RE: Distributing newly generated certificates via socket?

2014-04-18 Thread Michael Wojcik
Option 1, using memoryBio and copy out the buffer consents: BIO *memoryBio = BIO_new (BIO_s_mem()); PEM_write_bio_X509 (memoryBio, cert)); char *p (0); long length = BIO_get_mem_ptr (memoryBio, p); char **pp (0); length = BIO_get_mem_data (memoryBio, pp);

Donation from Paessler AG

2014-04-18 Thread Steve Marquess
I'm at least temporarily caught up with the booking on recent donations. Whew. We are seeing donations from all around the world; it would be easier to list the countries we *haven't* heard from. Among them was a generous donation of US$1000 from Dirk Paessler of Paessler AG

Re: Coverity Scan: Would/DId It Catch the Heartbleed Defect?

2014-04-18 Thread Stefan H. Holek
No, Coverity did not catch Heartbleed. http://security.coverity.com/blog/2014/Apr/on-detecting-heartbleed-with-static-analysis.html On 16.04.2014, at 12:25, Tom Browder wrote: Is OpenSSL participating in the Coverity free scanning program for open source software? If not, it might have

RE: Coverity Scan: Would/DId It Catch the Heartbleed Defect?

2014-04-18 Thread Floodeenjr, Thomas
Klocwork seems to have caught it: http://www.klocwork.com/blog/software-security/saving-you-from-heartbleed/?mkt_tok=3RkMMJWWfF9wsRolva7JZKXonjHpfsX56%2B4tX6CwlMI%2F0ER3fOvrPUfGjI4FTsZrI%2BSLDwEYGJlv6SgFSrbAMah1ybgNUxE%3D -Original Message- From: owner-openssl-us...@openssl.org

Re: Coverity Scan: Would/DId It Catch the Heartbleed Defect?

2014-04-18 Thread Jeffrey Walton
On Fri, Apr 18, 2014 at 12:24 PM, Floodeenjr, Thomas thomas_floodee...@mentor.com wrote: Klocwork seems to have caught it:

RE: Coverity Scan: Would/DId It Catch the Heartbleed Defect?

2014-04-18 Thread Floodeenjr, Thomas
Yes, I suppose it is easier to look for something, after you already know what to look for. ;) -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jeffrey Walton Sent: Friday, April 18, 2014 11:16 AM To: OpenSSL Users List

Question on doing select or poll

2014-04-18 Thread Byungchan An
Hello. I'm a newbie for OpenSSL and network programming. Currently, I'm trying to write transparent proxy with openSSL and translate the previous vanilla socket programming into openSSL BIO. However, when relaying connection, I think there is a need to poll or select socket (I want this with BIO