Re: [openssl-users] af_alg engine: digests work but ciphers do not?

2015-04-21 Thread Barbe, Charles
A. Barbe Senior Software Engineer Allworx, a Windstream company 245 East Main St | Rochester NY | 14604 charles.ba...@allworx.com | 585.421.5565 From: openssl-users [openssl-users-boun...@openssl.org] on behalf of Barbe, Charles [charles.ba...@allworx.com

Re: [openssl-users] af_alg engine: digests work but ciphers do not?

2015-04-21 Thread Barbe, Charles
of Dr. Stephen Henson [st...@openssl.org] Sent: Tuesday, April 21, 2015 10:05 AM To: openssl-users@openssl.org Subject: Re: [openssl-users] af_alg engine: digests work but ciphers do not? On Tue, Apr 21, 2015, Barbe, Charles wrote: I've spent the last few days configuring the cryptodev engine

[openssl-users] af_alg engine: digests work but ciphers do not?

2015-04-15 Thread Barbe, Charles
I'm wondering if anybody has any experience with the af_alg engine located here: http://src.carnivore.it/users/common/af_alg/about/ I am able to compile the engine and can run commands such as: openssl speed md5 -engine af_alg and I see that openssl has loaded the engine as indicated by this

RE: Small memory leak on multithreaded server

2014-11-24 Thread Barbe, Charles
, Nov 21, 2014, Barbe, Charles wrote: Yes... sorry, forgot to include this part of my shutdown sequence. One thing I am noticing is that I do not call X409_free on my certs. I even have a comment in my code saying that I am not freeing them because I think they will be freed when the SSL_CTX

RE: Small memory leak on multithreaded server

2014-11-21 Thread Barbe, Charles
: Re: Small memory leak on multithreaded server On Thu, Nov 20, 2014 at 10:19:32PM +, Barbe, Charles wrote: I can do any combination of steps 2,3 and 4 above (ie. leave some of them out) and I always get the same amount of memory left over after I shut down my application. I believe this means

RE: Small memory leak on multithreaded server

2014-11-21 Thread Barbe, Charles
://rt.openssl.org/Ticket/Display.html?id=2561user=guestpass=guest. On Thu, Nov 20, 2014 at 5:19 PM, Barbe, Charles charles.ba...@allworx.com wrote: Hello, I have noticed a small and consistent memory leak in my multithreaded openssl server and am wondering if somebody can help me figure out what I need to do

RE: Small memory leak on multithreaded server

2014-11-21 Thread Barbe, Charles
...@openssl.org] on behalf of Dr. Stephen Henson [st...@openssl.org] Sent: Thursday, November 20, 2014 9:50 PM To: openssl-users@openssl.org Subject: Re: Small memory leak on multithreaded server On Thu, Nov 20, 2014, Barbe, Charles wrote: Hello, I have noticed a small and consistent memory leak

RE: Small memory leak on multithreaded server

2014-11-21 Thread Barbe, Charles
leak on multithreaded server On Fri, Nov 21, 2014, Barbe, Charles wrote: Thanks for the response... here is the code that runs when my connection closes: void OpensslConnection::cleanup() { if(ssl != NULL) { if(isConnected) { while(SSL_shutdown(ssl

RE: Small memory leak on multithreaded server

2014-11-21 Thread Barbe, Charles
, November 21, 2014 1:40 PM To: openssl-users@openssl.org Subject: Re: Small memory leak on multithreaded server On Fri, Nov 21, 2014, Barbe, Charles wrote: Yes... sorry, forgot to include this part of my shutdown sequence. One thing I am noticing is that I do not call X409_free on my certs. I even

Small memory leak on multithreaded server

2014-11-20 Thread Barbe, Charles
Hello, I have noticed a small and consistent memory leak in my multithreaded openssl server and am wondering if somebody can help me figure out what I need to do to free it when my application closes. I am on OpenSSL version 1.0.1j. Here's how I reproduce the leak: 1) Start up my server 2)

RE: Certificate problem - SOLVED

2014-07-08 Thread Barbe, Charles
Thompson [dthomp...@prinpay.com] Sent: Monday, July 07, 2014 4:03 PM To: openssl-users@openssl.org Subject: RE: Certificate problem From: owner-openssl-us...@openssl.org On Behalf Of Barbe, Charles Sent: Sunday, July 06, 2014 22:42 I have the following certificates and associated private keys

RE: Certificate problem - SOLVED

2014-07-08 Thread Barbe, Charles
problem - SOLVED On Tue, Jul 8, 2014 at 3:39 PM, Barbe, Charles charles.ba...@allworx.com wrote: I figured it out and am now wondering if there is a defect in the openssl verify command. This suggestion from Dave Thompson: I would first try x509 -noout -subject|issuer -nameopt multiline,show_type

RE: Certificate problem - SOLVED

2014-07-08 Thread Barbe, Charles
From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on behalf of Barbe, Charles [charles.ba...@allworx.com] Sent: Tuesday, July 08, 2014 4:44 PM To: openssl-users@openssl.org Subject: RE: Certificate problem - SOLVED Yet openssl verify said OK to both of my certificates against

Re: Certificate problem

2014-07-07 Thread Barbe, Charles
there is no risk attaching them but i still need the approval. Thanks for responding! CHAD On Jul 7, 2014, at 4:03 PM, Dave Thompson dthomp...@prinpay.com wrote: From: owner-openssl-us...@openssl.org On Behalf Of Barbe, Charles Sent: Sunday, July 06, 2014 22:42 I have the following certificates

Re: Certificate problem

2014-07-07 Thread Barbe, Charles
As I said in another note, I will try to send the certs tomorrow. Thanks for the help! CHAD On Jul 7, 2014, at 4:42 PM, Kyle Hamilton aerow...@gmail.com wrote: On 7/6/2014 7:41 PM, Barbe, Charles wrote: Does anybody have any suggestions on where to look to figure this out? A tool

Re: Certificate problem

2014-07-07 Thread Barbe, Charles
[mailto:owner-openssl-us...@openssl.org] On Behalf Of Barbe, Charles Sent: Sunday, July 6, 2014 8:42 PM To: openssl-users@openssl.org Subject: Certificate problem I'm having a problem with generating certificates and I'm wondering if anybody has any suggestions on where to look. I have the following

Re: Certificate problem

2014-07-07 Thread Barbe, Charles
CHAD On Jul 7, 2014, at 11:11 PM, Jeffrey Walton noloa...@gmail.com wrote: On Mon, Jul 7, 2014 at 9:59 PM, Barbe, Charles charles.ba...@allworx.com wrote: I will try an ASN.1 decoder tomorrow. Thanks for the suggestion! One thing I did try today was to have both servers generate

Re: Certificate problem

2014-07-07 Thread Barbe, Charles
CHAD On Jul 7, 2014, at 11:03 PM, Dave Thompson dthomp...@prinpay.com wrote: From: owner-openssl-us...@openssl.org On Behalf Of Barbe, Charles Sent: Monday, July 07, 2014 21:59 I will try an ASN.1 decoder tomorrow. Thanks for the suggestion! One thing I did try today was to have both

Certificate problem

2014-07-06 Thread Barbe, Charles
I'm having a problem with generating certificates and I'm wondering if anybody has any suggestions on where to look. I have the following certificates and associated private keys: A - certificate A generated with one version of my software not using openssl B - certificate B generated with a

RE: Using single EVP_PKEY instance across multiple connections

2014-06-29 Thread Barbe, Charles
| 14604 charles.ba...@allworx.com | 585.421.5565 From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on behalf of Barbe, Charles [charles.ba...@allworx.com] Sent: Friday, June 27, 2014 4:18 PM To: openssl-users@openssl.org Subject: Using

Using single EVP_PKEY instance across multiple connections

2014-06-27 Thread Barbe, Charles
Hi, I have an implementation of a multi-threaded HTTP server that I wrote using OpenSSL version 1.0.1g. Currently, on initialization of the server, I load my private key from disk and store it in an EVP_PKEY pointer. Whenever I accept a new connection, I use that same pointer to an EVP_PKEY in

Conflicting information regarding non-blocking sockets

2014-06-05 Thread Barbe, Charles
Hello, I have implemented an SSL server on the ecos platform and it seems to be working well however I am a tiny bit unclear about the requirements around whether or not calls to SSL_read and SSL_write need to be syncrhonized and I want to avoid doing something incorrect. The specific question