bug in ssl3_peek?

2000-10-07 Thread Dan Kegel
I rely on SSL_peek() to look at the first three bytes of the decrypted data stream. Unfortunately, if the BIO_read it triggers doesn't return a full load, it seems to lose its mind, and returns bytes from the undecrypted datastream. I can demonstrate things working properly in a test program

Shared library problems with cyrus-sasl-1.5.24

2000-10-07 Thread Gary Mills
I built cyrus-sasl-1.5.24 under Solaris 2.6 with this configure script: #!/bin/sh env CPPFLAGS="-I/usr/local/src/db/db-3.1.17/build_unix" \ LDFLAGS="-L/usr/local/src/db/db-3.1.17/build_unix" CC=cc \ ./configure --localstatedir=/var/run --with-dblib=berkeley \

Re: [BUG?] BIO_sock_should_retry() on Win32

2000-10-07 Thread Dr S N Henson
"Reddie, Steven" wrote: [Firstly, I'm working with 0.9.5a, but the relevant 0.9.6 source seems to be unchanged.] This may be a bigger problem than just my specific case, but here is what I've found: We are using BIO_do_handshake() to accept socket connections, which results in a call

SSL_CTX_set_verify_depth

2000-10-07 Thread Lutz Jaenicke
Hi! I have more or less finished writing a manual page for SSL_CTX_set_verify(), but I have not been able to completely understand the usage of SSL_CTX_set_verify_depth(). If I understand it correctly, the verify_depth only influence the depth up to which OpenSSL tries to collect CA certificates

Re: [BUG?] BIO_sock_should_retry() on Win32

2000-10-07 Thread Dan Kegel
Dr S N Henson wrote: "Reddie, Steven" wrote: We are using BIO_do_handshake() to accept socket connections, which results in a call to BIO_accept(). Calling BIO_accept() on a non-blocking socket with no connections pending results in a fatal error on Win32, but not on other platforms.

Re: Shared library problems with cyrus-sasl-1.5.24

2000-10-07 Thread Lawrence Greenfield
Both Solaris and Linux are capable of linking a static library into a shared one, as you did here: $ /usr/ccs/bin/ld -G -h libdigestmd5.so.0 -o .libs/libdigestmd5.so.0.0.17 digestmd5.lo -L/usr/local/lib -L/usr/local/src/db/db-3.1.17/build_unix -L/usr/local/src/OpenSSL/openssl-0.9.5a/lib

simple OpenSSL program

2000-10-07 Thread joe smith
Ok, this may be a stupid question but... I want to make a simple program that will generate a RSA key. Here is what my code looks like: cut- #include openssl/ssl.h #include openssl/err.h #include openssl/rsa.h void main() { RSA *rsa = NULL; rsa =

Re: simple OpenSSL program

2000-10-07 Thread Daniel Richards
On Sun, 08 Oct 2000, you wrote: gcc gives the following error: "In function 'main': undefined reference to 'RSA_generate_key'" VC++ also gives: "unresolved external symbol _RSA_generate_key" hmm, are you linking against -lcrypto and -lssl when you compile? --

Re: simple OpenSSL program

2000-10-07 Thread joe smith
Hmm, it seems that my linux crypto was not in the path, it works now, thanks. How about Windows? I still can't get that to work. Thanks. From: Daniel Richards [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: simple OpenSSL program Date: Sun, 8 Oct 2000

Re: simple OpenSSL program

2000-10-07 Thread joe smith
oops. nevermind. thanks for the info. From: "joe smith" [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: simple OpenSSL program Date: Sat, 07 Oct 2000 23:16:13 GMT Hmm, it seems that my linux crypto was not in the path, it works now, thanks. How about Windows?

ABI issue with openssl/64bit friendliness

2000-10-07 Thread itojun
the attached patch will repair the following issue for openssl 0.9.5a (sorry that this is not for openssl 0.9.6). this is based on the patch I made for NetBSD 1.5 integration. itojun - openssl puts too many #ifdef in header files. we must not put #ifdef in header