Re: SSL_get_verify_result() behavior

2011-11-16 Thread Yutaka Takeda
Sorry... there was a typo: Incorrect: > Default build: darwin64-x86_64-cc (did not detect CERT_UNTRUSTED) > Local build: darwin64-x86_64-llvm (detected CERT_UNTRUSTED correctly) Correct: Default build: darwin64-x86_64-llvm (did not detect CERT_UNTRUSTED)Local build: darwin64-x86_64-cc (detected C

Re: SSL_get_verify_result() behavior

2011-11-16 Thread Yutaka Takeda
After some more investigation, the problem seems to happen only with OpenSSL (v0.9.8r) preinstalled with Mac OS X 10.6.8. If the test program is linked against *locally* built 0.9.8r, CERT_UNTRUSTED is correctly reported by SSL_get_verify_result(). Log: OpenSSL 0.9.8r 8 Feb 2011 compiler: cc -DOP

Uninitialized variable detected in commit 1.76

2011-11-16 Thread Chris Wilson
Hi, We are using Sentry (a C/C++ static analysis tool) to analyze openssl on a nightly basis. Sentry found that an uninitialiezd variable was recently introduced in the commit 1.76 and 1.57.2.3.2.13. You can see the commit here, http://cvs.openssl.org/filediff?f=openssl/ssl/t1_enc.c&v1=1.75&v2=

compiling openssl for iphone in fips mode

2011-11-16 Thread Michal Palczewski
Hi, I'm trying to compile a fips version of openssl for the iphone. This has been difficult. I have tried so many different things I don't know where to start. Has anyone done this? I setup a built environment where cc, and ar are scripts that call the appropriate compiler with the appropriate

Re: ssl3_get_client_certificate: no certificate returned

2011-11-16 Thread Tobias Nissen
Dr. Stephen Henson wrote: > On Tue, Nov 15, 2011, Tobias Nissen wrote: >> Dr. Stephen Henson wrote: >>> On Tue, Nov 15, 2011, Tobias Nissen wrote: I'm indirectly using OpenSSL through Net::SSLeay¹, which I use through AnyEvent::TLS². AnyEvent::TLS provides the means to define a custo

Re: ssl3_get_client_certificate: no certificate returned

2011-11-16 Thread Tobias Nissen
Dr. Stephen Henson wrote: > On Tue, Nov 15, 2011, Tobias Nissen wrote: >> Dr. Stephen Henson wrote: >>> On Tue, Nov 15, 2011, Tobias Nissen wrote: I'm indirectly using OpenSSL through Net::SSLeay¹, which I use through AnyEvent::TLS². AnyEvent::TLS provides the means to define a

TLS problem with Lotus Domino v8.5.1 - mutual handshake fails

2011-11-16 Thread gmx Ralf Hauser
Hi, In our postfix server, we see SSL_accept error from hgrs-mail01.hgrs.tld.dom[161.x.y.z]: 0 Nov 16 08:54:52 ernesto postfix2cc/smtpd[18662]: warning: TLS library problem: 18662:error:140943E8:SSL routines:SSL3_READ_BYTES:reason(1000):s3_pkt.c:1053:SSL alert number 0: This error message appare

RE: How to do generate PKCS#7 to embedded system

2011-11-16 Thread Laerte Junior
Hi, First, thanks for your answer. But I using crypt processor to generate key pair (rsa 1024), and the structure of certificate I implement the ASN.1 manually (I don't have memory enough to use openssl lib), because I using MSP430F5438A processor.Probably, I not explain correctly and attach

Re: SSL_get_verify_result() behavior

2011-11-16 Thread Yutaka Takeda
I ran the same test with OpenSSL v0.9.8o on linux. As soon as verifyCallback is returned 0, connect() fails with the CERT_UNTRUSTED error from SSL_get_verify_result() as expected. Here's the log: OpenSSL 0.9.8o 01 Jun 2010 compiler: cc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDS