[openssl-dev] NEed help

2015-08-01 Thread The Doctor
I am trying to compile openssl 1.0.2 SNAP 20150801 and now I get if [ -n libcrypto.so.1.0.0 libssl.so.1.0.0 ]; then (cd ..; make libcrypto.so.1.0.0); fi [ -z ] || gcc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS -pthread -D_THREAD_SAFE -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H

Re: [openssl-dev] Need Help with BIO callback and/or BIO filter chain

2015-02-20 Thread Dr. Stephen Henson
On Fri, Feb 20, 2015, W Smith wrote: Thanks, Rich. Does anyone know how to walk through a BIO stack that includes a BIO pair and get to the ultimate source/sink BIO? If I can get that, I'll be in good shape. Anybody? Not sure I follow you. A BIO pair is the ultimate source/sink BIO.

Re: [openssl-dev] Need Help with BIO callback and/or BIO filter chain

2015-02-20 Thread Salz, Rich
I can deal with the HTTP side and the plethora of application-specific and threading issues, but I'm lost on the BIO part. I'll take any pointers or suggestions you can offer. Only to look at SSL_set_bio. Good luck. -- Principal Security Engineer, Akamai Technologies IM: rs...@jabber.me

Re: [openssl-dev] Need Help with BIO callback and/or BIO filter chain

2015-02-20 Thread W Smith
Thanks, Rich. Does anyone know how to walk through a BIO stack that includes a BIO pair and get to the ultimate source/sink BIO? If I can get that, I'll be in good shape. Anybody? On Feb 20, 2015, at 08:18 AM, Salz, Rich rs...@akamai.com wrote: I can deal with the HTTP side and the plethora

Re: [openssl-dev] Need Help with BIO callback and/or BIO filter chain

2015-02-20 Thread Dr. Stephen Henson
On Fri, Feb 20, 2015, W Smith wrote: Rich, Yeah, I have industrial strength Tylenol standing by. I'm expecting this to be painful, but not insurmountable for the handshake. If I'm unable to even get at the ultimate source/sink, I can't get anywhere. I can deal with the HTTP side and

Re: [openssl-dev] Need Help with BIO callback and/or BIO filter chain

2015-02-19 Thread Salz, Rich
I've been tasked with wrapping OpenSSL encrypted traffic in another protocol (HTTP). That's going to be a bit tricky, and require some pretty detailed knowledge of the protocol. For example, the initial setup -- the hello messages -- will require a couple of POST and reply messages. Even

Re: [openssl-dev] Need Help with BIO callback and/or BIO filter chain

2015-02-19 Thread W Smith
Rich, Yeah, I have industrial strength Tylenol standing by. I'm expecting this to be painful, but not insurmountable for the handshake. If I'm unable to even get at the ultimate source/sink, I can't get anywhere. I can deal with the HTTP side and the plethora of application-specific and

[openssl-dev] Need Help with BIO callback and/or BIO filter chain

2015-02-19 Thread W Smith
Hi, I've been tasked with wrapping OpenSSL encrypted traffic in another protocol (HTTP). I'm able to intrude on the data stream with the BIO callback feature (BIO_set_callback), and have also created a BIO filter to play with. My problem is that the BIO I have access to seems to be the BIO