RE: Accept failing - SysCall error - advice?

> From: owner-openssl-us...@openssl.org On Behalf Of Nathan Smyth > Sent: Wednesday, 11 April, 2012 09:08 > > If this server is getting connections from the client above, > > and that client mistakenly handles WANT_READ by closing or > > even exiting/aborting, the server gets either TCP abort or

RE: doubt regarding certificate generation

>From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar >Sent: Wednesday, 11 April, 2012 03:16 >Thanks Dave could you please elaborate below lines too Meta-answers: you can read the instructions for any OpenSSL utility on Unix with man (here man req and man x509) (you may need

Out of Office : Vacation

I will be out of the office starting 04/12/2012 and will not return until 04/16/2012. For project related questions, please contact, Athinarayanan Sankarachinthamani : (612) - 5096 Jaffar Mohideenpulavar : (612) - 5083 ** This message and an

Re: Re: Source IP of SSL connection

>On Thu 12/04/12 3:08 PM , kthiru...@inautix.co.in sent: >Carl, >Thanks for your reply, > >We have a Load Balancer in between the User ( desktop ) and the Server. > >So, i used the getpeername and am getting only the Load Balancer IP in the >output and not the desktop IP. Is >there any other wa

Re: Source IP of SSL connection

Carl, Thanks for your reply, We have a Load Balancer in between the User ( desktop ) and the Server. So, i used the getpeername and am getting only the Load Balancer IP in the output and not the desktop IP. Is there any other way that i can use to get the desktop IP ? int fd = SSL_get_

Re: expired ssl certificate

On Thu, Apr 12, 2012, Dinh, Thao V CIV NSWCDD, K72 wrote: > Thank You very, very much for all for help. I have a couple more questions: > > 1) what is max time you can have on expiration ?? > Technically the 31st December but you have to consider the security strength of the key used and h

RE: expired ssl certificate

Thank You very, very much for all for help. I have a couple more questions: 1) what is max time you can have on expiration ?? 2) You wrote >> Create a long lived self-signed CA certificate (for example: 20 or 30 >> years).. >> Have this self-signed CA (trust anchor) created in step-1 issues t

openssl - z/OS UNIX - starttls Issue

After getting thru nurmerous issues with the make of openssl. We are having an issue with the following: openssl s_client -connect :921 -starttls ftp Gets back CONNECTED(3) and hangs. So I know this function didn't exist with our old release and the startttls is newer, but

Re: openssl/crypto cleanup

Hi Nou, In that case my third point seems most relevant to you. There are a whole bunch of structures that are set up to hold and retain the various pieces of network data, file data, crypto data, certificates and keys required for SSL. If you are doing a thorough test then you are probably u

GCM and Galois field multiplication

Hello. I'm new using OpenSSL, and I am trying to use the GCM cipher mode functions inside a C code, but I haven't figured out how. I also wanted to perform internal operations of this mode separately. like the Galois filed multiplication, but I don't have a clue of how to do this, neither. Any he

Re: expired ssl certificate

On Thu, Apr 12, 2012, Ashok C wrote: > Hi, > > I had almost the same requirement and eventually achieved it by patching my > openssl package's x509_verify code to do the check_cert_time() method > optionally depending on some conditions. Ideally I feel openSSL should > provide a validation flag l

how do I re-use the ssl session?

I'm trying to re-use the SSL session. Works on Linux + Windows, but it looks as if it still tries to perform a full handshake and hangs when the same code runs on a Mac. I'm doing this to the context prior to making connections: SSL_CTX_set_session_cache_mode( ctx, SSL_SESS_CACHE_BOTH );