Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-20 Thread Thirumal, Karthikeyan
Thanks Rich. We first attempted to move to openssl-0.9.8zc - but we faced memory issues and our process got dumped at SSL_free. So we backed out and moved back to 9.8a. Can I go to 0.9.8e version and will the SSL fragment issue be fixed there ? Thanks & Regards

Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Thirumal, Karthikeyan
-dev [mailto:openssl-dev-boun...@openssl.org] On Behalf Of Matt Caswell Sent: Friday, April 15, 2016 3:17 PM To: openssl-dev@openssl.org Subject: Re: [openssl-dev] Windows Patch affecting connectivity to our applications On 15/04/16 10:33, Thirumal, Karthikeyan wrote: > Yes Matt - I agree that it is a v

Re: [openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Thirumal, Karthikeyan
ions On 15/04/16 09:15, Thirumal, Karthikeyan wrote: > Dear Dev folks, > > My clients are facing are connectivity issues after windows released > their OS upgrade this week. I think they have changed the way the SSL > handshake happens. > > My Server is using openssl-

[openssl-dev] Windows Patch affecting connectivity to our applications

2016-04-15 Thread Thirumal, Karthikeyan
Dear Dev folks, My clients are facing are connectivity issues after windows released their OS upgrade this week. I think they have changed the way the SSL handshake happens. My Server is using openssl-0.9.8a and my client sits on a Microsoft platform. >From OpenSSL - do we have a recommendation

Re: [openssl-dev] Elliptical Cipher Suites

2015-10-07 Thread Thirumal, Karthikeyan
From: openssl-dev [mailto:openssl-dev-boun...@openssl.org] On Behalf Of Viktor Dukhovni Sent: Wednesday, October 07, 2015 6:26 PM To: openssl-dev@openssl.org Subject: Re: [openssl-dev] Elliptical Cipher Suites On Wed, Oct 07, 2015 at 12:14:38PM +0000, Thirumal, Karthikeyan wrote: > Can some o

[openssl-dev] F5 termination of TCP connection

2015-06-01 Thread Thirumal, Karthikeyan
Dear Team, We have a client-server (Server is a C++ process) communication which does a TCP communication over a secure layer. The SSL is achieved by OpenSSL library on that process. Am having some connection problems in the Server side - So inorder to avoid this can I put this SSL under F5

[openssl-dev] Disabling SSLv3 in OpenSSL 0.9.8a

2015-01-23 Thread Thirumal, Karthikeyan
Team, In order to fix the Poodle vulnerability on SSLv3, I tried to disable my SSLv3 cipher using the below cipher set, but did not even initiate SSL in 0.9.8a. SSL_CTX_set_cipher_list(ssl_ctx,SHA1+HIGH:!SSLv2:!SSLv3:!aNULL:!eNULL:@STRENGTH); Without !SSLv3 - by SSL connection is working fine

RE: Broken Pipe / Conn Reset error with OpenSSL on Linux

2014-06-13 Thread Thirumal, Karthikeyan
Another update here is .. We also tried upgrading it to 0.9.8y, but still we had the same issues. Can someone please provide a solution for this ? Thanks Regards Karthikeyan Thirumal From: Thirumal, Karthikeyan Sent: Thursday, June 12, 2014 10:52 PM To: openssl-dev

Broken Pipe / Conn Reset error with OpenSSL on Linux

2014-06-12 Thread Thirumal, Karthikeyan
Dear Team, I have a Client (C# .Net) connects to Server (C++ application), a running process using OpenSSL. All these days, we were running the server on a Unix platform - we were receiving few Broken Pipe and Conn Reset by Peer error - But in a very small number. Now we have moved this

Memory usage on openssl-0.9.8a/

2012-10-08 Thread Thirumal, Karthikeyan
Team, We used openssl-0.9.8a version of openssl for the SSL communication, for our desktop based TCP application. When we enable it, looks like the memory growth was alarming around 30 times than normal which is really huge. Can someone throw lights on this version or any known memory leaks