RE:I am having a hard time getting SSL_Accept to work with a non blocking socket

2005-06-05 Thread Gayathri Sundar
Hi, while (((rc = SSL_accept(ssl)) <= 0) && ((SSL_get_error(ssl, rc) == SSL_ERROR_WANT_READ) || (SSL_get_error(ssl, rc) == SSL_ERROR_WANT_WRITE))) { /* as on wait application can do something else */ do_other_stuff(); } hope you have called

[Fwd: RE:I am having a hard time getting SSL_Accept to work with a non blocking socket]

2005-06-05 Thread Gayathri Sundar
Original Message Subject: RE:I am having a hard time getting SSL_Accept to work with a non blocking socket From:"Gayathri Sundar" <[EMAIL PROTECTED]> Date:Sun, June 5, 2005 11:33 pm To: openssl-users@openssl.org ---

MSVC Application linked against static openssl libs is crashing

2005-06-05 Thread Qadeer Baig
Hi All, I am facing a problem in an application (a dll) created in MSVC which links against static libeay32.lib and ssleay32.lib. Problem is that when I use this application and openssl function is called, app crashes. But when I link this application against the dlls of openssl (using the .libs w

[ANNOUNCE] OpenSSL 0.9.8 beta 4 released

2005-06-05 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 4 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The fourth beta is now released. The beta release is available for

Re: I am having a hard time getting SSL_Accept to work with a nonblocking socket

2005-06-05 Thread Bernhard Froehlich
Eric Gold wrote: Hi there, I am pulling my hair out trying to get SSL_accept to work with a non blocking socket. When I make a call to SSL_accept and then perform an SSL_get_error. I get the error SSL_ERROR_WANT_READ. At this point what should I do. Currently I am doing the following: while (((

Re: Default CApath in Debian (OpenSSL 0.9.6c-2)

2005-06-05 Thread Vaclav Stepan
Hi, I was looking for a system-wide setting via openssl.cnf, but it seems that there is not any. Thank you for the hint, I will adapt the client program. Vaclav Stepan -- Vaclav Stepan [EMAIL PROTECTED] http://linux.fjfi.cvut.cz/~w/ ___

Re: [0.9.7g ] do_subject function missing from req.c, found in ca.c

2005-06-05 Thread Francois PIETTE
Well but later it fails compiling OpenSSL command line tool because it is defined in both ca.c and req.c :-( -- [EMAIL PROTECTED] http://www.overbyte.be - Original Message - From: "Francois PIETTE" <[EMAIL PROTECTED]> To: Sent: Sunday, June 05, 2005 4:01 PM Subject: [0.9.7g ] do_subje

[0.9.7g ] do_subject function missing from req.c, found in ca.c

2005-06-05 Thread Francois PIETTE
I'm recompiling version 0.9.7g and found that do_subject function is missing in req.c. I copied the code from ca.c and it compile fine. Not tested at runtime. -- [EMAIL PROTECTED] The author for the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS)

[Solution] Re: Problem in compiling openssl 0.9.7g on Windows with MSVC workspace

2005-06-05 Thread Francois PIETTE
Simple: there was a second missing file: v3_pci.c. So the final solution is to add two files to the libeay32/x509v3 folder in the worlspace: v3_pci.c and v3_pcia.c -- [EMAIL PROTECTED] The author for the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite

Re: Problem in compiling openssl 0.9.7g on Windows with MSVC workspace

2005-06-05 Thread Francois PIETTE
I'm progressing ! The file v3_pcia.c was missing from libeay32/x509v3 files ! Now I have only one undefined symbol remaining: v3_pci --- cut here --- Creating library ..\..\out32dll\Debug/libeay32.lib and object ..\..\out32dll\Debug/libeay32.exp v3_lib.obj : error LNK2001: unresolved external

Re: Determining key size for DSA and DH?

2005-06-05 Thread Nils Larsch
Brad Hards wrote: ... You should send a bug report to [EMAIL PROTECTED] I just forwarded the email train to that address, but if there is a better way to do the report, just let me know (pointer to a webpage, whatever). as an alternative you could go to http://www.aet.tu-cottbus.de/rt2/ log

Re: openssl upgrade - subject problem

2005-06-05 Thread Goetz Babin-Ebell
Armin Obersteiner wrote: hi! The problem: the environment was: 'SSL_CLIENT_S_DN' => '/C=AT/ST=... /Email=xxx', And now is: 'SSL_CLIENT_S_DN' => '/C=AT/ST=... /emailAddress=xxx', Email is not an officcial short name for the object identifier 1.2.840.113549.1.9.1. because of this the te

Re: SSL over Serial-link

2005-06-05 Thread Goetz Babin-Ebell
Christopher Fowler wrote: Setup each port in raw mode. This should allow the process that has the port open to treat is as a regular file. You may have eco turned on and that will cause problems. Setup the port in ram mode then turn on any flow control you need. Better not XON/XOFF. Since th

Re: Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
On Sun, 5 Jun 2005 22:03 pm, Brad Hards wrote: > On Sun, 5 Jun 2005 21:20 pm, Nils Larsch wrote: > > > Is there a way to determine the keylength for DSA keys and DH keys? > > > > in case of a EVP_PKEY object EVP_PKEY_bits, otherwise > > As it turns out, I do have a EVP_PKEY, so this is just what I

Re: Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
On Sun, 5 Jun 2005 21:20 pm, Nils Larsch wrote: > > Is there a way to determine the keylength for DSA keys and DH keys? > > in case of a EVP_PKEY object EVP_PKEY_bits, otherwise As it turns out, I do have a EVP_PKEY, so this is just what I needed. > BN_num_bits(dsa->p). But as the "NOTES" section

Re: Determining key size for DSA and DH?

2005-06-05 Thread Nils Larsch
Brad Hards wrote: I'm trying to determine the length (in bits) for my DSA and DH keys. I'm happily using RSA_size() for RSA keys, and I assumed that DSA_size and DH_size would do equivalent operations (based on the man page for BN_size_bits, which states 'If you want to know the "key size" of

Re: valgrind errors

2005-06-05 Thread Brad Hards
On Wed, 1 Jun 2005 23:31 pm, [EMAIL PROTECTED] wrote: > Hello all, > > I develeopped a server which seems to work quite fine. When I use > Valgrind to check for problems, it returns me thousands of problems wich > seems to be caused by the OpenSSL librairie! > follows some of the returns: There is

Determining key size for DSA and DH?

2005-06-05 Thread Brad Hards
I'm trying to determine the length (in bits) for my DSA and DH keys. I'm happily using RSA_size() for RSA keys, and I assumed that DSA_size and DH_size would do equivalent operations (based on the man page for BN_size_bits, which states 'If you want to know the "key size" of such a key, either

I am having a hard time getting SSL_Accept to work with a non blocking socket

2005-06-05 Thread Eric Gold
Hi there, I am pulling my hair out trying to get SSL_accept to work with a non blocking socket. When I make a call to SSL_accept and then perform an SSL_get_error. I get the error SSL_ERROR_WANT_READ. At this point what should I do. Currently I am doing the following: while (((rc = SSL_accept(ssl

openssl upgrade - subject problem

2005-06-05 Thread Armin Obersteiner
hi! I just updated: apache_1.3.24.tar.gz mod_perl-1.26.tar.gz mod_ssl-2.8.8-1.3.24.tar.gz openssl-0.9.6d.tar.gz To: apache_1.3.33.tar.gz mod_perl-1.29.tar.gz mod_ssl-2.8.22-1.3.33.tar.gz openssl-0.9.7g.tar.gz The problem: the environment was: 'SSL_CLIENT_S_DN' => '/C=AT/ST=.

valgrind errors

2005-06-05 Thread greuhcom
Hello all, I develeopped a server which seems to work quite fine. When I use Valgrind to check for problems, it returns me thousands of problems wich seems to be caused by the OpenSSL librairie! follows some of the returns: ==23622== Syscall param write(buf) points to uninitialised byte(s) ==2362

Re: Read a Bignum from file

2005-06-05 Thread Ludovic FLAMENT
Angel Martinez Gonzalez wrote: Hello: I wrote a BIGNUM into a file using the function: int BN_print_fp(FILE *fp, const BIGNUM *a); But, How I can read this bignum from this file?. I don´t know a openssl function to read a bignum from a file. Hello, you can read Bignum from file

Re: [openssl-users] Re: Generate a CRL from an OCSP request

2005-06-05 Thread Erwann ABALEA
Hodie post. Kal. Iun. MMV est, Julien VEHENT scripsit: > "Dr. Stephen Henson" <[EMAIL PROTECTED]> a écrit : > > >On Wed, Jun 01, 2005, Julien VEHENT wrote: > > > >>I'm having an OCSP Responder on my CA and i want to use it in order > >>to generate > >>CRL's on others servers. Usually, it's the ot

[no subject]

2005-06-05 Thread Gayathri Sundar
Hi, I am using Non Blocking sockets, and would like to know the behaviour wrt SSL_renegotiation. Once I make a call to do_handshake, as the FD is non blocking it will return immediately with a success, but from the application's point of view how will it come to know that the renegotiation in thro

RE: timeout vs. SSL_ERROR_WANT_XXXX

2005-06-05 Thread David Schwartz
> I want to use timeout with select and I wonder how to "cancel" operation > (SSL_read or SSL_write non-blocking) that caused SSL_ERROR_WANT_READ (or > *_WRITE). I've got messages queue to send (and one for received too). If > I cannot send whole particular msg within some time (5 sec) I want to >