Re: DTLSv1_get_timeout/DTLSv1_handle_timeout on server for each connection

2012-02-05 Thread Manish Yadav
Hi Michael, Robin, thanks for input. i was thinking if i am not implementing dtls heartbeat in that scenario, how could client detect if server is still getting the messages (assuming the server deleted inactive session after sometime or server got reloaded), is there any mechanism that could

Re: DTLSv1_get_timeout/DTLSv1_handle_timeout on server for each connection

2012-02-05 Thread Michael Tuexen
On Feb 5, 2012, at 10:25 AM, Manish Yadav wrote: Hi Michael, Robin, thanks for input. i was thinking if i am not implementing dtls heartbeat in that scenario, how could client detect if server is still getting the messages (assuming the server deleted inactive session after sometime or

[openssl.org #2702] TLS bad_mac_record with IIS 7 and client authentication

2012-02-05 Thread Stephen Henson via RT
[stkap...@cisco.com - Sat Feb 04 21:00:23 2012]: Setup: Client: Curl/libcurl 7.21.7 OpenSSL 1.0.1 on powerpc linux Server: Win2008 R2 IIS 7. Virtual directory with Client Authentication set to Accept or Require Local network, IPV4 addressing I do not have the specific build of openssl

Re: [openssl.org #2702] TLS bad_mac_record with IIS 7 and client authentication

2012-02-05 Thread Steve Kapinos via RT
Hi Stephen I will try to test with the client and get back to you. This is in an internal lab so it is not reachable. I can provide packet sniff along with the certs /keys if that would be useful? Sent from my mobile On Feb 5, 2012, at 8:21 AM, Stephen Henson via RT r...@openssl.org wrote:

Re: [openssl.org #2702] TLS bad_mac_record with IIS 7 and client authentication

2012-02-05 Thread Steve Kapinos (stkapino)
Hi Stephen I will try to test with the client and get back to you. This is in an internal lab so it is not reachable. I can provide packet sniff along with the certs /keys if that would be useful? Sent from my mobile On Feb 5, 2012, at 8:21 AM, Stephen Henson via RT r...@openssl.org wrote:

[openssl.org #2702] TLS bad_mac_record with IIS 7 and client authentication

2012-02-05 Thread Stephen Henson via RT
[stkap...@cisco.com - Sun Feb 05 17:33:28 2012]: Hi Stephen I will try to test with the client and get back to you. This is in an internal lab so it is not reachable. I can provide packet sniff along with the certs /keys if that would be useful? Yes. Also please try it with the -no_tls1_2