Re: TLS, BIOs, SSL_read/write

2009-03-15 Thread Galina Goncharov
an other thought - I didn't notice your third SSL_set_bio(m_ssl, NULL, bioMem); so my suggestion wasn't quite correct. and its always usfull to get error by calling SSL_get_error() - it can point to right direction. and below is from other thread: = The BIO_new_mem_buf creates a read-only buf

Re: TLS, BIOs, SSL_read/write

2009-03-13 Thread Galina Goncharov
Hello, as I can see from code you first set readBIO and writeBIO to socket(scktUpstream ) and that makes TLS negotiation to succeed. Later you set SSL readBIO to mem_bio, and writeBIO to NULL and then try to use writeBIO ( calling SSL_write) - sure it will fail. During negotiation do you receive se

Re: Error reading EC Private Key from PEM file

2009-02-24 Thread Galina Goncharov
first - do you use FIPS? if yes, 1) the you need to include in the very beginning // for use with privkey with password OpenSSL_add_all_algorithms(); PKCS5_PBE_add(); 2) convert the key before use: openSSL pkcs8 -in privkey_pass.pem -topk8 -v2 des3 -out cprivke

Re: FIPS vs. standard distribution

2009-02-17 Thread Galina Goncharov
have you read UserGuide? http://www.openssl.org/docs/fips/UserGuide-1.2.pdf the APIs are the same but you have to add call FIPS_mode_set() and make sure you use only FIPS approved algorithms Galina On Tue, Feb 17, 2009 at 9:23 PM, Randy Turner wrote: > > Hello List, > > I was curious about the d