Is it possible that calling ssl_accept in multi-threading circumstance will result in app to crash?

2014-03-26 Thread 2234822 jeff
Dear users, I keep getting some application crash in openssl module, I checked the dumps and stacks and found that although the stacks vary, the ssl_accept function is found on all of them, below are some of exmaples. I google the related information about this, looks like there is some problem

Re: Is it possible that calling ssl_accept in multi-threading circumstance will result in app to crash?

2014-03-26 Thread Bodo Moeller
jeff jeff.2234...@gmail.com: I keep getting some application crash in openssl module, I checked the dumps and stacks and found that although the stacks vary, the ssl_accept function is found on all of them, below are some of exmaples. I google the related information about this, looks like

Re: [openssl-users] Re: OpenSSL PKI Tutorial updated

2014-03-26 Thread Erwann Abalea
Le 25/03/2014 23:08, Zack Williams a écrit : On Tue, Mar 25, 2014 at 10:54 AM, Erwann Abalea erwann.aba...@keynectis.com wrote: 2. I couldn't figure out what the [additional_oids] section of the Expert example's root-ca.conf file is for - either through research or going through the commit

Schnorr Signature? Zero knowledge proof missing?

2014-03-26 Thread Paddy
Hi, I've been looking at the OpenSSL API and cannot seem to find an implementation for the Schnorr Signature. Does it exist? And if it doesn't how do people normally handle it when they need it? And are there any alternative zero knowledge proof algorithms available. Sorry for the hassle, but

Re: Anyone implementing RFC 7030: Enrollment over Secure Transport (EST)?

2014-03-26 Thread John Foley
We plan to publish an open source EST stack in the near future. This will support both client-side and server-side capabilities. The code will be hosted here: https://github.com/cisco/libest I've also recently setup an EST test server, which is available here:

Are certificates exchanged in for eNULL ciphers?

2014-03-26 Thread Deepti Jindal
Hi, In continuation with post: http://openssl.6102.n7.nabble.com/SSL-Verify-Question-tp17908.html which says that with Anonymous ciphers, certificates won't be exchanged and hence won't be verified. However, I do want to ensure sure that no matter what, I am never sending requests to the server

Re: Are certificates exchanged in for eNULL ciphers?

2014-03-26 Thread Dr. Stephen Henson
On Wed, Mar 26, 2014, Deepti Jindal wrote: Hi, In continuation with post: http://openssl.6102.n7.nabble.com/SSL-Verify-Question-tp17908.html which says that with Anonymous ciphers, certificates won't be exchanged and hence won't be verified. However, I do want to ensure sure that no

Re: Are certificates exchanged in for eNULL ciphers?

2014-03-26 Thread Viktor Dukhovni
On Wed, Mar 26, 2014 at 07:33:15AM -0700, Deepti Jindal wrote: In continuation with post: http://openssl.6102.n7.nabble.com/SSL-Verify-Question-tp17908.html which says that with Anonymous ciphers, certificates won't be exchanged and hence won't be verified. Don't confuse eNULL (no

FIPS 140-2 questions

2014-03-26 Thread Jason Schultz
I’m trying to decipher FIPS 140-2 Certification in regards to OpenSSL FIPS module 2.0 and have some questions: 1. Can one claim FIPS validated if running on an Operating Environment not listed on Cert #1747? (I don’t think not having an OE direct match is necessarily required, as long as

Re: FIPS 140-2 questions

2014-03-26 Thread Steve Marquess
On 03/26/2014 02:45 PM, Jason Schultz wrote: I’m trying to decipher FIPS 140-2 Certification in regards to OpenSSL FIPS module 2.0 and have some questions: 1. Can one claim FIPS validated if running on an Operating Environment not listed on Cert #1747? (I don’t think not having an

Re: Anyone implementing RFC 7030: Enrollment over Secure Transport (EST)?

2014-03-26 Thread Mike Luken (mluken)
If you need access to this SW before we get it published (no ETA yet on when it will be published), contact me and we can talk about getting it to you via a no-cost license arrangement. On 3/26/14 10:10 AM, John Foley (foleyj) fol...@cisco.com wrote: We plan to publish an open source EST stack

ECDHE-ECDSA Support

2014-03-26 Thread Thomas Montroy
hi All, I've been trying to make ECDHE-ECDSA connections with openssl and have been having trouble. openssl s_client -connect mail.google.com:443 -tls1_2 This connects with cipher = ECDHE-RSA-AES128-GCM-SHA256 According to Google-Chrome, the cipher for my web-based gmail connection should be:

Re: ECDHE-ECDSA Support

2014-03-26 Thread Jeffrey Walton
I'm running ubuntu (12.04, I think) on a VM on a Macbook Air using VMware. I tried the default ubuntu SSL, 1.0.1f, 1.0.1c and 1.0.2beta1, no luck in any case. ... Any ideas why I can't do that with openssl? Ubuntu disables TLS 1.1 and 1.2 in their version of OpenSSL. See, for example,

Re: FIPS iOS 7+ / Xcode 5+

2014-03-26 Thread Tom Leavy
After reading the user guide and finding some more information I was able to get a full build but now my problem seems to be that the signatures don't match. I am using the fips-pi app to verify. Here are the steps I have taken to make things work under iOS 7 SDK. 1. I updated the