SSL Record layer size

2012-09-21 Thread Sharanagoud B D
Hi All, Can anyone tell me how to increase the SSL record layer length size? Thanks, Sharan __ OpenSSL Project http://www.openssl.org User Support Mailing List

OpenSSL TimeStamping

2012-09-21 Thread Jon_K
I've been tasked with setting up an internal timestamping service as part of a major new document management process. This is a steep learning curve for me and I've been setting up various openssl environments for testing of stamping and certificates. I've ended up with the following process

openssl1.0.1b SSLv2 connection between s_server and s_client

2012-09-21 Thread YUN GAO
Hi there: I got a problem for upgrading openssl from 0.9.8l to 1.0.1b. Now I can repro the problem using s_server and s_client: openssl s_server -ssl2 -cert ssl_server.pem -WWW -CAfile cafile.pem openssl s_client -connect localhost:4433 -no_ssl3 -no_tls1 -debug With 0.9.8l openssl, the above

Re: openssl1.0.1b SSLv2 connection between s_server and s_client

2012-09-21 Thread Dr. Stephen Henson
On Fri, Sep 21, 2012, YUN GAO wrote: Hi there: I got a problem for upgrading openssl from 0.9.8l to 1.0.1b. Now I can repro the problem using s_server and s_client: openssl s_server -ssl2 -cert ssl_server.pem -WWW -CAfile cafile.pem openssl s_client -connect localhost:4433 -no_ssl3

Re: Crash in DTLS (version 1.0.1c)

2012-09-21 Thread Michael Tuexen
On Sep 17, 2012, at 3:25 PM, Fredrik Jansson wrote: Hi! I have found a crash in the DTLS code (OpenSSL 1.0.1c), unfortunately I don't have a way of reproducing it. This has happened to one client (of many) in a production environment, so it's not a common problem. The code that

Intermediate certificate verification

2012-09-21 Thread Nou Dadoun
Just wanted to confirm an assumption, I've got 3 x509 certificates: Root -- intermediate -- leaf I load the intermediate certificate (but not the Root certificate) into the x509_store and set up the verify_ctx to verify the leaf certificate. I then use the X509_verify_cert(verify_ctx)

Re: FIPS mode fails with fingerprint not matching error

2012-09-21 Thread Cassie Helms
How do I make the FIPS module point to the FIPS capable version that has been built? Look for the --with-fipslibdir option referenced in UserGuide 2.0. There is also a --with-fipsdir that I don't believe is talked about in the document. You might want to run ldd on your app executable to

RE: SSL Record layer size

2012-09-21 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Sharanagoud B D Sent: Friday, 21 September, 2012 02:03 Hi All, Can anyone tell me how to increase the SSL record layer length size? I assume you mean the maximum size (or limit) of 2^14 bytes. You set the length of a particular record you

RE: Intermediate certificate verification

2012-09-21 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Nou Dadoun Sent: Friday, 21 September, 2012 15:29 Just wanted to confirm an assumption, I've got 3 x509 certificates: Root -- intermediate -- leaf I load the intermediate certificate (but not the Root certificate) into the x509_store