Re: [openssl-users] how to implement functions for STACK OF custom type?

2017-03-27 Thread lists
On 03/24/2017 06:46 PM, Dr. Stephen Henson wrote: On Tue, Mar 21, 2017, lists wrote: Sorry, I first posted this on the -dev list, likely inappropriate... now with an update: I am exploring my options with OpenSSL and specifically I am trying to manage the stacks for some custom objects.

Re: [openssl-users] OpenSSL sending close_notify right after responding to a heartbeat request

2017-03-27 Thread R Kaja Mohideen
I have used backtrace function (execinfo.h) as documented here (http://www.gnu.org/software/libc/manual/html_node/Backtraces.html) in couple of OpenSSL source files - ssl_lib.c (ssl_shutdown) and s3_pkt.c (ssl3_send_alert). I have actually used the exact same example from that page for getting the

Re: [openssl-users] Reg, TLS over SCTP (SOCK_SEQPACKET)

2017-03-27 Thread Sanjaya Joshi
Hi, Thanks for the pointers. We will consider that option. Regards, Sanjaya On Wed, Mar 1, 2017 at 6:59 PM, Michael Tuexen < michael.tue...@lurchi.franken.de> wrote: > > On 1 Mar 2017, at 06:34, Sanjaya Joshi wrote: > > > > Hi, > > Thank you Salz Rich for the

[openssl-users] In ssl3_write_bytes, some checks related to hanlding write failure are missing

2017-03-27 Thread Raja ashok
Hi, I feel there is a check missing in ssl3_write_bytes, in case of handling write failure. Consider SSL_write is called with 2 bytes buffer, then internally in ssl3_write_bytes we try to send it as two record (16384 and 3616). If TCP send failed for the second record then we store the

[openssl-users] SSL cipher list to disable TLS 1.0 & TLS 1.1

2017-03-27 Thread Hema Murthy
Hi, My system is FreeBSD 10.2 OpenSSL 1.0.2h lighttpd :lighttpd-1.4.23 Am trying to disable TLS1.0 and TLS1.1 through lighttpd.conf but am not sure of what is the equivalent cipher list to be used. I followed the below link and it didnt work for me. In case of Appweb Server,I was able to