Re: How text-ish are PEM files?

2020-01-27 Thread Viktor Dukhovni
On Tue, Jan 28, 2020 at 02:17:21AM +, Douglas Morris via openssl-users wrote: > I expect from RFC 8555 that an ACME server issues a full chain > certificate as a reply body in the PEM format. The media type is > 'application/pem-certificate-chain'.

How text-ish are PEM files?

2020-01-27 Thread Douglas Morris via openssl-users
I expect from RFC 8555 that an ACME server issues a full chain certificate as a reply body in the PEM format. The media type is 'application/pem-certificate-chain'. I can only guess from RFC 1421, sec. 4.3.1 that the byte encoding of the certificate necessarily uses line breaks. I get

RE: Re:openssl-users Digest, Vol 62, Issue 6

2020-01-27 Thread Dr. Matthias St. Pierre
purpose of epoll. I've been banging my head here for several days. Any help here will be much appreciated. Thx, Eran -- next part -- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20200127/c105e845/attachment-0001.h

RE: Determine that there is no forward progress with non blocking SSL socket

2020-01-27 Thread Michael Wojcik
From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Eran Borovik Sent: Monday, January 27, 2020 07:07 > When do I stop? what is the best way to actually determine there can > be no more forward progress both on the send and the receive side, and > epoll must be used? ...

Re: Decryption slower in 1.1.1 branch?

2020-01-27 Thread Viktor Dukhovni
On Mon, Jan 27, 2020 at 06:20:27PM +, Dan Heinz wrote: > I upgraded a library that used OpenSSL 1.0.2 to the OpenSSL 1.1.1d. > On Windows, I have found that the time to decrypt had doubled. After > a bit of timestamp logging, I found the RSA_private_decrypt function > is taking twice as long

Re:openssl-users Digest, Vol 62, Issue 6

2020-01-27 Thread RUBEN BARAINCA
Hi!! I want to unsubscribe.  Original message From: openssl-users-requ...@openssl.orgDate: Mon, Jan 27, 2020, 7:20 PMTo: openssl-users@openssl.orgSubject: openssl-users Digest, Vol 62, Issue 6Send openssl-users mailing list submissions to openssl-users@openssl.orgTo subscribe or

Decryption slower in 1.1.1 branch?

2020-01-27 Thread Dan Heinz
I upgraded a library that used OpenSSL 1.0.2 to the OpenSSL 1.1.1d. On Windows, I have found that the time to decrypt had doubled. After a bit of timestamp logging, I found the RSA_private_decrypt function is taking twice as long with 1.1.1d as it did with 1.0.2t. This is being called from a

Determine that there is no forward progress with non blocking SSL socket

2020-01-27 Thread Eran Borovik
Hi all, My application is using non-blocking sockets to send and receive data. To avoid issues, my code guarantees that a specific socket is always owned by a specific thread, thus preventing any issues or races from concurrently running send and receive at the same time on the same socket. I've

Re: What option is not recognized by OpenSSL 1.1.1d?

2020-01-27 Thread Matt Caswell
On 26/01/2020 21:03, Jeffrey Walton wrote: > I'm trying to convert some scripts from OpenSSL 1.0.2 to OpenSSL 1.1.1d. > > Configure is dying: > > * Unsupported options: no-comp > --prefix=/home/jwalton/tmp/build-test > --libdir=/home/jwalton/tmp/build-test/lib > > According to