HMAC_copy() or HMAC_dup() function ?

2006-06-20 Thread Darryl Miles
I have an application that pre-initialises a HMAC with some computed data, then at high throughput it is copied for different requests into a unique context and used from there. The main reasons were to save calling HMAC_Init() and HMAC_update() with the same data before I could start a

Re: [openssl.org #1346] Re: SSL_accept concurrency in 0.9.7j and 0.9.8b

2006-06-20 Thread Bodo Moeller
On Fri, Jun 09, 2006 at 07:02:36PM +0200, Kurt Roeckx wrote: On Fri, Jun 09, 2006 at 12:58:56PM +0200, Howard Chu via RT wrote: Howard Chu wrote: I'm seeing a lot of bad record mac errors when receiving a lot of connection requests at once. It sounds the same as this email

[openssl.org #1346] Re: SSL_accept concurrency in 0.9.7j and 0.9.8b

2006-06-20 Thread Bodo Moeller via RT
Current snapshots use a more thorough locking approach that takes into account inconsistent cache views on multi-processor or multi-core systems (where consistency can be reached by obtaining locks). The application has to call CRYPTO_set_id_callback() for OpenSSL to work properly.

Re: [PATCH] STARTTLS support in s_client for IMAP

2006-06-20 Thread Jan Kundrát
Jan Kundrát wrote: Hi folks, my attempt to implement IMAP4rev1's STARTTLS command in s_client. Tested against openssl-0.9.7i. Hi folks, I've found another patch [1] on the net and it seems to be nicer and adds FTP support as well. Is it possible to apply it? [1]

Re: rfc 4279 support - what's the plan?

2006-06-20 Thread Mika Kousa
On Mon, 2006-06-19 at 10:26 -0700, ext Scott Kelly wrote: Last August some folks from Nokia posted a patch for 0.9.8a that implements a portion of tls-psk. I applied this patch, and also extended it to allow preshared keys with dtls. I was hoping to see rfc4279 support in 0.9.8b, but it's not

Re: [PATCH] DTLS version + 2 bytes length rsa key exchange

2006-06-20 Thread authesserre samuel
hi, this little patch to correct version problem and add the 2 bytes before rsa key exchange... I am searching how I can add replay in this implementation, if someone have an idea I will thank him and I will follow advices to create the patch (I don't know well openssl implem) regards,

[openssl.org #843] EBCDIC patches for 0.9.7c

2006-06-20 Thread via RT
I've updated this patch for compatibility with openssl-0.9.7j. These requests for EBCDIC support do, indeed, occur regularly and I too urge that these patches be incorporated into the main source. These were tested on a z/OS 1.5 release for a custom web server as well as the Novell Remote

Re: [openssl.org #1346] Re: SSL_accept concurrency in 0.9.7j and 0.9.8b

2006-06-20 Thread Kurt Roeckx
On Tue, Jun 20, 2006 at 02:06:25PM +0200, Bodo Moeller wrote: On Fri, Jun 09, 2006 at 07:02:36PM +0200, Kurt Roeckx wrote: On Fri, Jun 09, 2006 at 12:58:56PM +0200, Howard Chu via RT wrote: Given the lack of response here, we're tracking this now as

RE: rfc 4279 support - what's the plan?

2006-06-20 Thread Ted Mittelstaedt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Kelly Sent: Monday, June 19, 2006 10:26 AM To: openssl-dev@openssl.org Subject: rfc 4279 support - what's the plan? Last August some folks from Nokia posted a patch for 0.9.8a that implements a portion