Re: Strange SSL_shutdown() error return (SSL_ERROR_SYSCALL but errno == 0)

Antoine Pitrou wrote: These issues are tracked together at http://bugs.python.org/issue8108 , because they both appeared when someone tried OpenSSL 0.9.8m. I have read through the discussion first I'd like to confirm the scenario for the errno==0 situation through particular sequence of

SSL error: parse tlsext

Hi, I am using openssl from within neon, itself used from within Subversion. During an svnsync, I receive the following error message: svnsync: PROPFIND of '/svn/xxx': SSL negotiation failed: SSL error: parse tlsext (https://xxx.org) If I am right, this message comes from

locate key for p12 certificate

hi, i have been trying to create a certificate for use on my webscarab proxy. essentially what i want to do is this: run a php curl script which redirects certain https traffic though the webscarab proxy so that i can see the output from the curl script (php curl doesnt provide visibility into

Re: does bio_get_mem_data handle unicode?

On 4/7/2010 12:33 PM, Ryan Pfeifle wrote: While we are on the subject of Unicode, there are other areas of OpenSSL that need Unicode support added, in particular handling of paths and filenames on UTF16-based filesystems that require wchar_t* parameters. For instance, on Windows, OpenSSL

Re: locate key for p12 certificate

Hello Peter: On 08/04/10 3:45 AM, peter23452345 wrote: hi, i have been trying to create a certificate for use on my webscarab proxy. essentially what i want to do is this: run a php curl script which redirects certain https traffic though the webscarab proxy so that i can see the output

Re: locate key for p12 certificate

On Thu, 2010-04-08 at 08:10 -0400, Patrick Patterson wrote: So, the short answer is - until you can convince the administrators of the server that you are proxying for to hand over their private keys, what you want to do is not possible. Well, what he wants to do is just see the traffic in

Cipher suits

Greetings, I'm trying to develop a simple SSL module for a web server. I don't have much experience with cryptography and OpenSSL, so I am bit confused about various combinations of cipher suits when performing key exchange and authentication. 1. I assume RSA key exchange and authentication is

CA cert installed/imported but they are not trusted

Hallo and one more thing, recently I started to set up a master/slave OpenLDAP system with tls/certs. (Red Hat 5.x, openssl-0.9.8e-12, openldap-2.3.43-3 ) For that pourpose I set up a CA, generated certs, requests and keys, installed tham on the corresponding servers and my OS X client and my

Re: CA cert installed/imported but they are not trusted

On Apr 8, 2010, at 6:55 AM, Götz Reinicke - IT Koordinator wrote: So dose my local ldap client (Apache Directory Studio (ADS) on mac OS X 10.6.x ). Nearly, because the servers and the ADS client both alert me, that I use invalide certificates and the cerificate can't be validated. But I

problem with signing with DSA private keys using EVP_SignFina

Hi guys, I have a problem with signing with *DSA* private keys using *EVP_SignFina function.* ** There is some fragment of my code following: /* Do the signature */ EVP_MD_CTX_init(md_ctx); err = EVP_SignInit (md_ctx, EVP_sha1()); err = EVP_SignUpdate (md_ctx, data, strlen(data)); sig_len =

RE: does bio_get_mem_data handle unicode?

Ryan Pfeifle Sr. Programmer Voice Print International, Inc. Immediate Results. Unmatched Value. Tel: 1.805.389.5200 x5297 Fax: N/A Email: r...@vpi-corp.com Web: www.VPI-corp.com Experience the VPI Value Advantage at http://www.VPI-corp.com/Value The information transmitted in this message

openssl-0.9.8n and openssl-fips-1.2 ERR_peek_last_error failure

-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Setup: Built openssl-fips-1.2 per the Security Policy. Built openssl-0.9.8n with the fips option Notes: Successfully built FIPS-ified version of wget, curl/libcurl, libssh2 and mod_ssl. Successfully means the work as advertised within the

ssh_key_verify problem with 0.9.8n + FIPS

Hello, Some background -- I've had good luck in the past creating a functional FIPs-enabled OpenSSL and OpenSSH using these components: fipscanister build from openssl-fips-1.2.tar.gz openssl 0.9.8l openssh (5.2p1 or 5.3p1) ssh patch for FIPS:

ssh_key_verify problem with 0.9.8n + FIPS

Hello, Some background -- I've had good luck in the past creating a functional FIPs-enabled OpenSSL and OpenSSH using these components: fipscanister build from openssl-fips-1.2.tar.gz openssl 0.9.8l openssh (5.2p1 or 5.3p1) ssh patch for FIPS:

Re: openssl-0.9.8n and openssl-fips-1.2 ERR_peek_last_error failure

On Thu, Apr 08, 2010, Gatewood (Woody) Green wrote: -BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Setup: Built openssl-fips-1.2 per the Security Policy. Built openssl-0.9.8n with the fips option Notes: Successfully built FIPS-ified version of wget, curl/libcurl, libssh2 and