use of SSL_CTX_load_verify_locations() in s_client

2010-02-23 Thread Ludwig Nussel
() succeeds which doesn't make much sense. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) __ OpenSSL Project

Re: use of SSL_CTX_load_verify_locations() in s_client

2010-02-26 Thread Ludwig Nussel
Ludwig Nussel wrote: if ((!SSL_CTX_load_verify_locations(ctx,CAfile,CApath)) || (!SSL_CTX_set_default_verify_paths(ctx))) { /* BIO_printf(bio_err,error setting default verify locations\n); */ ERR_print_errors(bio_err); /* goto end

Re: We want to add a switch to openssl's zlib compression methord

2011-06-09 Thread Ludwig Nussel
via config file though, right? So every application would need to be patched. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg

Re: We want to add a switch to openssl's zlib compression methord

2011-06-10 Thread Ludwig Nussel
Thor Lancelot Simon wrote: On Thu, Jun 09, 2011 at 05:08:30PM +0200, Ludwig Nussel wrote: Thor Lancelot Simon wrote: Again, I think this should be configured via an option on the SSL_CTX. There is no way to set the default context options via config file though, right? So every

Re: openssl 1.0.1 and rumors about TLS 1.0 attacks

2011-09-21 Thread Ludwig Nussel
implementations' out there that choke if SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS is not set? cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg

Re: OpenSSL 1.0.1 released

2012-03-15 Thread Ludwig Nussel
on systems that support it? cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) __ OpenSSL Project

[openssl.org #2203] [PATCH] fix fallback to default verify paths

2010-03-25 Thread Ludwig Nussel via RT
--- apps/s_client.c | 17 - 1 files changed, 12 insertions(+), 5 deletions(-) diff --git a/apps/s_client.c b/apps/s_client.c index 484d009..3f57a5d 100644 --- a/apps/s_client.c +++ b/apps/s_client.c @@ -904,12 +904,19 @@ bad: if (!set_cert_key_stuff(ctx,cert,key))