Re: error with cipher EVP_des_ede3_cbc in openssl 3.0

2022-02-22 Thread pauli
Have you loaded the legacy provider before trying this? Pauli On 23/2/22 5:03 pm, Srinivas, Saketh (c) wrote: Hi I am trying to encrypt and decrypt using EVP_des_ede3_cbc() type.  iam using openssl3.0 _ _ the functions i am using are encryption side:

error with cipher EVP_des_ede3_cbc in openssl 3.0

2022-02-22 Thread Srinivas, Saketh (c)
Hi I am trying to encrypt and decrypt using EVP_des_ede3_cbc() type. iam using openssl3.0 the functions i am using are encryption side: EVP_EncryptInit_ex -> EVP_EncryptUpdate -> EVP_EncryptFinal_ex decryption side: -- EVP_DecryptInit_ex ->

Need additional control over async stack allocation

2022-02-22 Thread Arran Cudbard-Bell
In our application we use the OpenSSL ASYNC_* API to jump out of verification and session load/store callbacks. On the POSIX side, when creating a new context OpenSSL calls the standard OPENSSL_malloc and OPENSSL_free functions to allocate memory for the stack passed into makecontext.

Re: Question about OpenSSL 3.0 and static linking

2022-02-22 Thread Matt Caswell
On 22/02/2022 07:54, pa...@openssl.org wrote: There is a define to allow this: STATIC_LEGACY but I don't remember how to specify it on the configuration command line. We should probably turn this on in a no-shared build. Configure with "no-module". Matt Pauli On 22/2/22 5:37 pm,

Re: Error: write EPROTO 0006601201000000:error:0A000152:SSL routines:final_renegotiate:unsafe legacy renegotiation disabled:ssl/statem/extensions.c:880

2022-02-22 Thread Matt Caswell
On 21/02/2022 18:24, Brian Pilati wrote: Thanks Matt for your response. I do understand the issues with the connection. Unfortunately, I still need to connect to the server. Where would you set the SSL_OP_LEGACY_SERVER_CONNECT outside of nodejs? Is it in a config file? Can you run

Re: Question about OpenSSL 3.0 and static linking

2022-02-22 Thread Richard Levitte
'no-module' will do what you want. I noticed, though, that the documentation in INSTALL.md isn't entirely clear on what that does. ./config --prefix=$HOME/local/openssl-3.0.1 no-shared no-module Cheers, Richard On Tue, 22 Feb 2022 07:37:03 +0100, Shunichi Shinohara wrote: > > Hi List, >