Re: ECDHE help needed, please

2009-08-22 Thread Michael D
Thank you for your reply. If I understand correctly, by specifying the 'nocert' option when starting s_server, I am limiting the cipher suites to those without certificates. Otherwise I need to create a certificate and cipher suites that require certificates won't work. Does open ssl support th

RE: multihtread and segfault (AES,SHA1, init, CRYPTO_malloc)

2009-08-22 Thread David Schwartz
> Hi! > My multithread app needs use AES and SHA1 algorithms. > I've added several mutexes as described in crypto/threads/mttest.c but > helgrind nevertheless reports about race conditions in ssl functions. > Also there are several segfaults caused by ssl funcs(gdb detects). > OPENSSL_THREADS defi

multihtread and segfault (AES,SHA1, init, CRYPTO_malloc)

2009-08-22 Thread korisk
Hi! My multithread app needs use AES and SHA1 algorithms. I've added several mutexes as described in crypto/threads/mttest.c but helgrind nevertheless reports about race conditions in ssl functions. Also there are several segfaults caused by ssl funcs(gdb detects). OPENSSL_THREADS defined. All

Re: ECDHE help needed, please

2009-08-22 Thread Dr. Stephen Henson
On Sat, Aug 22, 2009, Michael D wrote: > > I am testing a custom TLS client I am writing for a night class. > I would like to use openssl s_server for the testbed, if that is possible. > > I am running openssl-1.0.0-stable-SNAP-20090821 > > * I am running the command as follows: > openssl s_se

Re: Undocumented functions/macros/structs

2009-08-22 Thread barcaroller
"Dr. Stephen Henson" wrote in message news:20090822105817.ga...@openssl.org... > Applications shouldn't access structures directly if that can be avoided. > If > functions exist to do what you want you should use those instead. > > Sometimes structures need to be changed over time and we would

ECDHE help needed, please

2009-08-22 Thread Michael D
I am testing a custom TLS client I am writing for a night class. I would like to use openssl s_server for the testbed, if that is possible. I am running openssl-1.0.0-stable-SNAP-20090821 * I am running the command as follows: openssl s_server -nocert It starts by saying: Using default temp D

Re: Accessing unknown certificate extensions by OID

2009-08-22 Thread Dr. Stephen Henson
On Fri, Aug 21, 2009, Natanael Mignon - michael-wessel.de wrote: > Hello, > > ok, what I did so far is get the extension by OID. At least I know by now, > whether the extension is present or not: > > [...] > X509 *client_cert = X509_STORE_CTX_get_current_cert(ctx); > const char *admoid = "1

Re: Getting spc and pvk file from pfx file: and running on Windows

2009-08-22 Thread Dr. Stephen Henson
On Fri, Aug 21, 2009, Dave Thompson wrote: > > I assume you mean a .pfx file which is a PKCS#12. (That suffix has > also been used for other things which I don't think openssl supports.) > A PKCS#12 doesn't contain files as such; it contains pieces of data > you might reasonably put in files. In

Re: Question regarding PEM_read_bio_X509()

2009-08-22 Thread Dr. Stephen Henson
On Fri, Aug 21, 2009, Dave Thompson wrote: > > From: owner-openssl-us...@openssl.org On Behalf Of Dr. Stephen Henson > > Sent: Thursday, 20 August, 2009 18:34 > > > On Wed, Aug 19, 2009, barcaroller wrote: > > > > > I have a PEM-format server certificate that I need to convert to a > > > binary

Re: Undocumented functions/macros/structs

2009-08-22 Thread Dr. Stephen Henson
On Fri, Aug 21, 2009, barcaroller wrote: > I was looking at the OpenSSL source code and some open-source applications > using OpenSSL, and I came across functions like X509_get_issuer_name() and > X509_get_pubkey(), and macros like X509_extract_key(). These seem to be > very useful but I could

AW: Undocumented functions/macros/structs

2009-08-22 Thread Natanael Mignon - michael-wessel . de
Hello, what I've been doing lately is repeatedly grep-ing my way through OpenSSL source code in order to find examples and definitions of such functions. Very helpful to my mind. :) Mit freundlichen Grüßen / Kind regards  Natanael Mignon > -Ursprüngliche Nachricht- > Von: owner-openssl