Re: [openssl-users] OPENSSL_USE_IPV6 -- bio_dgram, vs travis-ci

2018-02-07 Thread Richard Levitte
In message <11282.1517852...@obiwan.sandelman.ca> on Mon, 05 Feb 2018 12:34:58 -0500, Michael Richardson said: mcr> bio_dgram has a bunch of #if on: OPENSSL_USE_IPV6, and I thought that this mcr> might be a common #ifdef, but actually it only occurs in that file. mcr> mcr> I looked through Conf

Re: [openssl-users] Custom X509_LOOKUP_METHOD in OpenSSL 1.1

2018-02-07 Thread Salz, Rich via openssl-users
* What is OpenSSL's current status regarding this? I don’t recall it being raised before, and I don’t think anyone one the team has expressed interest in this. It would probably have to start by someone contributing a pull request. -- openssl-users mailing list To unsubscribe: https://mta.o

Re: [openssl-users] Custom X509_LOOKUP_METHOD in OpenSSL 1.1

2018-02-07 Thread Remy Lebeau
I would definitely need something like this.  I have some library code that uses OpenSSL 1.0.2 (can't upgrade to 1.1.x yet because of all the interface changes), and it currently has to use a custom X509_LOOKUP_METHOD to handle Unicode filenames on Windows (in fact, this library had to complete

[openssl-users] Lock for SSL_accept method

2018-02-07 Thread Yan, Bob via openssl-users
Hi All, I used a mutex lock to prevent the SSL_accept() method being called by multiple thread concurrently since it may get coredump if there is no lock on SSL_accept() method. I am just wondering is the lock is still needed for openssl 1.0.2e version? mutex.lock(); int rt = S

Re: [openssl-users] Custom X509_LOOKUP_METHOD in OpenSSL 1.1

2018-02-07 Thread Salz, Rich via openssl-users
Yes, if there’s something that was made impossible to do because of things being made opaque, adding the missing API’s would be a bugfix and go into 1.1.0 and beyond. It woud be great if you could create a PR. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listi

[openssl-users] Custom X509_LOOKUP_METHOD in OpenSSL 1.1

2018-02-07 Thread Mingtao Yang
OpenSSL 1.1 made the X509_LOOKUP_METHOD structure opaque. I am currently working on migrating an application to use OpenSSL 1.1 APIs, but the application implements a custom get_by_subject method, which I cannot implement in 1.1.0 because there is no mechanism for creating custom X509_LOOKUP_METHO

Re: [openssl-users] DTLS multiple peer issue on shutdown

2018-02-07 Thread Grace Priscilla Jero
Hi All, Can someone assist from openssl on this issue. To be more elaborate: We are using SSL_peek followed by BIO_dgram_get_peer to get the peer port infomation. When we pass incorrect ssl value to SSL_peek it gives the correct peer information while using BIO_dgram_get_peer but any operation