Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-30 Thread Jakob Bohm
On 5/29/2012 8:56 PM, Jeremy Farrell wrote: From: Jakob Bohm [mailto:jb-open...@wisemo.com] Sent: Tuesday, May 29, 2012 8:34 AM On 5/27/2012 2:29 AM, Jeremy Farrell wrote: From: Jakob Bohm [mailto:jb-open...@wisemo.com] On 5/25/2012 5:30 PM, Ken Goldman wrote: On 5/25/2012 3:33 AM, Jakob Bohm

[BUG] Openssl 1.0.0h deadlock in multi-threaded ssl server

2012-05-30 Thread Zhuang Yuyao
Hi, I'm running into a deadlock using openssl 1.0.0h. it's a multi-threaded ssl proxy based on openssl and libevent, but i think the problem is much more related to openssl than libevent. there are 4 worker threads (5, 4, 3, 2), 1 external report thread (6), i think we can ignore this one, and 1

Re: [BUG] Openssl 1.0.0h deadlock in multi-threaded ssl server

2012-05-30 Thread Dr. Stephen Henson
On Wed, May 30, 2012, Zhuang Yuyao wrote: Hi, I'm running into a deadlock using openssl 1.0.0h. it's a multi-threaded ssl proxy based on openssl and libevent, but i think the problem is much more related to openssl than libevent. [snip] Thread 5 (Thread 0x7f2b9e93c950 (LWP 1281)): #0

Re: Problems with OpenSSl BN

2012-05-30 Thread chipler
Hi, ok. It seem to me that I am not the only one who expects different results with the BN_FLG_CONSTIME flag. I measured the time only of the BN_nnmod function in the BN_mod_add function. The BN_add function, which is executed before the BN_nnmod function, maybe needs more time, because it has

Apache 2.2.22 and OpenSSL

2012-05-30 Thread bhorowitz
Quick question for the group? I am running Apache 2.2.22 with OpenSSL 1.0.1c installed. This machine formerly had 1.0.0d and I am noticing that the apache logs are stating that OpenSSL is still at the earlier version. However when I do an openSSL version command it responds saying I am at the

RE: Help with openssl FIPS on AIX

2012-05-30 Thread Brewster, Scott
I have compiled the openssl-fips module, all is good so far. I am getting ready to attempt the openssl 0.9.8w portion again. With that in mind, what is your take on the below: At this point a full OpenSSL library has been installed. However, the special distribution required to generate the

Re: Help with openssl FIPS on AIX

2012-05-30 Thread Dr. Stephen Henson
On Wed, May 30, 2012, Brewster, Scott wrote: I am not sure how I should interpret this - do I expand the 0.9.8w tar file into the same directory as were I did the openssl-fips? Do I just expand 0.9.8w.tar into its own directory and proceed with the config fips, make and make install steps

RE: Help with openssl FIPS on AIX

2012-05-30 Thread Brewster, Scott
The results from the openssl-fips step: [root@pdclab01] /usr/local/ssl/fips-1.0/bin # ./openssl version OpenSSL FIPS Object Module v1.2 Good so far. The results from Config fips Make Make install On openssl 0.9.8w: [root@pdclab01] /usr/local/ssl/fips/bin # ./openssl version exec(): 0509-036

Re: Apache 2.2.22 and OpenSSL

2012-05-30 Thread The Doctor
On Wed, May 30, 2012 at 08:45:46AM -0400, bhorow...@vai.net wrote: Quick question for the group? I am running Apache 2.2.22 with OpenSSL 1.0.1c installed. This machine formerly had 1.0.0d and I am noticing that the apache logs are stating that OpenSSL is still at the earlier version.

Can not enable via padlock

2012-05-30 Thread Salatiel Filho
I am trying to test via padlock using 'openssl speed -engine padlock', but it fails. # openssl version OpenSSL 1.0.1c 10 May 2012 # openssl engine padlock 140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521: 140291115067048:error:2606A074:engine

RE: Can not enable via padlock

2012-05-30 Thread Peter Kurrasch
Are you combining version 1.0.1 and 1.0.0 ? From: salatiel.fi...@gmail.com Subject: Can not enable via padlock Date: Wed, 30 May 2012 20:26:45 -0300 To: openssl-users@openssl.org I am trying to test via padlock using 'openssl speed -engine padlock',

Re: [BUG] Openssl 1.0.0h deadlock in multi-threaded ssl server

2012-05-30 Thread Zhuang Yuyao
The problem is fixed after applying the patch. Thanks very much. On Wed, May 30, 2012 at 6:32 PM, Dr. Stephen Henson st...@openssl.org wrote: On Wed, May 30, 2012, Zhuang Yuyao wrote: Hi, I'm running into a deadlock using openssl 1.0.0h. it's a multi-threaded ssl proxy based on openssl and

Re: Whether OpenSSL produced X509 V3 certificate is compliant with RFC-5280.

2012-05-30 Thread Curt Sampson
On 2012-05-28 16:53 +0300 (Mon), Chinmaya Ku. Dwibedy wrote: We are using OpenSSL (0.9.7a) command and the auxiliary tools on RHEL4 to X509 V3 certificate. Can anyone please clarify whether this version 3 certificate is compliant with RFC- 5280? Thanks in advance for your valuable feedback.