[openssl.org #2661] openssl-1.0.1-stable-SNAP-20111217 - Handshake message exceeds max length when using tls v1.2 with cert verification

2011-12-26 Thread Stephen Henson via RT
What was the size of the certificate's key? I'd say a 4096 bit RSA key for it to exceed that limit. For TLS v1.2 two extra bytes are used to identify the signature type so just increasing the message limit by 2 should make it work again. Steve. -- Dr Stephen N. Henson. OpenSSL project core

maximum dtls connections

2011-12-26 Thread Manish Yadav
Hi all, i am building dtls server using *OpenSSL* v0.*9.8r*. i see following crash in openssl code: (gdb) bt #0 0x485b0297 in kill () from /lib/libc.so.7 #1 0x485b01f6 in raise () from /lib/libc.so.7 #2 0x485aedca in abort 28) from /lib/libc.so.7 #3 0x4852f9d5 in malloc () from

Re: maximum dtls connections

2011-12-26 Thread Michael Tuexen
On Dec 26, 2011, at 7:09 PM, Manish Yadav wrote: Hi all, i am building dtls server using OpenSSL v0.9.8r. i see following crash in openssl code: Whenever you are using DTLS: Upgrade to the latest version OpenSSL 1.0.0. Please report if your problem persists with the latest version of

Re: [openssl.org #2658] [PATCH] Add TLS/DTLS Heartbeats

2011-12-26 Thread Michael Tuexen
On Dec 26, 2011, at 8:25 PM, Stephen Henson via RT wrote: [seggelm...@fh-muenster.de - Fri Dec 23 09:04:52 2011]: Updated version with less defines and without breaking binary compatibility. Thank you. We've only got one SSL_OP flag left. Would it be possible to use an alternative to