3 (ppc).   gcc   -ansi -DOPENSSL_THREADS -D_REENTRANT -DOPENSSL_NO_KRB5 -O3 -fomit-frame-pointer -fno-common -DL_ENDIAN -Wall   -l

problem in client & server cumminication

2006-03-29 Thread anil kumar dahiya
Hi I have making a client program using openssl  to take with Gateway (running on i386 machine) I compiled program test.c as below on linux (i386 ) and macos 10.3 (ppc).   gcc   -ansi -DOPENSSL_THREADS -D_REENTRANT -DOPENSSL_NO_KRB5 -O3 -fomit-frame-pointer -fno-common -DL_ENDIAN -Wall   -lssl

Re: securing my client / server application

2006-03-15 Thread Mikhail Kruk
The name in the certificate will not be automatically verified for you. Your application has to verify that the name specified in the certificate somehow matches who your peer claims to be. So if client verifies a certificate of a server it should make sure that the name in certificate matches

Re: securing my client / server application

2006-03-15 Thread Severine
Thansk for you answer The name in the certificate will not be automatically verified for you. Your application has to verify that the name specified in the certificate somehow matches who your peer claims to be. So if client verifies a certificate of a server it should make sure that the name

Re: securing my client / server application

2006-03-14 Thread Mikhail Kruk
Thanks for your fast answer. Well I've just generated certificates with the machine names. And the problem is the same. Or maybe I'm still wrong with my certificates. The name in the certificate will not be automatically verified for you. Your application has to verify that the name specified

Re: securing my client / server application

2006-03-14 Thread Severine
'localhost' as CommonName (or rather, subjectAltName) only makes sense if it's on the same machine. Otherwise, it needs to be the actual name of the machine as it's known to the rest of the network, else it'll have a problem verifying. Thanks for your fast answer. Well I've just generated

Re: securing my client / server application

2006-03-14 Thread Kyle Hamilton
On 3/14/06, Severine <[EMAIL PROTECTED]> wrote: > > Hi all and thanks in advance for your help. > Here is my problem. > My current project is to secure a client/server application using SSL . > The application has already its own client/server tcp socket. This > socket can

securing my client / server application

2006-03-14 Thread Severine
Hi all and thanks in advance for your help. Here is my problem. My current project is to secure a client/server application using SSL . The application has already its own client/server tcp socket. This socket can be either a client or a server depending on the case. That is because the

o'reilly client/server connection error

2003-09-01 Thread Duncan truter
Hi, I'm new to freebsd/openssl. I've got the O'reilly book, and I'm using their client/server example code. (client.c,server.c) I'm running it all on the same machine. I've added the line: 127.0.0.1 localhost duncs to my /etc/hosts file, but I run the server, then th

Re: OpenSSL client/server C code problems

2003-01-12 Thread mikecross
library > so I thought I'd make a > very simple client/server app to get started. > > I first made 2 simple programs that do this: The > server listens on a port, > and when a connection comes it it will echo whatever > is sent from the > client. The Client connects to this

Re: queries on client server test w.r.t 0.9.7-beta3

2002-12-12 Thread Lutz Jaenicke
On Thu, Dec 12, 2002 at 04:50:48PM -0800, Sunitha Kumar wrote: > I noticed that unless we close the listen socket at the server side, the > SSL_read is actually read by the listen socket and not > by the accept socket.I have nonblocking io with select and read bits set > on listener socket fd, and

queries on client server test w.r.t 0.9.7-beta3

2002-12-12 Thread Sunitha Kumar
I noticed that unless we close the listen socket at the server side, the SSL_read is actually read by the listen socket and not by the accept socket.I have nonblocking io with select and read bits set on listener socket fd, and read/write bits set on the accepted socket fd. At client: ssl = SSL_ne

Re: Help! SSL Telnet client-server deadlock problem.

2002-03-10 Thread Jeffrey Altman
? > > Or is there a sound technical reason why telnet+stunnel cannot > work (at least to the extent of avoiding the client-server > deadlock problem I observe)? > > > > > > > > Jeffrey Altman <[EMAIL PROTECTED]> > Sent by: [EMA

Re: Help! SSL Telnet client-server deadlock problem.

2002-03-10 Thread David_May
work in principle for plain telnet and similar protocols? Or is there a sound technical reason why telnet+stunnel cannot work (at least to the extent of avoiding the client-server deadlock problem I observe)? Jeffrey Altman <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 08/03/2002

Help! SSL Telnet client-server deadlock problem.

2002-03-08 Thread David_May
Please help. I have a major problem with SSL Telnet. When I connect with SSL-MZtelnet-0.11.2 client from my FreeBSD 4.4 box through a SSL proxy to a telnet server on AIX 4.3.2 and run "ls -l" command screen output sometimes does not complete. If I hit enter then last few lines are displayed.

RE: client-server Handshake

2002-01-10 Thread robert
host(www.authorize.net) with the cn of the server cert?  If so what's   going on behind the screen?   4.  client & server compute the encryption and MAC from pre master secret & client/server random number.       question #4  write_ssl() encrypt our d

Re: client/server verify problems

2001-12-20 Thread Chris Lewis
Lutz Jaenicke wrote: > > Do we need to resort to a verify callback to permit an 0.9.6b server to > > accept server certs from the client? > Yes. You can globally set the purposed to be checked for, but this is > only possible before the handshake is started (SSL_set_purpose()). > This is however a

Re: client/server verify problems

2001-12-15 Thread Lutz Jaenicke
On Fri, Dec 14, 2001 at 01:18:24PM -0500, Chris Lewis wrote: > When we use our client with a verisign-signed server cert, our server > side successfully verifies. When we use "openssl s_client" (or our > client) with our entrust cert, our server spits out: > > error:140890B2:SSL routines:SSL3_G

client/server verify problems

2001-12-14 Thread Chris Lewis
We're porting some (previously) working code from an ancient version of ssleay to openssl 0.9.6b (HPUX). We're having a problem (apparently) with the server-side of a client-server application, both ends using openssl 0.9.6b. We're using locally generated certificates (Entrust PK

Client/Server authentification.

2001-11-20 Thread Torkel Lyng
Do anyone have any suggestions on how I should implement a client/server authentification procedure? The client must check that the server is valid and the server must check that the client application is valid. It's not an open-source project. I know it's quite impossible to mak

Re: client/server using TLS

2001-10-12 Thread Eric Rescorla
julien Bournelle <[EMAIL PROTECTED]> writes: > I try to developp a client/server application using TLS... > My client.c file is like this : > > first : initialize_ctx(); > tcp_connect6(); -> I use IPv6 socket > SSL_new(); > BIO_ne

client/server using TLS

2001-10-12 Thread julien Bournelle
Hi all, I try to developp a client/server application using TLS... My client.c file is like this : first : initialize_ctx(); tcp_connect6(); -> I use IPv6 socket SSL_new(); BIO_new_socket() SSL_set_bio() SSL_connect() in my server.c file I h

client && server

2001-08-15 Thread Raja Said
Hi, i have a question regarding the SSL_CTX *ctx; assuming that my application includes two peers that both of them behaves as a alient and as a server against each other. i.e each one of them somtimes connects to the other and another time accepts the other so i wondered about the ctx . as i unde

Client -> server Negotion

2001-05-07 Thread Alan Candido
Hello, I am trying to write an application Server and another Client with SSL. When I try to connect in the server, client this emitting the error message (after to call SSL_connect) error:14075FF:SSL routines:SSL23_CONNECT:unknown state And the Server show message: 246:error:140780E5:SSL rout

Re: OpenSSL client-server connectivity problem

2001-04-02 Thread Tat Sing Kong
What is your command line for the server end? Tat. Puneet Parashar wrote: > > Hi, > > > i downloaded the openssl cryptographic library and toolkit from the openssl > web site. The compile and make has been done to produce dlls and lib files. > I have a openssl server running on my machine (p

OpenSSL client-server connectivity problem

2001-04-02 Thread Puneet Parashar
Hi, i downloaded the openssl cryptographic library and toolkit from the openssl web site. The compile and make has been done to produce dlls and lib files. I have a openssl server running on my machine (port 4433). Now when i try to make a client using: openssl s_client -connect (my_server_i

Re: Client -server certificate validation

2000-12-08 Thread Lutz Jaenicke
On Fri, Dec 08, 2000 at 11:14:07AM -0500, Sudeep Sudhakaran wrote: > Hi, > > I have seen a lot of posting on client certificate validation. But no clean > answer to client authentication. I see a reply and finally the poster > replies saying it doesnt work. It seems a lot of people have proble

Re: Client -server certificate validation

2000-12-08 Thread Sudeep Sudhakaran
that get_peer_Certificate wont return NULL and I can do verify on the certificate. Sudeep >From: Lutz Jaenicke <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: Re: Client -server certificate validation >Date: Thu, 7 Dec 2000 23:23:17

RE: Simple Working Client/Server?

2000-11-13 Thread Wade L. Scholine
My guess is that you have a bad client cert. -Original Message- From: Matt Wright [mailto:[EMAIL PROTECTED]] Sent: Friday, November 10, 2000 1:43 PM To: [EMAIL PROTECTED] Subject: Simple Working Client/Server? As a complete novice to SSL, I was hoping someone could send me a minimal

Simple Working Client/Server?

2000-11-10 Thread Matt Wright
As a complete novice to SSL, I was hoping someone could send me a minimal working client/server example...just something that gets the SSL handshake to work, and then executes a few simple read/write commands. I've played around with the cli.cpp and serv.cpp code included in the 0.9.6 re

Re: Certificate Chains & server vs client/server authentication

2000-08-29 Thread Dr S N Henson
Mike Zeoli wrote: > > First, thanks for all your help, Steve. > > I'll add the appropriate extensions to the certificate. > > To follow up on what you said below, Why does the "intermediate" CA > certificate only show up as invalid when doing client and server > authentication, and not when doi

Re: Certificate Chains & server vs client/server authentication

2000-08-28 Thread Dr S N Henson
Mike Zeoli wrote: > > Hello Everyone, > > > > As stated before, this same certificate chain gets verified just fine when > doing server authentication only. > > I have debugged into the library and know the following additional > information: > - In x509_vrfy.c:check_chain_purpose(), in the s

Certificate Chains & server vs client/server authentication

2000-08-28 Thread Mike Zeoli
Hello Everyone, I have a chain of version 1 certificates. "Root CA" signs "Intermediate CA", which signs "client1" and "server1" certificates. I also have two example client/server pairs. The first example only does server authentication. The o

client-server

2000-08-21 Thread yongw
Hello, I have an SSL client-server application in which the server authenticates to the client sending its certificate in the SSL handsake, but the client doesn't authenticates to the server. Fo my SSL client-server aplication, I need that both authenticates each

Re: Unable to run the client/server programs which are written using API functions of OPENSSL

2000-05-20 Thread Richard Levitte - VMS Whacker
From: **UNKNOWN CHARSET** <[EMAIL PROTECTED]> raajkrissna> $gcc -L /usr/local/lib -lssl -lcrypto filename.c May I suggest the following order instead? $gcc -L /usr/local/lib filename.c -lssl -lcrypto The explanation is how ld (which is called by gcc) links things together. -- Richard Levitte

Unable to run the client/server programs which are written using API functions of OPENSSL

2000-05-19 Thread Raaj Krissna
I had installed the OpenSSL software on my Linux systems.I had written some client/server applications using API functions of 'C' of OpenSSL on Linux .But iam unable to run that programs & when iam tried to run them, Iam getting the following errors. I tried to run those programs(b

Re: Client-server authentication in Apache Web Server with OpenSSL.Here it is!

2000-05-19 Thread Stewart Nutter
o:[EMAIL PROTECTED] > Client-server authentication inApache Web Server with OpenSSL.doc

Unable To Install The OPENSSL Properly On Linux Systems And Getting The Errors While Running The Programs(Client/Server Programs)

2000-05-16 Thread Raaj Krissna
next command: make test 7)next command : make install ------- Now i tried to write some Client/server programs and tried to run them by using "gcc filename.c" When i run the programs like this iam getting the errors such as : --

Client-server authentication in Apache Web Server with OpenSSL. Here it is!

2000-03-28 Thread Lenya Khachaturov
Here is the translation of a paper many of you requested. Some changes where made since the russian variant appeared 2 days ago. Check it. Best regards, Lenya mailto:[EMAIL PROTECTED] Client-server authentication in Apache Web Server with OpenSSL.doc

Re: Is this a good cert? was re minimal client/server

1999-10-12 Thread Dr Stephen Henson
Terrell Larson wrote: > > It is a proper file created by openssl and it reads in properly in openssl by the >very same routine that fails to read it in serv.cpp > > The failure message right down to the line number appears to be identical to what >happens when I stuff a bad file into the > app

Is this a good cert? was re minimal client/server

1999-10-11 Thread Terrell Larson
It is a proper file created by openssl and it reads in properly in openssl by the very same routine that fails to read it in serv.cpp The failure message right down to the line number appears to be identical to what happens when I stuff a bad file into the apps... but when I stuff what I think

minimal client/server

1999-10-11 Thread Terrell Larson
I'm trying to get the minimal client and server code running. It is found in openssl-0.9.4/demos/ssl under the names of cli.cpp and serv.cpp. I've got the code compiled and linked, furthermore the cli.cpp code does seem to work. Here's where I'm runnign into a problem. With serv.cpp we need

Re: Current location of SSL FTP client/server

1999-09-08 Thread EKR
[EMAIL PROTECTED] writes: > Volker Wiegand schrieb: > > >> Q1: Is the SSLftp-0.13.tar.gz package from the SSLeay mirrors still the > >> right thing to use? > > > >AFAIK there is no "oficial way" for adding TLS to FTP. > > There is an internet draft (draft-murray-auth-ftp-ssl-04.txt) which des

Re: Current location of SSL FTP client/server

1999-09-08 Thread paulfordh
Pete Chown <[EMAIL PROTECTED]> on 08/09/99 11:37:50 Please respond to [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc:(bcc: Paul V Ford-Hutchinson/UK/IBM) Subject: Re: Current location of SSL FTP client/server Holger Reif wrote: >> Volker Wiegand schrieb: >> > Q

Re: Current location of SSL FTP client/server

1999-09-07 Thread Holger Reif
Volker Wiegand schrieb: > > Hello everybody, > > I am new to OpenSSL (though I used SSLeay in a previous project), so > please forgive me if my questions betray the newbie or have been > answered a thousand times before. Mailing list archives and docs left me > somewhat clueless. > > I am nearl

Current location of SSL FTP client/server

1999-09-06 Thread Volker Wiegand
Hello everybody, I am new to OpenSSL (though I used SSLeay in a previous project), so please forgive me if my questions betray the newbie or have been answered a thousand times before. Mailing list archives and docs left me somewhat clueless. I am nearly done with writing an FTP-Proxy server and

Re: Client-server authentication.

1999-06-11 Thread Holger Reif
Have a look at apps/s_{server,client} that should give you a starting point. Carles Xavier Munyoz Baldó schrieb: > > Hello, > > I have an SSL client-server application in which the server > authenticates to the client sending its certificate in the SSL handsake, > but

  1   2   >