Re: TLS neverbleed design

2022-01-12 Thread Stefan Eissing
> Am 12.01.2022 um 11:07 schrieb Joe Orton : > > On Fri, Jan 07, 2022 at 11:34:47AM +0100, Stefan Eissing wrote: >> A nice new year to everyone! >> >> I was looking at the design of https://github.com/h2o/neverbleed which >> - loads TLS private keys in a separate process >> - creates EVP_PKEY

Re: ocsp.t failing

2022-01-12 Thread Yann Ylavic
On Wed, Jan 12, 2022 at 11:09 AM Joe Orton wrote: > > > > I wonder if this is due to change in the OpenSSL version in Ubuntu? > > Appears not :) Big thanks to Yann for fixing it! Actually yes :) An OpenSSL change which caused a modification of the perl IO-Socket-SSL module [1] which caused a diff

Re: ocsp.t failing

2022-01-12 Thread Joe Orton
On Wed, Jan 05, 2022 at 12:11:50PM +, Joe Orton wrote: > On Sat, Dec 25, 2021 at 10:56:59AM +0100, Christophe JAILLET wrote: > > Hi, > > > > the last travis jobs have failed on trunk because of ocsp.t. > > > > Unless I missed something, the only change with previous successful build is > > r1

Re: TLS neverbleed design

2022-01-12 Thread Joe Orton
On Fri, Jan 07, 2022 at 11:34:47AM +0100, Stefan Eissing wrote: > A nice new year to everyone! > > I was looking at the design of https://github.com/h2o/neverbleed which > - loads TLS private keys in a separate process > - creates EVP_PKEY instances that in the sign callback call into the > sepa