Re: How to detect dead peers with DTLS?

2009-01-20 Thread Michael Tüxen
On Jan 20, 2009, at 9:58 PM, Robin Seggelmann wrote: Hi Michael, since there seems to be no function, option or whatever to trigger session resumption for an established connection, I would have to modify the API to add this functionality. This is kind of critical because it would not only

Re: Ver 0.9.8 j compiled

2009-01-20 Thread Mounir IDRASSI
Hi, If you are looking for windows binaries, you could search using Google. The first result is the following link : http://www.slproweb.com/products/Win32OpenSSL.html Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr rfx wrote: I find url to download openssl ver 0.9.8 j compiled ... Tha

Ver 0.9.8 j compiled

2009-01-20 Thread rfx
I find url to download openssl ver 0.9.8 j compiled ... Thanks Dr Franck ROUSSIA __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org A

Re: How to detect dead peers with DTLS?

2009-01-20 Thread Michael Tüxen
Hi Robin, what would be needed to add support for renegotiations in DTLS? Best regards Michael On Jan 20, 2009, at 7:01 PM, Robin Seggelmann wrote: Hi Michael, unfortunately, you're wrong. You need my patches to perform renegotiations at all, since the current implementation is broken in

RE: How to detect dead peers with DTLS?

2009-01-20 Thread Giang Nguyen
> I think Robin tested it, so yes it works... But you need the bugfixes > he sent to the list... > > Robin: Am I right? actually i referred to session resumptions with abbreviated handshakes. i think the "bugs/patches" comment was in the context of renegotiations with full handshakes. "> Btw, d

Re: How to detect dead peers with DTLS?

2009-01-20 Thread Michael Tüxen
Hi Giang, I think Robin tested it, so yes it works... But you need the bugfixes he sent to the list... Robin: Am I right? Best regards Michael On Jan 20, 2009, at 5:59 PM, Giang Nguyen wrote: I think I will go for the hack that misuses re-negotiation as a kind of heartbeat, keep alive or

Re: How to detect dead peers with DTLS?

2009-01-20 Thread Giang Nguyen
> I think I will go for the hack that misuses re-negotiation as a kind of > heartbeat, keep alive or echo request. I tried to avoid this hack at > first because it is a computational burden. AFAIK re-negotiation means > restarting from scratch which means that expensive public key operations > hav

Re: Certificate validation

2009-01-20 Thread Patrick Patterson
On January 20, 2009 09:57:03 am Gerald Iakobinyi-Pich wrote: > Hello all, > > I am new to OpenSSL, and now I am confrontd with some problems. First > would be the following: let's assume I have a certificate (X509) which > has been issued by an CA. How is it possible to validate the > certificate t

Certificate validation

2009-01-20 Thread Gerald Iakobinyi-Pich
Hello all, I am new to OpenSSL, and now I am confrontd with some problems. First would be the following: let's assume I have a certificate (X509) which has been issued by an CA. How is it possible to validate the certificate through the CA (I mean establish a connection to the CA, and let the CA d

Re: Make test fails for openssl fips 1.2 for 64 bit

2009-01-20 Thread joshi chandran
This problem will exist for fips package. so this error i can ignore it and can use the fips module with openssl 9.8 j and can test (make test in openssl 9.8J) in openssl 9.8J please correct it if i am wrong Thanks Joshi On Tue, Jan 20, 2009 at 5:07 PM, Dr. Stephen Henson wrote: > On Tue,

Re: Make test fails for openssl fips 1.2 for 64 bit

2009-01-20 Thread Dr. Stephen Henson
On Tue, Jan 20, 2009, joshi chandra wrote: > > Hi All, > > I have came across the error when i build openssl fips 1.2 for 64 bit . > > ./Configure fipscanisterbuild aix64-cc > > make was successful > Well other than that command line violating the security policy... You may well have prob

Make test fails for openssl fips 1.2 for 64 bit

2009-01-20 Thread joshi chandra
Hi All, I have came across the error when i build openssl fips 1.2 for 64 bit . ./Configure fipscanisterbuild aix64-cc make was successful make test results the following error $ sh testss make a certificate request using 'req' rsa Generating a 1024 bit RSA private key ..++ ...

Re: Format of index.txt file

2009-01-20 Thread Andres Moreira
Hi Richard, thank you very much for the information. Yesterday, after I wrote the message I saw that code you send me on the apps/apps.h :) (I love the open sources projects for that). But was not documented each of the types. Again, thank you very much for the information. Kind regards,