[openssl.org #636] Example in man page for BIO_new_bio_pair incorrect?

2003-06-06 Thread via RT
The example in this man page shows the creation of a bio pair and then setting them as the io bios for an ssl object. It states that the internal bio is implicitly deallocated when SSL-free is called on the ssl object. This does not appear to be the case. In an application developed using this

Re: [openssl.org #636] Example in man page for BIO_new_bio_pair incorrect?

2003-06-06 Thread Lutz Jaenicke via RT
On Thu, Jun 05, 2003 at 07:52:00PM +0200, via RT wrote: The example in this man page shows the creation of a bio pair and then setting them as the io bios for an ssl object. It states that the internal bio is implicitly deallocated when SSL-free is called on the ssl object. This does not

[openssl.org #637] bug or error in openssl

2003-06-06 Thread Ram Swaminathan via RT
Hi, My name is ram and I work as a programmer in usu and recently I came across this error in our apache server which users open ssl 0.9.7a. It was working fine since I installed open ssl but just stopped working suddenly since yesterday. It would be nice if anyone could help me on this.

Re: Blinding breaks engines?

2003-06-06 Thread Geoff Thorpe
Hi, On June 5, 2003 08:03 am, Joe Orton wrote: Hi, the changes to enable blinding by default in 0.9.7b appear to break when an ENGINE is in use (for all the ENGINEs I've tested), with an assertion failure: openssl: bn_lib.c:254: BN_num_bits: Assertion `l != 0' failed. and backtrace as

[openssl.org #638] Example in man page for BIO_new_bio_pair incorrect?

2003-06-06 Thread via RT
The example in this man page shows the creation of a bio pair and then setting them as the io bios for an ssl object. It states that the internal bio is implicitly deallocated when SSL-free is called on the ssl object. This does not appear to be the case. In an application developed using this

Re: [openssl.org #329] Shared libraries on cross platform

2003-06-06 Thread Tim Xu via RT
Hi andy, I found your old message (shown below) about cross compile from internet because I am also blocked by the same problem when I try to compile a UPnP static library for Arm linux using the uclibc wrapper around arm-linux-gcc. I am a newer in Linux, and just learning now. Could you let

[openssl.org #636] Example in man page for BIO_new_bio_pair incorrect?

2003-06-06 Thread via RT
Hmm. I wrote the manual page and I am somehow convinced that it is correct. Whenever SSL_free() is called, the underlying BIO is also free()ed. As a BIO pair consists of 2 BIOs, only one BIO is freed automatically, the other one has to be handled by the application. Are you sure that both

AES counter mode

2003-06-06 Thread Thierry Boivin
Hello, I am trying to play with AES crypto in counter mode. Using the crypto library against reference vectors found in IPSec RFC fails until the incrementation function (AES_ctr128_inc()) is modified in order to get a +1 step instead of a +2^64 step. Where does the actual increment by 2^64

SSL connection

2003-06-06 Thread Lukasz Wójcicki
Hello, How Can I get two independent SSL structures on the same one connection ? Lukasz Wójcicki __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL

RE: SSL connection

2003-06-06 Thread David Schwartz
Hello, How Can I get two independent SSL structures on the same one connection ? The glib answer would be any way you want to. The detailed answer is that there is no standard way to do this, so you can choose any method you wish and do it that way. One way, for example,

Re: SSL connection

2003-06-06 Thread Lukasz Wójcicki
Hello, How Can I get two independent SSL structures on the same one connection ? The glib answer would be any way you want to. The detailed answer is that there is no standard way to do this, so you can choose any method you wish and do it that way. One way, for example, would

RE: SSL connection

2003-06-06 Thread David Schwartz
Hello, How Can I get two independent SSL structures on the same one connection ? The glib answer would be any way you want to. The detailed answer is that there is no standard way to do this, so you can choose any method you wish and do it that way. One way, for

[openssl.org #640] bug: Makefile.ssl for do_srv3-shared and do_svr5-shared buggy

2003-06-06 Thread [EMAIL PROTECTED] via RT
Hi, I have found that the grep $$obj allobjs in Makefile.ssl returns more entries than excepted. I am using 0.9.6j. For example when processing mem.o the grep will return 2 entries: ./crypto/bio/bss_mem.o and ./crypto/mem.o. That way unexcepted objects may end in the dynamic library. The

Re: SSL connection

2003-06-06 Thread Rich Salz
But, I want to get independent SSL structure even if one SSL connection is still working, in optional moment. Example in sockets, will enough that I exchange descriptors. You need to put a multiplexing protocol on top of straight TCP. Check out BEEP. /r$ -- Rich Salz

Re: AES counter mode

2003-06-06 Thread Michael Sierchio
Thierry Boivin wrote: Hello, I am trying to play with AES crypto in counter mode. Using the crypto library against reference vectors found in IPSec RFC fails until the incrementation function (AES_ctr128_inc()) is modified in order to get a +1 step instead of a +2^64 step. Where does the actual

Re: Blinding breaks engines?

2003-06-06 Thread Joe Orton
Hi Geoff, On Thu, Jun 05, 2003 at 03:47:28PM -0400, Geoff Thorpe wrote: On June 5, 2003 08:03 am, Joe Orton wrote: Hi, the changes to enable blinding by default in 0.9.7b appear to break when an ENGINE is in use (for all the ENGINEs I've tested), with an assertion failure: openssl:

Re: Blinding breaks engines?

2003-06-06 Thread Geoff Thorpe
Hi, On June 6, 2003 10:34 am, Joe Orton wrote: Ah, firstly, my apologies, I was out of my tree, I can only get the ubsec engine to fail like this in 0.9.7b. The other engines I've tried with 0.9.7b work fine. Ah, ok - that seems less uncool then. I think Jonathan Hersch has just answered

a new command in openssl

2003-06-06 Thread mohamed zhaounia
Hi all, I have added a new command in openssl but the problem is that the prompt openssl does not see it. In fact, everything is going well:during the ./config command the directories that i added are configured and with the make command everything is compiled.Furthermore, progs.h includes the