A question about SSL connection reopen

2006-06-27 Thread Zhang, Long \(Roger\)
Hi, I have created a TLS connection with SSL_connect(ssl) successfully. Then I call SSL_shutdown(ssl) to close the TLS connectio sussessfully. Thenn I want to do the reopen with SSL_connect(ssl) . But I found it failed. The return value from ::SSL_get_error (ssl, status) is SSL_ERROR_SYSCALL, a

A question about SSL connection reopen

2006-06-27 Thread Zhang, Long \(Roger\)
Hi, I have created a TLS connection with SSL_connect(ssl) successfully. Then I call SSL_shutdown(ssl) to close the TLS connectio sussessfully. Thenn I want to do the reopen with SSL_connect(ssl) . But I found it failed. The return value from ::SSL_get_error (ssl, status) is SSL_ERROR_SYSCALL, a

error:140D9115:SSL routines:SSL_GET_PREV_SESSION:session id context uninitialized

2006-05-19 Thread Zhang, Long \(Roger\)
Hi, I developed with openssl0.9.8a on Solaris 8. When I run my test, found a problem of "SSL_GET_PREV_SESSION:session id context uninitialized". I created a TLS server, a TLS client. The TLS client could connect TLS server successfully first time. Then I close TLS client and reopen it soon. Fou

RE: strange problem of "no shared cipher" for no certificateTLSconnection

2006-04-18 Thread Zhang, Long \(Roger\)
Hi, Marek, I have tried. It did not work. Since my work is based on ACE_SSL, I tried with ACE_SSL example program. Still could not setup TLS connection. Seems like an ACE_SSL bug. Thanks, Roger > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Marek

RE: "Error: unable to get certificate CRL"

2006-04-17 Thread Zhang, Long \(Roger\)
Hi, Anyone can help me on this issue? I saw there are some mails about "unable to get certificate CRL". Seems like a bug? I am using openssl-0.9.8a. Thanks! Roger > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Zhang, > Long

"Error: unable to get certificate CRL"

2006-04-17 Thread Zhang, Long \(Roger\)
Hi, I saw a problem of unable to get certificate CRL. The program is as following. It is changed from O'Reilly openssl book example 10-7. In the program, /home/zhangl/openssl/test/ca1/newcerts/ca1cert.pem is my root self signed CA. It signed a lot of certificates. 01.pem, 02.pem to 09.pem. Whi

RE: strange problem of "no shared cipher" for no certificate TLS connection

2006-04-16 Thread Zhang, Long \(Roger\)
; TLS connection > > > On Mon, Apr 17, 2006 at 10:20:14AM +0800, Zhang, Long (Roger) wrote: > > > Hi, Steve, > > > > Thanks for your reply. I found no use to add dhparam file > to my server > > and client. The connection still could not be setup. I > fo

RE: strange problem of "no shared cipher" for no certificate TLSconnection

2006-04-16 Thread Zhang, Long \(Roger\)
Hi, Marek, I used SSL_CTX_set_cipher_list() to try all kinds of ADH plus aNULL, eNULL, NULL and ALL. The connection still could not be setup without server certificate. I found if I set server certificate and private key, the connection could be setup. If no server certificate, it must fail eve

RE: strange problem of "no shared cipher" for no certificate TLS connection

2006-04-16 Thread Zhang, Long \(Roger\)
o > certificate TLS connection > > > On Fri, Apr 14, 2006, Zhang, Long (Roger) wrote: > > > Hi, > > > > I developed an application based on ACE_SSL which based on > openssl. I found I could not set up a TLS connection with no > certificate verification. That is

strange problem of "no shared cipher" for no certificate TLS connection

2006-04-14 Thread Zhang, Long \(Roger\)
Hi, I developed an application based on ACE_SSL which based on openssl. I found I could not set up a TLS connection with no certificate verification. That is I just want a TLS connection without certificate. I used the same cipherlist and rand file with openssl command, while openssl command

strange problem of "no shared cipher" for no certificate TLS connection

2006-04-14 Thread Zhang, Long \(Roger\)
Hi, I developed an application based on ACE_SSL which based on openssl. I found I could not set up a TLS connection with no certificate verification. That is I just want a TLS connection without certificate. I used the same cipherlist and rand file with openssl command, while openssl command