[openssl-users] SSL_read() = -1 and SSL_ERROR_SYSCALL, with mem BIO's

2017-05-19 Thread Ian Gilmour
Hi, I'm using a 3rd party library that maintains a TLS connection to a server using mem BIO's and in which, usually under load, SSL_read() occasionally returns -1, the SSL_get_error() returns SSL_ERROR_SYSCALL and ERR_get_error() returns 0 (errno is 0). Under these conditions the original

Re: [openssl-users] RSA_PKCS1_OAEP_PADDING

2017-05-19 Thread RudyAC
Hello Steve, you are right. I corrected the code (see below). Now it works! Thank you very much for your quick response. ... /* encrypt content */ cms = CMS_encrypt(NULL, in, cipher, nflags); if(!cms) { KWlog_appl ( EV_D_APPL_INFO , "CMS not allocated!" ); } for (i

[openssl-users] automating my CA

2017-05-19 Thread Jannis Ohms
Hi, I need some kind of API which accepts CSRs and signs them Alot of Online certificate providers have some kind of REST API. Is there such an API available as OSS or do i have to write one myself -- openssl-users mailing list To unsubscribe:

Re: [openssl-users] automating my CA

2017-05-19 Thread Salz, Rich via openssl-users
> Alot of Online certificate providers have some kind of REST API. > > Is there such an API available as OSS or do i have to write one myself You might want to look at the IETF ACME protocol. There are many clients around. And the LetsEncrypt code is open source. -- openssl-users mailing

Re: [openssl-users] automating my CA

2017-05-19 Thread Jakob Bohm
On 19/05/2017 15:45, Salz, Rich via openssl-users wrote: Alot of Online certificate providers have some kind of REST API. Is there such an API available as OSS or do i have to write one myself You might want to look at the IETF ACME protocol. There are many clients around. And the