Current master fails test

2020-03-06 Thread Blumenthal, Uri - 0553 - MITLL
You probably already noticed, but if not… MacOS Mojave 10.14.6, Xcode 11.3.1. Current OpenSSL master (OpenSSL 3.0 dev) with PR 11193 applied (latest variant). Test Summary Report --- 25-test_req.t(Wstat: 512 Tests: 15 Failed: 2) Failed tests: 14-15

Re: How to cleanup CRL memory used after SSL(OpenSSL) handshake has completed?

2020-03-06 Thread Hyer Low
Good to know that. Regards, Kheemen > > On Mar 6, 2020 at 7:24 PM, mailto:m...@openssl.org)> wrote: > > > > The CTX needs to be there for the whole time that the SSL is. Matt On > 06/03/2020 11:17, Hyer Low wrote: > Noted.

Re: How to cleanup CRL memory used after SSL(OpenSSL) handshake has completed?

2020-03-06 Thread Matt Caswell
The CTX needs to be there for the whole time that the SSL is. Matt On 06/03/2020 11:17, Hyer Low wrote: > Noted. Renegotiation has been disable. > > Is there anyway to clean the CTX while let SSL object itself serving the > tunnel ? Or I can only depend on the CTX ref after the SSL is delete? >

Re: How to cleanup CRL memory used after SSL(OpenSSL) handshake has completed?

2020-03-06 Thread Hyer Low
Noted. Renegotiation has been disable. Is there anyway to clean the CTX while let SSL object itself serving the tunnel ? Or I can only depend on the CTX ref after the SSL is delete? Regards, Hyer Low > > On Mar 6, 2020 at 7:00 PM,

Re: How to cleanup CRL memory used after SSL(OpenSSL) handshake has completed?

2020-03-06 Thread Matt Caswell
One other thing does occur: if you allow renegotiation then you might need access to the cert-store after the initial handshake has completed. Matt On 06/03/2020 10:57, Hyer Low wrote: > All configs can have different cert being setup as well, hence each CTX cert > store might also different

Re: How to cleanup CRL memory used after SSL(OpenSSL) handshake has completed?

2020-03-06 Thread Hyer Low
All configs can have different cert being setup as well, hence each CTX cert store might also different and not to be share. Thanks. I'll try and see any possible side effect. -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html

Re: How to cleanup CRL memory used after SSL(OpenSSL) handshake has completed?

2020-03-06 Thread Matt Caswell
On 06/03/2020 03:13, Hyer Low wrote: > I'm using *X509_load_cert_crl_file*(openssl) to load the CRL file into the > CTX and create SSL for ssl_accept handshake. For each SSL connection that > has CRL file(600KB) loaded used up 10 times memory more than SSL connection > that doesn't load CRL. >

Signing cms using hash of data instead data

2020-03-06 Thread Ilya Yurkevich
Hello everyone. Is it possible to create cms Signed Data using the message digest value instead of the data? What I need use? Thanks.