RE: Multithreading problem

2006-10-19 Thread David Schwartz
> This problem was raised on this mailing list many times, but the > clear solution (in my opinion) was not given. From OpenSSL FAQ: > ...an SSL connection may not concurrently be used by multiple > threads... This means that I can't have 2 threads, one reading > and one writing at the same ti

Re: BN_bin2bn problem

2006-10-19 Thread Olga Kornievskaia
Nils Larsch wrote: Olga Kornievskaia wrote: Hi, can anyone tell me how to fix the leading zero in BIGNUM. I have the following code: unsigned char pkinit_1024_dhprime[128] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, 0xC4, 0xC6,

Re: BN_bin2bn problem

2006-10-19 Thread Nils Larsch
Olga Kornievskaia wrote: Hi, can anyone tell me how to fix the leading zero in BIGNUM. I have the following code: unsigned char pkinit_1024_dhprime[128] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xD

Re: sslv3 alert handshake failure

2006-10-19 Thread IT Professional
Great, I finally don't see the error. Is there any other way to disable ECDHE other than from command line? I couldn't find any command to disable ECDHE in the generation of the ECC cert. I also tried editing SSLCipherSuite to ALL:!ADH:!EXPORT56:RC4+RSA:-kEECDH:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:

ecdsa certificates and sha256

2006-10-19 Thread Max Pritikin
Folks, This questions is regarding the demo openssl-0.9.8-stable- SNAP-20061004/demos/ssltest-ecc, and in particular the ECCCcertgen.sh script. What I've done is attempt to specify the hash digest like so: #earlier in the script i set the digest I want TEST_DIGEST="sha256" # and here I've

Re: Solaris installation: Text relocation remains...

2006-10-19 Thread Laurent Blume
I've seen you fixed your issue, glad I could help. PATH issues are common on Solaris, where there are many commonly installed tools. That's why I always keep a very simple one when building, to be sure what's used for a given source tarball, SunCC, GCC, make, gmake, and so on. Marc Girod a écrit :

RE: SSL_read()

2006-10-19 Thread Mark
Hi Carlo, > I have a single threaded application where a SSL_read() is > returning a return code of 0. The openSSL doc suggests that > this is due to a socket shutdown by the peer. Upon this > error, is there anything that I can do to recover the > connection and/or data or do I just need t

Re: Solaris installation: Text relocation remains...

2006-10-19 Thread Marc Girod
Marc Girod <[EMAIL PROTECTED]> writes: > I'll try to see what exactly affects. It seems that the discriminating factor in my case, i.e. what broke my build, what gmake. In my first attempt, I had GNU make in my path, preempting /usr/ccs/bin/make. If I take it away, my build works... I found that

Re: sslv3 alert handshake failure

2006-10-19 Thread Marek Marcola
Hello, > Like to clarify one point, am I right to say the peer (client) we are > referring to here is the browser? Browser or any other SSL client. > I'm using Firefox 2 Beta 1 which I know has ECC support. I had > performed a test at tls.secg.org to verify this. According to Firefox documetation

Re: base64 encode of sha1

2006-10-19 Thread Kaushalye Kapuruge
Kaushalye Kapuruge wrote: Witek wrote: Kaushalye Kapuruge wrote: Hi, I tried to get the base64 encoded result of a SHA1 digest. But the result is not compatible with the same operation in Java. Also I tried to use a javascript function. It is matching with the result of the Java implementat

Re: base64 encode of sha1

2006-10-19 Thread Kaushalye Kapuruge
Witek wrote: Kaushalye Kapuruge wrote: Hi, I tried to get the base64 encoded result of a SHA1 digest. But the result is not compatible with the same operation in Java. Also I tried to use a javascript function. It is matching with the result of the Java implementation but not with the openss

Re: base64 encode of sha1

2006-10-19 Thread Witek
Kaushalye Kapuruge wrote: Hi, I tried to get the base64 encoded result of a SHA1 digest. But the result is not compatible with the same operation in Java. Also I tried to use a javascript function. It is matching with the result of the Java implementation but not with the openssl result. So I

Re: base64 encode of sha1

2006-10-19 Thread Girish Venkatachalam
On Thu, Oct 19, 2006 at 12:14:55PM +0530, Kaushalye Kapuruge wrote: > Hi, > I tried to get the base64 encoded result of a SHA1 digest. But the > result is not compatible with the same operation in Java. Also I tried > to use a javascript function. It is matching with the result of the Java > imp

Re: HP-UX installation (was: Solaris installation: Text relocation remains...)

2006-10-19 Thread ViSolve Security Consulting Group
Hello Marc, Indeed, it does. With your path, I can build. I'll try to see what exactly affects. I wasn't yet able to find the exact cause of my error on Solaris... I switched to HP-UX, where I built a shared lib version of zlib, and failed to produce one of openssl. I have a running egd talki