Re: ssl client write / server accept seems broken

2021-03-24 Thread Embedded Devel
On 3/24/21 9:53 PM, Embedded Devel wrote: On 3/23/21 11:06 PM, Matt Caswell wrote: On 23/03/2021 15:47, Embedded Devel wrote: Do you know if your application is statically linked or dynamically linked to OpenSSL? Ive attached the code in question if it helps and nope still have the err

Re: ssl client write / server accept seems broken

2021-03-24 Thread JONATHAN PELAEZ
On Wed, Mar 24, 2021, 10:54 PM Embedded Devel wrote: > > On 3/23/21 11:06 PM, Matt Caswell wrote: > > > > > > On 23/03/2021 15:47, Embedded Devel wrote: > >>> Do you know if your application is statically linked or dynamically > >>> linked to OpenSSL? > >> Ive attached the code in question if it

Re: ssl client write / server accept seems broken

2021-03-24 Thread Embedded Devel
On 3/23/21 11:06 PM, Matt Caswell wrote: On 23/03/2021 15:47, Embedded Devel wrote: Do you know if your application is statically linked or dynamically linked to OpenSSL? Ive attached the code in question if it helps original code was deprecated, and changed from /*  if ((ssl_con->ct

Re: ssl client write / server accept seems broken

2021-03-23 Thread Embedded Devel
On 3/23/21 11:06 PM, Matt Caswell wrote: On 23/03/2021 15:47, Embedded Devel wrote: Do you know if your application is statically linked or dynamically linked to OpenSSL? Ive attached the code in question if it helps Looks like the original developer already tried to print the contents

Re: ssl client write / server accept seems broken

2021-03-23 Thread Matt Caswell
On 23/03/2021 15:47, Embedded Devel wrote: Do you know if your application is statically linked or dynamically linked to OpenSSL? Ive attached the code in question if it helps Looks like the original developer already tried to print the contents of the OpenSSL error stack:

Re: ssl client write / server accept seems broken

2021-03-23 Thread Embedded Devel
load_verify_locations()\n"); return -1; } SSL_CTX_set_default_verify_paths(ssl_con->ctx); SSL_CTX_use_certificate_file(ssl_con->ctx, ssl_con->cert_file, SSL_FILETYPE_PEM); SSL_CTX_use_PrivateKey_file(ssl_con->ctx, ssl_con->key_file, SSL_FILETYPE_PEM);

Re: ssl client write / server accept seems broken

2021-03-23 Thread Matt Caswell
On 23/03/2021 15:02, Embedded Devel wrote: IM inclined top think the code for the certs is ok, but  can really say, and im not an openssl programmer by any means... just need someone to put eyes on the code and fix it really. The cert looks ok - at least nothing obviously wrong. 2048 bi

Re: ssl client write / server accept seems broken

2021-03-23 Thread Embedded Devel
On 3/23/21 9:31 PM, Matt Caswell wrote: On 23/03/2021 02:37, Embedded Devel wrote: I have an application previously written for us 10+ years ago that no longer seems to be happy Has something happened that might have caused this? Did you upgrade OpenSSL, or do some other kind of update to

Re: ssl client write / server accept seems broken

2021-03-23 Thread Matt Caswell
On 23/03/2021 02:37, Embedded Devel wrote: I have an application previously written for us 10+ years ago that no longer seems to be happy Has something happened that might have caused this? Did you upgrade OpenSSL, or do some other kind of update to your code? Which version of OpenSSL are

ssl client write / server accept seems broken

2021-03-22 Thread Embedded Devel
te_fds);     return rc; } and like wise i get this error on the server side Mar 23 03:13:58 optim04 ac_server[597280]: ac_ssl_server_accept(): Error SSL_ERROR_SYSCALL - return code: -1. SSL_accept() Mar 23 03:13:58 optim04 ac_server[597280]: ac_ssl_server_accept(): Error code: -3 which

Re: [openssl-users] Win32 BIO server, no accept

2018-11-13 Thread Karsten Gorkow
Riddle solved: Must call BIO_new_accept("0.0.0.0:") and it works. Von: openssl-users Im Auftrag von Karsten Gorkow Gesendet: Montag, 12. November 2018 18:26 An: openssl-users@openssl.org Betreff: [openssl-users] Win32 BIO server, no accept Hello, I'm pretty new to O

[openssl-users] Win32 BIO server, no accept

2018-11-12 Thread Karsten Gorkow
m is the server role. I don't get a valid (second) accept call, no client is able to connect. Inside the app this is done via a non-blocking listening socket (return value is always -1 with "WOULDBLOCK" set), but I even copied the sample code from the blog (blocking mode) into th

Re: Hang during SSL /connect - accept

2014-09-08 Thread Norm Green
This may indeed be the problem, but some of the changes in 1.0.2 do not easily merge back to 1.0.1i. Specifically, this diff seems to have no equivalent code to merge into in 1.0.1i. We may need to consider reverting back to 1.0.1h until 1.0.2 is released. --- a/ssl/s3_lib.c +++ b/ssl/s3_lib

Re: Hang during SSL /connect - accept

2014-09-08 Thread Viktor Dukhovni
On Mon, Sep 08, 2014 at 05:41:13PM -0700, Norm Green wrote: > Thanks Viktor. I did get some fixes (via this list) from Steve a while back > because SRP authenication was completely broken out of the box with 1.0.1i. > However I don't know if all the changes in the commit you mentioned have > been m

Re: Hang during SSL /connect - accept

2014-09-08 Thread Norm Green
Thanks Viktor. I did get some fixes (via this list) from Steve a while back because SRP authenication was completely broken out of the box with 1.0.1i.However I don't know if all the changes in the commit you mentioned have been merged. I will investigate further. Norm On 9/8/14 17:30,

Re: Hang during SSL /connect - accept

2014-09-08 Thread Viktor Dukhovni
On Mon, Sep 08, 2014 at 03:10:47PM -0700, Norm Green wrote: > I will try to capture traffic in the next run. Looking at the commit history after 1.0.1i, I think you want: commit 30fbe92c78981a417718bcbf25d295d16c5b7ed9 Author: Dr. Stephen Henson Date: Fri Aug 8 11:24:25 2014 +0100 Fix SR

Re: Hang during SSL /connect - accept

2014-09-08 Thread Norm Green
Hi Viktor, From the server: (gdb) p s->session[0] $1 = {ssl_version = 770, key_arg_length = 0, key_arg = "\000\000\000\000\000\000\000", master_key_length = 48, master_key = "\000Eθ\371\266\225\202\062\370\336x\324*\251\016\336\344\372\221\302\031\002\351\322Zk\373G\342x\273u\274|\210\362\36

Re: Hang during SSL /connect - accept

2014-09-08 Thread Viktor Dukhovni
On Mon, Sep 08, 2014 at 02:36:20PM -0700, Norm Green wrote: > Thanks Victor. I don't have a handshake recording for these stacks. The > problem occurs intermittently. Any chance you can capture enough sessions to also nab one (full-size packet capture) that ran into the problem? > I've dumped

Re: Hang during SSL /connect - accept

2014-09-08 Thread Norm Green
Thanks Victor. I don't have a handshake recording for these stacks. The problem occurs intermittently. I've dumped the SSL state and method objects for the server and client. Anything else you want to see while the processes are still alive? Norm Here's the SSL state and method from the

Re: Hang during SSL /connect - accept

2014-09-08 Thread Viktor Dukhovni
On Mon, Sep 08, 2014 at 11:45:59AM -0700, Norm Green wrote: > Were are occasionally seeing hangs when establishing an SSL connection with > OpenSSL 1.0.1i. This connection uses SRP and both the server and the client > sockets are in blocking mode (thus the hang). > > Is there anything I can do t

Hang during SSL /connect - accept

2014-09-08 Thread Norm Green
Were are occasionally seeing hangs when establishing an SSL connection with OpenSSL 1.0.1i. This connection uses SRP and both the server and the client sockets are in blocking mode (thus the hang). Is there anything I can do to debug this problem? Client side: gdb) where #0 0x7f91e412dd

Re: Could openssl foundation give itself rules not to accept money from intelligence agencies?

2014-04-15 Thread Steve Marquess
On 04/14/2014 03:01 PM, Benjamin Schulz wrote: > > Hello, > The openssl foundation writes here: > > https://www.openssl.org/support/acknowledgments.html > > ... > > So I think the openssl foundation should take some measures that perhaps may > help to scare intelligence agencies away from o

RE: Could openssl foundation give itself rules not to accept money from intelligence agencies?

2014-04-15 Thread Michael Wojcik
> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Benjamin Schulz > Sent: Monday, 14 April, 2014 15:01 > > Could the openssl foundation add official rules that This list is probably not the place to discuss this at any length, but I for one find the

Could openssl foundation give itself rules not to accept money from intelligence agencies?

2014-04-14 Thread Benjamin Schulz
Hello,  The openssl foundation writes here:  https://www.openssl.org/support/acknowledgments.html  "Please note that we ask permission to identify sponsors and that some sponsors we consider eligible for inclusion here have requested to remain anonymous.""  and here:  https://www.openssl.org/

Re: possible SSL_connect/accept bug?

2013-09-27 Thread Viktor Dukhovni
On Fri, Sep 27, 2013 at 07:49:06AM -0700, Roger Miller wrote: > My initial call to 'connect' was returning 'WSAEWOULDBLOCK' (to > be expected on a non-blocking socket). At that point the appropriate thing to do is to select the socket for write in your event loop. Once the socket reports ready (

RE: possible SSL_connect/accept bug?

2013-09-27 Thread Roger Miller
> -Original Message- > From: Roger Miller > > Using OpenSSL libraries to provide basic encryption between client and > server. > Using non-blocking sockets, and client can connect to multiple servers. > > I have an intermittent issue where server reports > 'SSL3_GET_RECORD:wrong version n

RE: possible SSL_connect/accept bug?

2013-09-26 Thread Roger Miller
> -Original Message- > From: bensonkwok...@air-watch.com [mailto:bensonkwok...@air-watch.com] > > I have a similar problem and have found a fix for it. Please see the > thread below to see if your problem is the same: > > http://www.mail-archive.com/openssl-dev@openssl.org/msg33010.html

Re: possible SSL_connect/accept bug?

2013-09-26 Thread bensonkwok...@air-watch.com
I have a similar problem and have found a fix for it. Please see the thread below to see if your problem is the same: http://www.mail-archive.com/openssl-dev@openssl.org/msg33010.html Benson Kwok Development Www.air-watch.com On 9/25/13 6:35 PM, "Roger Miller" wrote: >Using OpenSSL librari

possible SSL_connect/accept bug?

2013-09-25 Thread Roger Miller
Using OpenSSL libraries to provide basic encryption between client and server. Using non-blocking sockets, and client can connect to multiple servers. I have an intermittent issue where server reports 'SSL3_GET_RECORD:wrong version number' during client hello. I have added trace statements to the

RE: How do session accept timeout with OpenSSL

2012-08-17 Thread Dave Thompson
ou can open the socket with socket() gethostbyname() bind() listen() connect() accept() as applicable, and then SSL_set_fd, which wraps it in a BIO. > Or do I have to re-write somehow with non-blocking sockets > and/or using > signals for my timeout rather than select()? Or ... ? > Yo

Re: How do session accept timeout with OpenSSL

2012-08-16 Thread Holger Weiß
minated all of my BIO usage. I'm using normal TCP/IP bind(), > select(), accept(), and then SSL_set_fd(ssl, socket) and SSL_accept(); I > then use SSL_read() to read data on the session. It seems to be working > (with some loose ends, but I am getting farther than before). > >

RE: How do session accept timeout with OpenSSL

2012-08-15 Thread Charles Mills
Okay, I think I get it. Every OpenSSL example I have seen uses BIO, but there is no need to use BIO, right (unless one wants I/O-type-independence)? I have eliminated all of my BIO usage. I'm using normal TCP/IP bind(), select(), accept(), and then SSL_set_fd(ssl, socket) and SSL_accept(); I

How do session accept timeout with OpenSSL

2012-08-14 Thread CharlesTSR
the socket is ready it starts a thread that issues an accept and goes into a receive loop. Otherwise it does some housekeeping like checking for a "quit" flag. In any event it loops back around to the select. Pretty typical I think. Most of that ports fairly straightforwardly to OpenSSL.

RE: Accept failing - SysCall error - advice?

2012-04-12 Thread Dave Thompson
your thread; if you need or want concurrency you must then manage it at the thread or process level, not a 'work-item' level. > > Interestingly, in a situation where two apps open a number of > SSL connections between each other (over time) I get a > deadlock - where a

Re: Accept failing - SysCall error - advice?

2012-04-11 Thread Nathan Smyth
etween each other (over time) I get a deadlock - where a client blocks on the SSL_Connect, and the server on the general (socketIO) accept. Any hints? > You are but invisibly; SSL_set_fd() creates a socket-BIO  > internally.  That's fine > You can actually use socket-BIO, and/or acc

RE: Accept failing - SysCall error - advice?

2012-04-10 Thread Dave Thompson
but instead using SSL_set_fd(). > This is because the application uses many sockets, but only > sometimes uses SSL. > You are but invisibly; SSL_set_fd() creates a socket-BIO internally. But when SSL_* then does I/O on that BIO the BIO does it on your socket, which is what you want. You

Re: Accept failing - SysCall error - advice?

2012-04-10 Thread Nathan Smyth
org" Cc: Sent: Tuesday, 10 April 2012, 14:24 Subject: Accept failing - SysCall error - advice? Hi there, I'm having trouble getting the SSL Connect/Accepts to work. For the client, SSL_Connect returns -1. Raising SSL Error = 2, SSL_ERROR_WANT_READ For the server, SSL_ACCEPT retur

Accept failing - SysCall error - advice?

2012-04-10 Thread Nathan Smyth
Hi there, I'm having trouble getting the SSL Connect/Accepts to work. For the client, SSL_Connect returns -1. Raising SSL Error = 2, SSL_ERROR_WANT_READ For the server, SSL_ACCEPT returns 0 (or -1 if non blocking), raising SSL Error 5 = SSL_ERROR_SYSCALL. ERR_ERROR_STRING() prints:0005:lib

Re: Starting SSL handshaking after connect/accept

2012-01-27 Thread Neale Ferguson
Thanks for the reply and apologies for the awkward description of the problem. I had moved the SSL initiation until after the exchange of the 1st clear text request/reply but was getting errors, which prompted the original post. Subsequently I discovered in the move I had swapped the SSL_CTX_new()

RE: Starting SSL handshaking after connect/accept

2012-01-26 Thread Dave Thompson
> the protection until it exchanges a couple of clear text > messages over the > same port it will use SSL. Is it possible to do this with > openSSL? That is, > use accept/connect and send/receive to establish > communications and then > begin the SSL handshaking etc.? Absolutely.

Starting SSL handshaking after connect/accept

2012-01-24 Thread Neale Ferguson
L? That is, use accept/connect and send/receive to establish communications and then begin the SSL handshaking etc.? I had created the application using openSSL that uses SSL_accept etc. that works well talking to a copy of the same code running elsewhere. However, I've since learned that

Unable to accept any connection with my secure server application.

2010-11-25 Thread Ofer
Hello, I am writting a client\server application(game) using openssl API for the network. I am ablie to connect with openssl s_client to openssl s_server. I am also able to connect with my own game client to openssl s_server(with the same parameters). However, I am unable to accept any

Re: Suspicious Cert - Nokia cell phone refuses to accept the Cert

2010-10-14 Thread Stefan Bauer
Am 14.10.2010 01:58, Mounir IDRASSI schrieb: > Hi Stefan, > > The value of the Basic Constraint extension of this website self-signed > certificate is "End Entity" and, more importantly, it is set to > Critical. So, technically speaking, this certificate can not be a CA and > it can't certify

Re: Suspicious Cert - Nokia cell phone refuses to accept the Cert

2010-10-13 Thread Mounir IDRASSI
gned cert and all of the nokia cell phones, i get my hands on refuse to accept this cert when trying to import it manually in the cert store. It is working without problems for example with a signed cert from cacert (where the root-CA-cert is also not in the default cert store) I'm asking f

Suspicious Cert - Nokia cell phone refuses to accept the Cert

2010-10-13 Thread Stefan Bauer
Dear Openssl-Users, i recently came across a problem with the offered ssl-cert on www.mastersnet.de It's a self signed cert and all of the nokia cell phones, i get my hands on refuse to accept this cert when trying to import it manually in the cert store. It is working without problem

Error in SSL accept

2010-07-30 Thread Raj
e listening port by configuring the proxy 7. Accept the connection using socket function and read data from it 8. Called SSL_accept function for handshaking with the browser, but it failed Can anybody tell me what went wrong ? Platforms of my application MS

RE: How can server accept connection from specific clients only

2009-10-20 Thread David Schwartz
Deepak Mundra wrote: > I have written a server client application in which im using self signed ssl > certificates .. How can i make sure that only known clients can connect to my > server using ssl connection? Simply define *precisely* what you mean by "known clients" and test for that. If a co

Re: How can server accept connection from specific clients only

2009-10-20 Thread Carter Browne
Have you looked at stunnel with verify options 2 or 3? Carter Carter Browne CBCS cbro...@cbcs-usa.com 781-721-2890 Deepak Mundra wrote: > Dear All, > > >I have written a server client application in which im using > self signed ssl certificates .. How can i make sure that only known >

Re: How can server accept connection from specific clients only

2009-10-20 Thread Victor B. Wagner
On 2009.10.20 at 16:50:59 +0530, Deepak Mundra wrote: >Dear All, > >══ I have written a server client application in which im using self >signed ssl certificates .. How can i make sure that only known clients can >connect to my server using ssl connection? There is three answ

How can server accept connection from specific clients only

2009-10-20 Thread Deepak Mundra
Dear All, I have written a server client application in which im using self signed ssl certificates .. How can i make sure that only known clients can connect to my server using ssl connection? im creating certificates as below Server Side: === Server Side -- (pas

RE: Accept a servers crt?

2009-09-16 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Dylan Martin > Sent: Tuesday, 15 September, 2009 13:42 > Hi all, I need to connect to an LDAP server with a self-signed cert. > I cannot get s_client to verify OK.. I have gathered the > server cert by running s_client and then copying the ser

Accept a servers crt?

2009-09-15 Thread Dylan Martin
Hi all, I need to connect to an LDAP server with a self-signed cert. I cannot get s_client to verify OK.. I have gathered the server cert by running s_client and then copying the server cert out of the output from s_client. Then I run s_client with the -CAfile option pointed to that file and it s

RE: Suggested data shown for SSL certificate when choosing to accept or reject

2009-08-14 Thread David Schwartz
Chase Douglas wrote: > I'm reading the actual X.509 (03/2000) specification and it refers to > a subjectPublicKeyInfo field. Is this what you are meaning by > "subjectKeyIdentifier"? These fields are not useful because they are not required to be hashes of the public key. You should use a hash o

RE: Suggested data shown for SSL certificate when choosing to accept or reject

2009-08-14 Thread David Schwartz
Kyle Hamilton wrote: > Dave S, I wish that you would read the entire message and maybe clear > your system of a bit of the current X.509 FUD kool-aid. This is > "person to his own server at home". This does not require any kind of > third-party reference (asking someone else to introduce your c

Re: Suggested data shown for SSL certificate when choosing to accept or reject

2009-08-14 Thread Chase Douglas
> This is an SSH-like scenario (meaning, the subject is already known to > the principal, who has made a choice to use the services provided by > that subject).  Instead of trying to display the contents of a > self-signed webserver certificate, the only thing that you can really > truly verify is

Re: Suggested data shown for SSL certificate when choosing to accept or reject

2009-08-14 Thread Kyle Hamilton
Dave S, I wish that you would read the entire message and maybe clear your system of a bit of the current X.509 FUD kool-aid. This is "person to his own server at home". This does not require any kind of third-party reference (asking someone else to introduce your computer to you? That's a waste

RE: Suggested data shown for SSL certificate when choosing to accept or reject

2009-08-14 Thread David Schwartz
Chase Douglas wrote: > I am developing an iPhone app that will incorporate SSL for encryption > of network communication. The encrypted connection will be between > average users and their home servers. Most of the time I envision > people having SSL certificates that cannot be validated with the

Suggested data shown for SSL certificate when choosing to accept or reject

2009-08-14 Thread Chase Douglas
I am developing an iPhone app that will incorporate SSL for encryption of network communication. The encrypted connection will be between average users and their home servers. Most of the time I envision people having SSL certificates that cannot be validated with the default iPhone root certificat

Re: Retrieving hostname after accept

2009-08-10 Thread Dr. Stephen Henson
same > time connections are created to others whenever they're needed). Whenever I > accept an incoming connection, I'd like to be able to retain the IP address > which has just connected (for future use and logging). > > I thought I'd be able to achieve this by usi

Retrieving hostname after accept

2009-08-10 Thread Laura Arhire
're needed). Whenever I accept an incoming connection, I'd like to be able to retain the IP address which has just connected (for future use and logging). I thought I'd be able to achieve this by using the following code (truncated to essentials, left out error handling): if (BIO_

Re: rsa -outform net doesn't accept -passout pass:?

2008-11-14 Thread Martin P. Hellwig
Dr. Stephen Henson wrote: On Fri, Nov 14, 2008, Martin P. Hellwig wrote: Hi all, I was playing around with the 0.9.8g version (actually I am wrapping the CLI to use with python) and I stumbled across the following: when I do: openssl rsa -outform NET -in test.pem -out test.net -passout pa

Re: rsa -outform net doesn't accept -passout pass:?

2008-11-14 Thread Dr. Stephen Henson
On Fri, Nov 14, 2008, Martin P. Hellwig wrote: > Hi all, > > I was playing around with the 0.9.8g version (actually I am wrapping the > CLI to use with python) and I stumbled across the following: > when I do: > openssl rsa -outform NET -in test.pem -out test.net -passout pass:test > It still ask

rsa -outform net doesn't accept -passout pass:?

2008-11-13 Thread Martin P. Hellwig
Hi all, I was playing around with the 0.9.8g version (actually I am wrapping the CLI to use with python) and I stumbled across the following: when I do: openssl rsa -outform NET -in test.pem -out test.net -passout pass:test It still asks me on the command line for an password while I expected i

Re: - client Apache/2.2.3 --> FAILED (tls_read: want=11, got=0 TLS: can't accept.)

2008-04-04 Thread fgb62
AuthLDAPBindPassword "[BLANK]" Require valid-user -- View this message in context: http://www.nabble.com/--client-Apache-2.2.3---%3E-FAILED-%28tls_read%3A-want%3D11%2C-got%3D0--TLS%3A-can%27t-accept.%29-tp16467510p16467518.html Sent from the OpenSSL -

- client Apache/2.2.3 --> FAILED (tls_read: want=11, got=0 TLS: can't accept.)

2008-04-04 Thread fgb62
TLS: can't accept.) In openldap-2.3.37/libraries/libldap/tls.c: err = SSL_accept( ssl ); if ( err <= 0 ) { ... Debug( LDAP_DEBUG_ANY,"TLS: can't accept.\n",0,0,0 ); ... a) how can we have more TLS-ldap trace? b) what can be the failure? any idea? MY CONFIG:

RE: why winxp openssl based server can only accept 16 client?

2007-09-06 Thread zhuxian
openssl.org >Cc: [EMAIL PROTECTED] >Subject: why winxp openssl based server can only accept 16 client? > >I write an openssl based multi-threads server program. But it >can only support 16 thread on the WinXP. Exceeding that, the >SSL_accept() will failed. I use the >Initialize

why winxp openssl based server can only accept 16 client?

2007-09-04 Thread zhuxian
I write an openssl based multi-threads server program. But it can only support 16 thread on the WinXP. Exceeding that, the SSL_accept() will failed. I use the InitializeCriticalSection/EnterCriticalSection/LeaveCriticalSection to do the thread lock. And i also compiled the program with /MD. I co

RE: SSL accept error

2007-04-22 Thread David Schwartz
> Well, client initially sends a http request to port 80 and my web > server redirects the client to use https using 302 http header if > SSL is enabled in my switch. As a result of that, client would resend > https request to port 443. However I do not understand why that should > cause this prob

Re: SSL accept error

2007-04-22 Thread Marek Marcola
Hello, > Well, client initially sends a http request to port 80 and my web > server redirects the client to use https using 302 http header if SSL > is enabled in my switch. As a result of that, client would resend > https request to port 443. However I do not understand why that should > cause thi

Re: SSL accept error

2007-04-22 Thread nagaraj
Well, client initially sends a http request to port 80 and my web server redirects the client to use https using 302 http header if SSL is enabled in my switch. As a result of that, client would resend https request to port 443. However I do not understand why that should cause this problem. There

RE: SSL accept error

2007-04-21 Thread David Schwartz
> I see this error in my web server log when I try to connect > using IE or Firefox. Does anybody know why this could be happening ? > 04/15/2007 03:36:22.22 SSL_accept failed - > error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol > 04/15/2007 03:35:52.08 SSL_accept failed -

SSL accept error

2007-04-20 Thread nagaraj
I see this error in my web server log when I try to connect using IE or Firefox. Does anybody know why this could be happening ? 04/15/2007 03:36:22.22 SSL_accept failed - error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 04/15/2007 03:35:52.08 SSL_accept failed - error:14076

RE: SSL accept/connect error

2005-11-24 Thread Mark
Hi, > Make a CA cert, and sign a server cert with it, and use this in the > verify locations call in the client. I tried this and instead I get the error: -Error with certificate at depth: 0 issuer = ... subject = ... err 20:unable to get local issuer certificate Best Regards, Mark W

Re: SSL accept/connect error

2005-11-24 Thread Peter Sylvester
Make a CA cert, and sign a server cert with it, and use this in the verify locations call in the client. Mark wrote: Hi, Thanks for the help from everyone with regards to certificates. I now have an error when attempting to run my application. On the server side when I call SSL_accept() I

SSL accept/connect error

2005-11-24 Thread Mark
Hi, Thanks for the help from everyone with regards to certificates. I now have an error when attempting to run my application. On the server side when I call SSL_accept() I get the error: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca and on the client side when I call SSL_

Re: Accept error

2005-11-15 Thread Alexis Lefort
No one can help me? :( Alexis Lefort wrote: I have forgotten one thing, the call to SSL_connect() returns "-1", and SSL_get_error() returns SSL_ERROR_SYSCALL. The error string is empty and errno is NULL. Alexis Lefort wrote: Hi list, When my client (0.9.8a) tries to con

Re: Accept error

2005-11-10 Thread Alexis Lefort
I have forgotten one thing, the call to SSL_connect() returns "-1", and SSL_get_error() returns SSL_ERROR_SYSCALL. The error string is empty and errno is NULL. Alexis Lefort wrote: Hi list, When my client (0.9.8a) tries to connect (SSL_connect) to an "openssl s_server"(0.9.7g) (openssl

Accept error

2005-11-10 Thread Alexis Lefort
Hi list, When my client (0.9.8a) tries to connect (SSL_connect) to an "openssl s_server"(0.9.7g) (openssl s_server -cert server_cert.pem -key server_priv_key.pem), the server crashes: gethostbyname failure 0 items in the session cache 0 client connects (SSL_connect()) 0 client renegotia

Re: Getting Cisco 3kvpn to accept openssl signed certs - anyone done it?

2005-06-01 Thread ray v
Cisco has sent several documents on how to make > this work, generally with all other products accept > for openssl. Still the instructions are quite clear > and should work with openssl just fine. > > FYI - Version 4.1.7.D > > --- David Gianndrea <[EMAIL PROTECTED]> > wro

Re: Getting Cisco 3kvpn to accept openssl signed certs - anyone done it?

2005-05-23 Thread ray v
ee if there is a difference. BTW Cisco has sent several documents on how to make this work, generally with all other products accept for openssl. Still the instructions are quite clear and should work with openssl just fine. FYI - Version 4.1.7.D --- David Gianndrea <[EMAIL PROTECTED]> wrote:

Re: Getting Cisco 3kvpn to accept openssl signed certs - anyone done it?

2005-05-18 Thread David Gianndrea
Have you installed the CA cert on the cisco? David Gianndrea Senior Network Engineer Comsquared Systems, Inc. Email: [EMAIL PROTECTED] Web: www.comsquared.com ray v wrote: Has anyone been able to get a certificate signed by openssl CA to accept the identity certificate? 1. Gen manual pkcs10

Getting Cisco 3kvpn to accept openssl signed certs - anyone done it?

2005-05-17 Thread ray v
Has anyone been able to get a certificate signed by openssl CA to accept the identity certificate? 1. Gen manual pkcs10 req on 3kvpn 2. Sign 3kvpn req and make cert 3. install cert through cut and paste or file transfer error message Error installing SSL certificate: Incomplete chain. I

Re: Cisco concentrator not accept certificate from openssl

2005-05-12 Thread ray v
eater than 2048 This includes the CA > > > > ray v <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 05/12/2005 01:16 AM > Please respond to > openssl-users@openssl.org > > > To > openssl-users@openssl.org > cc > > Subject > Cisco concent

Re: Cisco concentrator not accept certificate from openssl

2005-05-12 Thread Mark Schoneman
Subject Cisco concentrator not accept certificate from openssl Hi All, Hi Steve! Does anyone have documentation on how to get a concentrator to accept certificate signed by openssl? Cisco VPN 3030 4.x On the concentrator I have install both my Root CA certificate and the Sub CA I u

Cisco concentrator not accept certificate from openssl

2005-05-11 Thread ray v
Hi All, Hi Steve! Does anyone have documentation on how to get a concentrator to accept certificate signed by openssl? Cisco VPN 3030 4.x On the concentrator I have install both my Root CA certificate and the Sub CA I used to sign request for internal devices. Next I generate a manual request

Non-blocking accept call ...

2005-04-22 Thread David Brock
I'm a little confused as to how to manage a non-blocking accept call. Specifically I don't understand what the expected return from BIO_do_accept() should be when non-blocking is turned on. How can I tell that the BIO_do_accept() call returned because it is non-blocking vs. an ac

AIX OpenSSL 9.7d accept fail, peek_last_error says 0, info_callback ret is -1

2004-09-28 Thread d . mclellan
context. What might this mean?    [Server  : SSL State: before/accept initialization,  where=0010,ret=0001[Server  : SSL State: before/accept initialization,  where=2001,ret=0001 [Client  : SSL State: before/connect initialization, where=0010,ret=0001[Client  : SSL S

RE: Is server can only accept ssl clients to the limit of 64 on s ame port, can I enlarge the number, Urgent! Thanks!

2004-08-28 Thread Edward Chan
Is server can only accept ssl clients to the > limit of 64 on same port, can I enlarge the number, Urgent! Thanks! > > Hi Edward, Steve, > > Problem solved, thank you! :) > > Is there any magic numbers like this in socket or openssl > libraries, more thanks! >

Re: Is server can only accept ssl clients to the limit of 64 on same port, can I enlarge the number, Urgent! Thanks!

2004-08-28 Thread Eric Lai
:29 AM Subject: RE: Is server can only accept ssl clients to the limit of 64 on same port, can I enlarge the number, Urgent! Thanks! > I'm not sure why the SSL_accept() is blocking, but on Windows, 64 does seem > to be a magic number for things such as select(). FD_SETSIZE is defined to

RE: Is server can only accept ssl clients to the limit of 64 on s ame port, can I enlarge the number, Urgent! Thanks!

2004-08-26 Thread Edward Chan
sure if this is the problem. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dr. > Stephen Henson > Sent: Thursday, August 26, 2004 9:20 AM > To: [EMAIL PROTECTED] > Subject: Re: Is server can only accept ssl clients to

Re: Is server can only accept ssl clients to the limit of 64 on same port, can I enlarge the number, Urgent! Thanks!

2004-08-26 Thread Dr. Stephen Henson
On Thu, Aug 26, 2004, Eric Lai wrote: > Hi Steve, > > Thank for your reply! > > Let me explain my problem: If I tried to connect 100 SSL client to my > server, only 64 clients can connected, the other 36 clients remain in SSL > Accepting state (or SSL Accept got blocking).

How to generate private key format accept by microsoft signcode ?

2004-03-05 Thread Dongsheng Song
Hello, How to generate private key format accept by microsoft signcode tool ? Thanks for advance __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL

Re: bad asn1 object header with the accept

2002-05-16 Thread Lutz Jaenicke
On Thu, May 16, 2002 at 04:19:08PM +0200, Lugeon Blaise wrote: > Hi everybody, > > I implemented a client-server application with openssl version 0.9.6c > (engine) and everything works fine on Win32 platform. > > I try to do the same on tru64 and I get the following error d

bad asn1 object header with the accept

2002-05-16 Thread Lugeon Blaise
Hi everybody, I implemented a client-server application with openssl version 0.9.6c (engine) and everything works fine on Win32 platform. I try to do the same on tru64 and I get the following error during the accept: error:0005:lib(0):func(0):bad asn1 object header I use a client

Re: accept of SSLeay hangs up.

2002-05-01 Thread Atsushi Ikeda
Thank you for giving me advice. I will check "timing out slow operations" out. Thank you, Atsushi hierophant> You may want to review the section on "timing out slow operations" as well hierophant> as blocking/non-blocking I/O in the "Programming Perl" book. IIRC, this hierophant> behav

Re: accept of SSLeay hangs up.

2002-05-01 Thread Keary Suska
on 4/30/02 10:33 PM, [EMAIL PROTECTED] purportedly said: > Hi, > > if anybody know this problem, please give me some advice. > I made a simple web server with SSLeay in perl, but sometime it > hangs up. It hangs up in accept(). accept() calls read() system call > and the rea

accept of SSLeay hangs up.

2002-04-30 Thread Atsushi Ikeda
Hi, if anybody know this problem, please give me some advice. I made a simple web server with SSLeay in perl, but sometime it hangs up. It hangs up in accept(). accept() calls read() system call and the read() system call is always waiting for coming data when it hangs up. I read a manual

Accept

2002-03-18 Thread amit limaye
Accept is returning me a bad asn1 object header error can nebody explain me what are the possiblw causes of this error  i am using  sslv23server method and have initailized SSL _CTX SSL SSL method objects without any errors   -SIGTERM amit

RE: Multiple accept threads - failure

2001-11-26 Thread Andy Schneider
I think I have this sussed. Calls to methods that manipulate SSL_CTX aren't always thread safe and I was assuming they were (without checking - doh!). Andy S. > -Original Message- > From: Andy Schneider > Sent: 26 November 2001 13:19 > To: [EMAIL PROTECTED] > Subj

Multiple accept threads - failure

2001-11-26 Thread Andy Schneider
0. Does anyone have any ideas, "oh yeah, it's bug ' etc. Are there time outs in the accept code I should be worrying about? Andy S. __ OpenSSL Project http://www.openssl.o

  1   2   >