Re: Problem with building dll

2011-12-05 Thread Amanda Gabiam
Mykhaylo Mastykash mykhaylo.mastykash@... writes: ... c:\openssl\crypto\bio\b_sock.c(729) : error C2037: left of 'sin6_addr' specifies  undefined struct/union 'sockaddr_in6' NMAKE : fatal error U1077: 'clarm.exe' : return code '0x2' Stop.   How can I fix it???  

[openssl.org #2650] major ssl read/ write performance improvement - updated

2011-12-05 Thread Deng Michael via RT
Hi,  I have changed the mac code which gives substantial improvement for both read and write (not handshake)  The saving is fairly major, on cpu with cryto acceleration, the change can more than double the overall ssl read /write speed for 1K record excluding OS IO time. this implies the

Re: Next Protocol Support and SSL Renegotiation

2011-12-05 Thread Ben Laurie
I think we fixed this... On Sat, Nov 19, 2011 at 2:28 PM, Ben Murphy benmmur...@gmail.com wrote: I think there might be a bug with Next Protocol Negotiation and SSL Renegotiation. My interpretation of the spec is that you shouldn't be doing NPN negotiation during ssl renegotiation. Openssl

RE: API to set rekey limit?

2011-12-05 Thread Erik Tkal
I think BIO_set_ssl_renegotiate_bytes should do what you are asking (assuming you enable SSL renegotiation). You could also trigger the renegotiation via your application using SSL_renegotiate. Erik Tkal Juniper OAC/UAC/Pulse Development -Original

Re: [openssl.org #2650] major ssl read/ write performance improvement - updated

2011-12-05 Thread Fanboy
Got a patch for trunk also? On Mon, Dec 5, 2011 at 11:33 PM, Deng Michael via RT r...@openssl.org wrote: Hi,  I have changed the mac code which gives substantial improvement for both read and write (not handshake)  The saving is fairly major, on cpu with cryto acceleration, the change can

Exporting public key from SPKAC or SPKI structure

2011-12-05 Thread Jason Gerfen
My question is simple. Should I be using the NETSCAPE_* series of macros/functions to obtain a public key from a KEYGEN web form element? char *spkstr = NULL; EVP_PKEY *pkey = NULL; NETSCAPE_SPKI *spki = NULL; if ((spkstr[-1] == '\r')||(spkstr[-1] == '\n')) { spkstr--; } spki =