Re: Query reg. using certificates bigger than 4k for EAP-TLS

2021-10-20 Thread Jan Just Keijser
Hi Vishal, On 20/10/21 13:34, Vishal Sinha wrote: Hi Matt The certificate is not large as such. But since it's a chain, the overall size crosses 4k. We used BIO_set_write_buffer_size() API to increase the size from 4k to 8k of the BIO buffer in SSL context. just out of curiosity: does th

Re: Query reg. using certificates bigger than 4k for EAP-TLS

2021-10-20 Thread Benjamin Kaduk via openssl-users
I'm also a bit confused at how this became the limiting factor for the application in question. https://datatracker.ietf.org/doc/html/draft-ietf-emu-eaptlscert-08 has some discussion of how large certificates can cause issues for EAP (as well as some guidance to EAP deployments as to how to reduc

Re: Query reg. using certificates bigger than 4k for EAP-TLS

2021-10-20 Thread Matt Caswell
Your scenario is still not quite clear to me. It sounds like you are using a BIO_f_buffer() BIO to buffer data. This is on the server side right? Are you encountering this problem for server writes? Since you are talking about the certificate chain, I assume you are referring to the server wri

Re: Query reg. using certificates bigger than 4k for EAP-TLS

2021-10-20 Thread Vishal Sinha
Hi Matt The certificate is not large as such. But since it's a chain, the overall size crosses 4k. We used BIO_set_write_buffer_size() API to increase the size from 4k to 8k of the BIO buffer in SSL context. Regards Vishal On Wed, Oct 20, 2021 at 3:26 PM Vishal Sinha wrote: > Hi > > We are us

Re: Need help to get members of SSL_SESSION in openssl 3.0

2021-10-20 Thread Matt Caswell
On 20/10/2021 11:41, Paramashivaiah, Sunil wrote: Hi All,   Please let me know APIs to get members(ssl_version, session_id, references and session_id_length) of SSL_SESSION structure variable. For ssl_version you can use SSL_SESSION_get_protocol_version. For session_id/session_id_le

Re: Help Required For Code Changes While Upgrading OpenSSL 1.0.1 to 3.0

2021-10-20 Thread Matt Caswell
On 20/10/2021 10:57, Kumar Mishra, Sanjeev wrote: Hi, I am upgrading the code from OpenSSL 1.0.1 to 3.0. I am getting following compilation errors. Could you please suggest appropriate changes for following- 1. X509err(X509_F_X509_STORE_ADD_CERT,ERR_R_MALLOC_FAILURE);   error: 'X509er

Need help to get members of SSL_SESSION in openssl 3.0

2021-10-20 Thread Paramashivaiah, Sunil
Hi All, Please let me know APIs to get members(ssl_version, session_id, references and session_id_length) of SSL_SESSION structure variable. Thanks and Regards, Sunil Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliate

Re: Query reg. using certificates bigger than 4k for EAP-TLS

2021-10-20 Thread Matt Caswell
On 20/10/2021 10:56, Vishal Sinha wrote: We are using openssl 1.1.1c version on our client and server. Client and Server are doing EAP-TLS authentication using certificates which are more than 4k in size (using 1 root CA and 2 intermediate CAs). We noticed that the server is not able to hand

Help Required For Code Changes While Upgrading OpenSSL 1.0.1 to 3.0

2021-10-20 Thread Kumar Mishra, Sanjeev
Hi, I am upgrading the code from OpenSSL 1.0.1 to 3.0. I am getting following compilation errors. Could you please suggest appropriate changes for following- 1. X509err(X509_F_X509_STORE_ADD_CERT,ERR_R_MALLOC_FAILURE); error: 'X509err' was not declared in this scope 2. RSA *rsa = RSA_n

Query reg. using certificates bigger than 4k for EAP-TLS

2021-10-20 Thread Vishal Sinha
Hi We are using openssl 1.1.1c version on our client and server. Client and Server are doing EAP-TLS authentication using certificates which are more than 4k in size (using 1 root CA and 2 intermediate CAs). We noticed that the server is not able to handle it gracefully due to insufficient buffer