RSA, DSA and DH Method structures in Engine

2008-08-06 Thread Nanavati, Sitanshu
Hi all, While going thru various engines, I see that: - for RSA, the structure is always initialized for rsa_mode_exp and mod_exp_mont (6th and 7th entities in the RSA_NETHOD structure). - for DH, only mod_ep_dh (4th entity in the DH_METHOD structure) - for DSA, dsa_mod_exp and m

RE: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread David Schwartz
> David Schwartz wrote: > > Try launching your test program automatically on boot up at the > > saem time > > you launch ssh or whatever application is failing. I bet > > '/dev/urandom' will > > fail then. > The program had no problems running with simultaneous > od -x /dev/random, that was bloc

RE: [openssl.org #1727] No License error getting

2008-08-06 Thread Shaw Graham George
Your problem is nothing to do with OpenSSL. This message is coming from the AIX compiler - it's license is number-of-users restricted. Your build is taking a long time because the compiler is waiting for an empty slot in the active users list to become available before starting each compilati

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
David Schwartz wrote: Try launching your test program automatically on boot up at the saem time you launch ssh or whatever application is failing. I bet '/dev/urandom' will fail then. The program had no problems running with simultaneous od -x /dev/random, that was blocking because it sucked a

[openssl.org #1728] Root Certificate Program

2008-08-06 Thread Lutz Jaenicke via RT
The OpenSSL project does not have a root CA program and has decided to not supply root CA certificates with the toolkit. Please checkout the FAQ: How can I set up a bundle of commercial root CA certificates? http://www.openssl.org/support/faq.html#USER16 Best regards, Lutz ___

[openssl.org #1728] Root Certificate Program

2008-08-06 Thread Frye, Steven K - Eagan, MN - Contractor via RT
Hello, I am researching various root certificate programs in hopes of getting our root certificate added to future distributions. I am hoping to find some specific documentation on your root certificate program to determine your specific requirements and/or get in contact with whomever is in char

[openssl.org #1727] No License error getting

2008-08-06 Thread Lutz Jaenicke via RT
It seems you do not have enough licenses for your C compiler which is thus locking up. Sincere regards, Lutz __ OpenSSL Project http://www.openssl.org Development Mailing List

RE: [openssl.org #1727] No License error getting

2008-08-06 Thread David Schwartz
> I am seenivasan , working in MNC. When i tried to compile (make) > openssl in AIX boxes i am getting below errors. After 4 hours also the > compilation has not been finished. > cc -I. -I.. -I../include -DOPENSSL_THREADS -qthreaded -DDSO_DLFCN - > 1506-507 (W) No licenses available. Cont

[openssl.org #1727] No License error getting

2008-08-06 Thread seeni vasan via RT
Hi Team,     I am seenivasan , working in MNC. When i tried to compile (make) openssl in AIX boxes i am getting below errors. After 4 hours also the compilation has not been finished.   Below is sample line (I am getting lot of lines same error, after 4 hours also compilation had not fnished)  

RE: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread David Schwartz
> Tried many many times, even two running at the same time > or poll timeout set to zero, not one instance of blocking > even with >od -x /dev/urandom > and >od -x /dev/random > running simultaneously (the second one blocks, of course). > > > H.. what the #$%# is happening here.. more

Cleanup procedure missing some calls?

2008-08-06 Thread Ion Larrañaga
Hello, I have been developing a Win32 application that makes TCP connections. When the application ends, I use to dump all non-deallocated memory blocks, in order to avoid possible memory leaks. The question is that if I use openssl, there are a couple of memory blocks that are not freed. The

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
Tomas Mraz wrote: errno has garbage value - this should be fixed by initializing errno to 0 before the poll/select calls. Actually after it returns with timeout - a successfull syscall is free to set errno to whatever value it wants, it is only after an error the value has to be meaningful (I

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Tomas Mraz
On Wed, 2008-08-06 at 11:08 +0200, Stanislav Meduna wrote: > Hi, > > I and a few other users are seeing sshd failing with >Couldn't obtain random bytes (error 604389476) > and other ssl-related application failing randomly > in user mode linux guests and I suspect a problem > in openssl that g

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
Stanislav Meduna wrote: - add r = -1; inside the do loop after the int try_read = 0; Erm, actually I mean r = -1; errno = EAGAIN; or something like that - it has to let the while know that the poll timed out. -- Stano ___

Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-06 Thread Stanislav Meduna
Hi, I and a few other users are seeing sshd failing with Couldn't obtain random bytes (error 604389476) and other ssl-related application failing randomly in user mode linux guests and I suspect a problem in openssl that got triggered by some change in UML. I reviewed the RAND_poll function in