Re: [openssl-users] openssl-users Digest, Vol 28, Issue 33

2017-03-25 Thread ghanashyam satpathy
It seems any TLS being allocated from the call stack of ERR_get_state() is not getting freed. I used an OPENSSL sample demos\bio\server-cmod.c and it reproduces the issue. Any tips to resolve this issue is appreciated. > testConsoleApplication.exe!CRYPTO_THREAD_init_local(unsigned long * key,

Re: [openssl-users] openssl-users Digest, Vol 28, Issue 33

2017-03-25 Thread ghanashyam satpathy
However this type of TLS leak was not there when my application was using OpenSSL 1.0.2 Noticed after using OpenSSL 1.1.0b On Sat, Mar 25, 2017 at 8:12 PM, wrote: > Send openssl-users mailing list submissions to > openssl-users@openssl.org > > To

Re: [openssl-users] TLS leak for openssl 1.1.0b with libcurl 7.50.3

2017-03-25 Thread Salz, Rich via openssl-users
Those are curl functions, not openssl -- Senior Architect, Akamai Technologies Member, OpenSSL Dev Team IM: richs...@jabber.at Twitter: RichSalz From: ghanashyam satpathy [mailto:ghanashyam.satpa...@gmail.com] Sent: Saturday, March 25, 2017 10:05 AM To: openssl-users@openssl.org Subject:

[openssl-users] TLS leak for openssl 1.1.0b with libcurl 7.50.3

2017-03-25 Thread ghanashyam satpathy
I use libcurl 7.50.3 as statically linked in my application dll , along with openssl 1.1.0b also statically linked. The dll is dynamically loaded using LoadLibrary() and unloaded using FreeLibrary() inside application exe. I observed a TLS index is not getting freed which was allocated inside

Re: [openssl-users] TLSv1_2_method

2017-03-25 Thread Viktor Dukhovni
> On Mar 24, 2017, at 5:51 PM, Lei Kong wrote: > > TLS_latest_method https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_new.html ... TLS_method(), TLS_server_method(), TLS_client_method() These are the general-purpose version-flexible SSL/TLS methods. The actual