FIPS support in OpenSSL

2011-02-25 Thread Yogesh Chopra
Hi, Does the latest OpenSSL 1.0.0d distribution have support for FIPS? The User guide for FIPS back from 2009 (last version) states Openssl 1.0.0 is not supported for use with OpenSSL FIPS object module Quoted below: The FIPS Object Module provides an API for invocation of FIPS approved

Question on DTLS server calling dtls_handle_timeout during protocol handshake.

2011-06-22 Thread Yogesh Chopra
Hi, We are using DTLS API to implement a DTLS Client/Server. We notice when the client application uses dtls_handle_timeout to re-transmit handshake messages. The DTLS server library seems to be invoking dtls_handle_timeout for every CLIENT HELLO message. In order to conduct some network

Re: Question on DTLS server calling dtls_handle_timeout during protocol handshake.

2011-06-30 Thread Yogesh Chopra
ClientHello again with the cookie data from the HelloVerifyRequest attached, before the server sends its ServerHello, for which a timer is started. Best regards Robin On Jun 23, 2011, at 3:50 AM, Yogesh Chopra wrote: Hi, We are using DTLS API to implement a DTLS Client/Server. We notice when

Re: Question on DTLS server calling dtls_handle_timeout during protocol handshake.

2011-07-01 Thread Yogesh Chopra
, 2011, at 10:58 PM, Yogesh Chopra wrote: Hi,   Please look at the debug messages attached to the original message, These were printf's added in the DTLS code and these were messages captured on the server. We are seeing the server start a timer when it sends back a HelloVerifyRequest.  Based

Re: Question on DTLS server calling dtls_handle_timeout during protocol handshake.

2011-07-05 Thread Yogesh Chopra
-p -v -l 1400 -n 10 Thanks, -Yogi On Sat, Jul 2, 2011 at 2:05 AM, Robin Seggelmann seggelm...@fh-muenster.de wrote: Hi Yogesh, On 01.07.2011, at 00:59, Yogesh Chopra wrote: The setup is same as before (where traffic from server is blocked to client). The Server responds only once

Re: [openssl.org #2555] [PATCH] DTLS sequence number bug

2011-07-07 Thread Yogesh Chopra
and ServerHello messages now to remain stateless, as described in http://tools.ietf.org/html/draft-ietf-tls-rfc4347-bis-06. Thanks to Yogesh Chopra for providing hints! Best regards Robin --- ssl/d1_srvr.c       25 May 2011 14:29:55 -      1.20.2.18 +++ ssl/d1_srvr.c       6 Jul 2011 10

Re: DTLS SSL_get_error returns SSL_ERROR_SYSCALL on Windows for Non Blocking IO

2011-07-12 Thread Yogesh Chopra
Hi Robin, I confirm the patch on your web-site http://sctp.fh-muenster.de/dtls-patches.html#dtlsbugfixes (Socketerror#???) helps resolve this DTLS connect issue on windows. Thanks for the quick turnaround. -Yogi On Fri, Jul 8, 2011 at 5:16 PM, Nilesh Vaghela

Re: [openssl.org #2555] [PATCH] DTLS sequence number bug

2011-07-13 Thread Yogesh Chopra
included. Makes things a lot easier. Best regards Robin On Jul 6, 2011, at 11:29 PM, Yogesh Chopra wrote: Hi,   I am using openssl-1.0.0d and have been applying patches provided earlier and was able to apply this patch cleanly but it fails compilation. The listen comes up as a undeclared

DTLSv1_listen unable to accept second client on windows (This works on Linux)

2011-07-15 Thread Yogesh Chopra
Hi, I am using OpenSSL-1.0.0d (release) + all cumulative bug fixes + DTLS Heartbeat feature patch on Windows. A DTLS server (non-blocking) using DTLSv1_Listen having a UDP socket with SO_REUSEADDR is unable to accept a second client connection when it is already accepted a client connection

Re: DTLSv1_listen unable to accept second client on windows (This works on Linux)

2011-07-18 Thread Yogesh Chopra
to receive everything else. Best regards Robin On Jul 16, 2011, at 1:53 AM, Yogesh Chopra wrote: Hi,    I am using OpenSSL-1.0.0d (release) + all cumulative bug fixes + DTLS Heartbeat feature patch on Windows. A DTLS server (non-blocking) using DTLSv1_Listen having a UDP socket

Re: DTLSv1_listen unable to accept second client on windows (This works on Linux)

2011-07-19 Thread Yogesh Chopra
Hi, Please find attached Samples.tgz file which contains sample code and binaries that you can use to reproduce the problem reported. Here is a brief summary of the included files: Samples/ ├── Linux │ │ ├── dtls_udp_echo.c │ └── Make.sample └── Windows └── dtls.zip You can run the

Re: DTLSv1_listen unable to accept second client on windows (This works on Linux)

2011-07-20 Thread Yogesh Chopra
@openssl.org Cc: Robin Seggelmann seggelm...@fh-muenster.de Sent: Monday, July 18, 2011 9:42:03 AM GMT -08:00 US/Canada Pacific Subject: Re: DTLSv1_listen unable to accept second client on windows (This works on Linux) On Jul 18, 2011, at 5:18 PM, Yogesh Chopra wrote: Hi,   I am using

DTLS server on windows issues a sslv3 alert bad record mac for a client re-negotiating a connection

2011-07-22 Thread Yogesh Chopra
Hi, While testing DTLS on windows ran into the following problem with scenario described as below: There are 2 problems: *1. Server issuing a SSLv3 ALERT BAD RECORD MAC* *2. Server unable to detect an error when this happens as SSL_accept returns SSL_WANTS_READ/SSL_WANTS_WRITE where as Client

DTLS API for Retry attempts and retry interval

2011-07-27 Thread Yogesh Chopra
Hi, We could not find a DTLS API to query the number of retries used for DTLS, The interval between the retries (12 retry attempts) seems to be 1,2,4,8,16,32,60,60,60,60,60,60. Is there any plans to provide an API for application to query/change these parameters. Thanks, -Yogi