Re: [openssl-users] Example on SSL_SESSION_set_ex_data?

2016-08-24 Thread Michael Wojcik
(Top-posting because Outlook still can't handle HTML email correctly.) Unless I'm missing something, you're using the OpenSSL functions correctly - though I admit I just looked at them here and didn't check the documentation or my own use of them. Perhaps you're not using C correctly. We can't

[openssl-users] [openssl-user] How to use memory debug functions (CRYPTO_mem_leaks) in OpenSSL 1.1.0 (pre6 release) ?

2016-08-24 Thread Wei, Changzheng
I used memory debug functions (such as CRYPTO_mem_leaks/CRYPTO_mem_leaks_fp) to check the memory leak. In the old version, such as openssl-1.0.2d, I can call CRYPTO_mem_leaks() functions any time in my application to dump the memory information. But in OpenSSL-1.1.0, it will fail due to the new

[openssl-users] CVE-2016-2108 and openssl 0.9.8zf

2016-08-24 Thread Zhang, Lily (USD)
Hi >From the openssl website, it mentioned that >CVE-2016-2108 >affected version of Openssl prior to April 2015. We used openssl 0.98zf in our old product which was released several years ago. Do you know if

Re: [openssl-users] [openssl-user] How to use memory debug functions (CRYPTO_mem_leaks) in OpenSSL 1.1.0 (pre6 release) ?

2016-08-24 Thread Salz, Rich
Look at what the apps or test programs do -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Example on SSL_SESSION_set_ex_data?

2016-08-24 Thread Salz, Rich
> BLAH b; > b.blah = 12345; > > SSL_SESSION *session = SSL_get_session(ssl); > SSL_SESSION_set_ex_data(session, my_data_idx, ); > SSL_set_session(ssl, sess); Is "b" a stack variable? You should malloc it. -- Senior Architect, Akamai Technologies IM: richs...@jabber.at Twitter: RichSalz --

[openssl-users] Example on SSL_SESSION_set_ex_data?

2016-08-24 Thread Eric To
Can someone give an example on how to use the SSL_SESSION_set_ex_data? I'm trying to set custom information in apache mod_ssl and after trying many different ways, but can't get it to stick... struct st_blah_t { int blah; } BLAH; my_data_idx = SSL_SESSION_get_ex_new_index(0, "BLAH", NULL,

[openssl-users] regarding openssl and openssl fips

2016-08-24 Thread Test ssl
Hi, I am having a product which is right now using openssl1.0.1s and opensslfips 2.0.1 I am upgrading to openssl1.0.2h, is it OK to still be at openssfips 2.0.1 or do i need to upgrade the opensslfips too to 2.0.12? Regards, -- openssl-users mailing list To unsubscribe:

Re: [openssl-users] regarding openssl and openssl fips

2016-08-24 Thread Steve Marquess
On 08/24/2016 09:31 AM, Test ssl wrote: > Hi, > > I am having a product which is right now using openssl1.0.1s and > opensslfips 2.0.1 > > I am upgrading to openssl1.0.2h, is it OK to still be at openssfips > 2.0.1 or do i need to upgrade the opensslfips too to 2.0.12? > > Regards, > > Yes,