Empty Session_id in SSL session cache with openssl 0.9.8j and 0.9.8k

Hi, Below are the steps to reproduce the issue with openssl 0.9.8k Server :: ./openssl s_server -cert server.pem Client :: ./openssl s_client -debug -msg -state -sess_out /tmp/session.out In the above case when we write the session to session.out , the output shows the session id :

Re: FIPS validation docs

Christian Weber wrote: Dear OpenSSL developers, currently, there are two FIPS certificates (# and #1051) which state software version 1.2 (built upon OpenSSL 0.9.8) to comply with FIPS 140-2. Correct, those two cryptographic modules have been validated by the CMVP (http://csrc.nist.go

FIPS validation docs

Dear OpenSSL developers, currently, there are two FIPS certificates (# and #1051) which state software version 1.2 (built upon OpenSSL 0.9.8) to comply with FIPS 140-2. Both, the library (under certain environments) and the program (CLI frontend), have been validated (not certified). I'm uns

[openssl.org #1918] Can‘t extract 0.9.6x correctly on windows

hello,     As the requirement of my project, I must use the source of 0.9.6a version，but I can't extract it correctly with winrar，the same with the other 0.9.6x version. The versions above 0.9.7x don't have this problem.     OpenSSL version: 0.9.6x OS Name:    windows xp Compiler Details

[Q] AES performance with 1.0.0 beta 2

Greetings, I'm not sure if this topic has been brought up previously, but I've noticed that the AES performance with the linux-x86_64 target seems to have dropped relative to 0.9.8k. This is on an AMD Athlon64 X2 with GCC 4.1.2. I'm curious as to the cause of this and whether it is intentional (

Re: [PATCH] Fix for memleaks, use after free and optimizations

Hi Allan, Thanks for the feedback! 2009/5/4 Allan K Pratt : > This caught my eye because my primary project is Rational PurifyPlus, > another bug-finding tool for C and C++ code. > > I recommend reviewing these patches carefully. This bug-finding tool > (www.emn.fr/x-info/coccinelle) appears to h