X509_NAME_cmp problem

2008-05-27 Thread Balazs Scheidler
Dear OpenSSL developers, There are two bugs (1311 1422) about X509_NAME_cmp in the RT database, both discussing that X509_NAME_cmp is not a valid metric anymore: a b a c does not mean that a c While this problem might seem minor (the two bugs were reported back in 2006 and are not even

Re: x509_name_cmp for different encodings

2008-08-14 Thread Balazs Scheidler
On Wed, 2008-08-13 at 17:03 -0700, Mohan, Dharmendra wrote: Hi, I had a list of CA certificates, a few with different encoding than PRINTABLE encoding like T61 and UTF8. I am running into the problem of not able to verify some of the certificates issued by CA certificates in cert

getpid() not unique for threads on Linux 2.6 + NPTL

2006-03-31 Thread Balazs Scheidler
Hi, I've been debugging my multithreaded application using OpenSSL for three consequtive days, which crashed after processing about 5-200 SSL transactions. The reason turned out to be the default CRYPTO_thread_id() implementation which uses getpid() as a thread identifier. This used to work on

Re: Cavium TurboSSL type of optimizations

2007-01-07 Thread Balazs Scheidler
On Thu, 2007-01-04 at 15:58 -0800, Elwin Stelzer Eliazer wrote: Hi, I am experimenting with a CAVIUM SSL hardware accelerator, and there seems to be two ways to use the hardware. One option is through OpenSSL Engine interface. The other option is by using their proprietary TurboSSL library,