SSL per session memory usage

2005-05-03 Thread Prashant Kumar
Hello All, I was doing some scaling testing to find out how much memory does OpenSsl use per TLS session. I see that OpenSsl pre-allocates around 34821 bytes for "rbuf" and 18698 bytes for "wbuf" in "ssl3_setup_buffers" to match with the packet size defined in the RFC. Did anyone try modifying

Re: RC4 optimize for em64t

2005-05-03 Thread Andy Polyakov
For *now* I'm committing only this change to CVS and will have closer look at unrolled loop later on... To denote its versatility our RC4 assembler module was renamed from rc4-amd64.pl to rc4-x86_64.pl. New RC4_CHAR code-path performs almost two times (+95%) better on EM64T than prior-April

[openssl.org #1051] SSL_CTX_set_default_paths

2005-05-03 Thread [EMAIL PROTECTED] via RT
There doesn't seem to be any documentation in the .pod files of the SSL_CTX_set_default_paths function or of the environment variables SSL_CERT_FILE and SSL_CERT_DIR which can change the value it returns. This came up recently in discussion on the wget list. The wget file retriever does not use

Re: Is Request Tracker broken?

2005-05-03 Thread Lutz Jaenicke
On Sat, Apr 30, 2005 at 11:58:34AM -0700, Doug Kaufman wrote: I sent a message to the request tracker on 24 April. Normally I expect a request number to be assigned and a copy of the email (with attachments stripped) to be forwarded to openssl-dev. None of that has happened yet. Nothing

[openssl.org #1052] openssl ca: generate subjectAltName from config

2005-05-03 Thread [EMAIL PROTECTED] via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]

[openssl.org #1053] Configure: GCC x86: option -m486 deprecated

2005-05-03 Thread [EMAIL PROTECTED] via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]

[openssl.org #1054] [Fwd: Bug#290271: openssl: typo in manpage CA.pl.1]

2005-05-03 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]

[openssl.org #1055] [Fwd: Bug#272281: include musclecard engine support in openssl]

2005-05-03 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]

[openssl.org #1056] make test fails on YellowDog Linux version 0.9.7g

2005-05-03 Thread Chris Younger via RT
Hello, 'make test' fails on YellowDog Linux 4.0 (running on a Mac Mini) when compiling openssl-0.9.7g. When I do as the INSTALL file suggests and remove the optimization flag from the CFLAG line it all builds and tests correctly. I have attached a gzip'ed version of the output from 'make

[openssl.org #1057] openssl-0.9.7g tests

2005-05-03 Thread John D. Coleman via RT
Problems : 1 - Test results too verbose. 2 - No pass/fail indicator at the end of testing. Partial output from 'make test' : test sslv2 SSLv2, cipher SSLv2 DES-CBC3-MD5, 512 bit RSA test sslv2 with server authentication server authentication Initial proxy rights = BC depth=3 /C=AU/O=Dodgy

[openssl.org #1054] [Fwd: Bug#290271: openssl: typo in manpage CA.pl.1]

2005-05-03 Thread Nils Larsch via RT
fixed Thanks, Nils __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL

Re: generating primes

2005-05-03 Thread Ben Laurie
Philip MacKenzie wrote: Hi, This is my first time posting to this list - please let me know if this is not the right forum for this comment/question. I noticed that BN_generate_prime() does not actually generate random primes. For instance, it will never generate a prime p of the form p=2*3*r +

RE: SSL per session memory usage

2005-05-03 Thread JSec
Hi Prashant, I don't know if you've taken a look at MatrixSSL - it's designed for security on embedded devices, but it can work well for small per-session memory usage scenarios as well. The internal memory usage is approximately 4KB per connection and 12KB during SSL/TLS handshake and

Re: Is Request Tracker broken?

2005-05-03 Thread Doug Kaufman
On Tue, 3 May 2005, Lutz Jaenicke wrote: New submissions are moderated. I have been on vacation and I did mess up to correctly hand over to another team member. Thanks for all your work on this. I had assumed that it was all automated. Doug -- Doug Kaufman

RE: SSL per session memory usage

2005-05-03 Thread Prashant Kumar
Hello Steve, Thank you for your help. I will look at section 3.2 of the RFC. As a workaround for this memory usage limitatioin, I free the "s3-rbuf" and "s3-wbuf" once the handshake is done. I allocate "s3-rbuf" and "s3-wbuf" during SSL_read, SSL_write, SSL_shutdown and so on. Once these calls