Re: 0.9.8k v. VMS

2009-03-30 Thread Steven M. Schweda
> [...] >Complete source kit: > http://antinode.info/ftp/openssl/0_9_8k/openssl-0_9_8k_s1.zip > >gdiff -ru openssl-0.9.8k openssl-0_9_8k : > http://antinode.info/ftp/openssl/0_9_8k/0_9_8k_s1.dru > [...] Oops. That kit contained the wrong "util/libeay.num". I've updated op

0.9.8k v. VMS

2009-03-30 Thread Steven M. Schweda
Complete source kit: http://antinode.info/ftp/openssl/0_9_8k/openssl-0_9_8k_s1.zip gdiff -ru openssl-0.9.8k openssl-0_9_8k : http://antinode.info/ftp/openssl/0_9_8k/0_9_8k_s1.dru Notes (included in the source kit): http://antinode.info/ftp/openssl/0_9_8k/notes_0_9_8k.tx

Re: OCSP help required

2009-03-30 Thread Kyle Hamilton
OCSP is not part of the SSL handshake (except, as you mention, for OCSP stapling). You can look at apps/ocsp.c for information on how to use the OCSP API. The best place to use it would be in the callback called by SSL[_CTX]_set_verify(). -Kyle H On Sun, Mar 29, 2009 at 11:02 PM, Yaweh wrote:

Help Crypto_free crash!

2009-03-30 Thread Balaji Kannadassan
Hi All! We have the following issue where the tracebacks points to CRYPTO_free -> free -> free. When we decode from the bottom of stack we could build a stack from our application till main -> ssl_connect -> SSL_connect. From the laststack pointer position it decode from free <- free <- CRYPT

OCSP help required

2009-03-30 Thread Yaweh
Hi, Is OCSp implemented as a part of SSL handshake or do i need to implement the functionality myself i.e. calling the api to send the request and check the response like the way it has been done in the apps?? i see some ocsp related code while ssl handshake is being done. it looks like its for