RE: SSL error: no cipher list

2005-01-21 Thread Henry Su
No sure if you have set it or not. If not, you can try following example: #define CIPHER_LIST ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH SSL_CTX_set_cipher_list(ctx, CIPHER_LIST) ; -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Yuriy Synov Sent: Friday, January

RE: Socket layer and OpenSsl

2005-01-18 Thread Henry Su
I guess it's better to ask the socket layer or networking list. SSL should be independent from your communication protocol, as long as your protocol provide reliable tcp connection. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Prashant

RE: Writing to a mem BIO instead of using SSL_Write

2005-01-17 Thread Henry Su
Try to find some source code for EAP-TTLS or EAP-PEAP, these use mem BIO and SSL. You can try to read some source code FreeRadius or Open.1X. Good luck. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Schwartz Sent: Monday, January 17, 2005 11:56 AM

RE: interpreting ssldump results

2005-01-05 Thread Henry Su
According Mozilla project, the error is: All the error codes in the following block indicate that the local socket received an SSL3 record or handshake message from the remote peer that it was unable to interpret because the byte that identifies the type of record or message contained an

RE: authentication system

2003-07-28 Thread Henry Su
You can generate certificate request in your server that need certificate, and transfer it to you CA machine, and sign it. Then install the certificate into your server. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Z. S.GhandSent: Saturday,

rsa error: block type not 01

2003-07-25 Thread Henry Su
Hi, I have an SSL client/server application, on randomly basis, I got this error in my ssl server. When it does the SSL_accept, it sometimes got following problem. error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 Then the handshake is failed. I am using SSLv3, and

RE: Multithreading and SSL

2003-07-24 Thread Henry Su
That should not be a problem. Once the connection is established, you can use SSL_read and SSL_write to do it. I had multi-thread SSL server/clients, there's no problem for me to do it. You might to need to catch SSL_read/write exceptions and do retries. Good luck. -Original