I am a newbie in OpenSSL and my job is to build a secured server embedded on an ARM processor. The OS I am using is RTEMS and OpenSSL is 0.9.7c.
I have two questions.
Because of the very limited storage capacity of the flash memory, I'd like to reduce the size of libraries. In order to do that, I tried:
./Configure arm-rtems --prefix=/opt/openssl-0.9.7c --openssldir=/opt/openssl-0.9.7c/openssl no-asm no-dso no-krb5 no-hw no-idea no-rc4 no-rc2 no-bf no-cast no-cast5 no-ede no-cbc no-cfb no-ofb no-ede3 no-ecb no-base64 no-md2 no-md4 no-rmd160 no-engine no-zlib
make depend
make
(I only need RSA, DES, 3DES, AES, SHA and MD5)
I also had to add a line to the Configure file:
"arm-rtems", "arm-rtems-gcc:-DL_ENDIAN -idirafter/opt/rtems-4.6.0pre5/arm-rtems/lib/include -idirafter/usr/lib/bcc/include -O5::(unknown):::BN_LLONG:::",
libcrypto.a was only 300ko less big than if I did not use any of those options (exept no-asm).
Is there a way to more reduce the size of libraries?
The second question I have (and the more important for me) is:
I took the examples of Eric Rescola on his web site and it works fine on my computer. It even seemed to work fine on my target but when the server (wserver2 on the target) requires a certificate from the client (wclient2 on the computer), I just have this message from the server:
1:error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned:s3_srvr.c:1993:
Of course I first uploaded to the server the certificates it needs (those given with the examples).
I also used ssldump0.9b3 and saw that the client certificate seems to be well sent.
I don't know what to do, any help would be welcome.
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
