Re: Engine development/details needed

2008-08-06 Thread Peter Waltenberg
Hash isn't usually worth doing in an engine. It's usually so fast in software that the overhead of getting data on and off the accelerator usually means it's a net loss. In many cases that's true of symmetric ciphers as well. And when you hear words like CPU offload thrown in, you really need to

Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
Hi, I and a few other users are seeing sshd failing with Couldn't obtain random bytes (error 604389476) and other ssl-related application failing randomly in user mode linux guests and I suspect a problem in openssl that got triggered by some change in UML. I reviewed the RAND_poll function

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
Stanislav Meduna wrote: - add r = -1; inside the do loop after the int try_read = 0; Erm, actually I mean r = -1; errno = EAGAIN; or something like that - it has to let the while know that the poll timed out. -- Stano

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Tomas Mraz
On Wed, 2008-08-06 at 11:08 +0200, Stanislav Meduna wrote: Hi, I and a few other users are seeing sshd failing with Couldn't obtain random bytes (error 604389476) and other ssl-related application failing randomly in user mode linux guests and I suspect a problem in openssl that got

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
Tomas Mraz wrote: errno has garbage value - this should be fixed by initializing errno to 0 before the poll/select calls. Actually after it returns with timeout - a successfull syscall is free to set errno to whatever value it wants, it is only after an error the value has to be meaningful (I

Cleanup procedure missing some calls?

2008-08-06 Thread Ion Larrañaga
Hello, I have been developing a Win32 application that makes TCP connections. When the application ends, I use to dump all non-deallocated memory blocks, in order to avoid possible memory leaks. The question is that if I use openssl, there are a couple of memory blocks that are not freed.

RE: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread David Schwartz
Tried many many times, even two running at the same time or poll timeout set to zero, not one instance of blocking even with od -x /dev/urandom and od -x /dev/random running simultaneously (the second one blocks, of course). H.. what the #$%# is happening here.. more ideas?

[openssl.org #1727] No License error getting

2008-08-06 Thread seeni vasan via RT
Hi Team,     I am seenivasan , working in MNC. When i tried to compile (make) openssl in AIX boxes i am getting below errors. After 4 hours also the compilation has not been finished.   Below is sample line (I am getting lot of lines same error, after 4 hours also compilation had not fnished)  

RE: [openssl.org #1727] No License error getting

2008-08-06 Thread David Schwartz
I am seenivasan , working in MNC. When i tried to compile (make) openssl in AIX boxes i am getting below errors. After 4 hours also the compilation has not been finished. cc -I. -I.. -I../include -DOPENSSL_THREADS -qthreaded -DDSO_DLFCN - 1506-507 (W) No licenses available. Contact

[openssl.org #1727] No License error getting

2008-08-06 Thread Lutz Jaenicke via RT
It seems you do not have enough licenses for your C compiler which is thus locking up. Sincere regards, Lutz __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #1728] Root Certificate Program

2008-08-06 Thread Frye, Steven K - Eagan, MN - Contractor via RT
Hello, I am researching various root certificate programs in hopes of getting our root certificate added to future distributions. I am hoping to find some specific documentation on your root certificate program to determine your specific requirements and/or get in contact with whomever is in

[openssl.org #1728] Root Certificate Program

2008-08-06 Thread Lutz Jaenicke via RT
The OpenSSL project does not have a root CA program and has decided to not supply root CA certificates with the toolkit. Please checkout the FAQ: How can I set up a bundle of commercial root CA certificates? http://www.openssl.org/support/faq.html#USER16 Best regards, Lutz

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
David Schwartz wrote: Try launching your test program automatically on boot up at the saem time you launch ssh or whatever application is failing. I bet '/dev/urandom' will fail then. The program had no problems running with simultaneous od -x /dev/random, that was blocking because it sucked

RE: [openssl.org #1727] No License error getting

2008-08-06 Thread Shaw Graham George
Your problem is nothing to do with OpenSSL. This message is coming from the AIX compiler - it's license is number-of-users restricted. Your build is taking a long time because the compiler is waiting for an empty slot in the active users list to become available before starting each

RE: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread David Schwartz
David Schwartz wrote: Try launching your test program automatically on boot up at the saem time you launch ssh or whatever application is failing. I bet '/dev/urandom' will fail then. The program had no problems running with simultaneous od -x /dev/random, that was blocking because