Re: DTLSv1_listen unable to accept second client on windows (This works on Linux)

2011-07-19 Thread Nilesh Vaghela
Hi Michael and Robin, I verified the same problem WITHOUT using SSL library and the problem is the same so it seems like Windows ISSUE. Earlier Yogi and myself sent you guys sample program with SSL library. See program below which illustrates the problem. I think DTLS library relies heavily

DTLS SSL_get_error returns SSL_ERROR_SYSCALL on Windows for Non Blocking IO

2011-07-10 Thread Nilesh Vaghela
Hi, We are using the non blocking IO(select) for testing DTLS and testing it on Windows with openssl-1.0.0d. We observe that when we call SSL_connect, it returns us -1 (as expected because operation should be in progress) and then when this return code is passed to SSL_get_error() function w

Re: Call for testing - FIPS object module

2011-07-08 Thread Nilesh Vaghela
Hi, We are interested in testing FIPS + DTLS. Can we test DTLS + FIPS ? --Nilesh. Stratacache Inc.(Santa Clara Office) Systems Architect O: 408-844-9810(2110) M: 408-202-5401 - Original Message - From: "Steve Marquess" To: openssl-dev@openssl.org, openssl-us...@openssl.org Se

Detecting that DTLS connection is dead...

2011-06-20 Thread Nilesh Vaghela
Hi, I am using DTLS in non-blocking mode using select. There are two parts : PART I: DURING HANDSHAKE : As recommended I use DTLSv1_get_timeout and DTLS_handle_timeout when I get WANT_READ/WANT_WRITE from all the four calls (SSL_connect, accept, read and write). I treat WANT_READ/WANT_W

DTLS and FIPS

2011-02-23 Thread Nilesh Vaghela
but they want to know whether it would support FIPS. --NIlesh. - Original Message - From: "Michael Tüxen" To: openssl-dev@openssl.org Sent: Tuesday, February 15, 2011 12:48:26 AM GMT -08:00 US/Canada Pacific Subject: Re: DTLS Hearbeat and FIPS On Feb 15, 2011, at 2:16

DTLS Hearbeat and FIPS

2011-02-15 Thread Nilesh Vaghela
Hi, 1. On the web I have see some king of patch for heartbeat for DTLS and also there is some draft also. But in Openssl 0.9.8 and 1.0.0 there is no such support. I grepped in the sources. Any plans to add the support in future ? Can some one guide me how to get such a feature in OpenSSL ? Or

Re: DTLSv1_listen in non-blocking

2011-02-09 Thread Nilesh Vaghela
to call DTLSv1_handle_timeout() in order to update the timer in SSL library for retransmission of Hello. My understanding may be wrong. I would appreciate if some one clarifies. --Nilesh. - Original Message - From: "Robin Seggelmann" To: "Nilesh Vaghela&quo

Re: DTLSv1_listen in non-blocking

2011-02-09 Thread Nilesh Vaghela
timeout of DTLS. So how do we handle this ? --Nilesh. - Original Message - From: "Nilesh Vaghela" To: "Robin Seggelmann" Cc: openssl-dev@openssl.org Sent: Wednesday, February 9, 2011 8:15:03 AM GMT -08:00 US/Canada Pacific Subject: Re: DTLSv1_listen in non-bloc

Re: DTLSv1_listen in non-blocking

2011-02-09 Thread Nilesh Vaghela
Hi, Two more questions 1. I assume that >= 1.0.0a version has FIPS support fro DTLS ? 2. What is the difference between 0.9.8 and 1.0.0 ? Assuming that program tested with 0.9.8 (with FIPS) would work without any changes on 1.0.0. --Nilesh. > I am using DTLSv1_listen in non-blocking underly

Re: DTLSv1_listen in non-blocking

2011-02-09 Thread Nilesh Vaghela
connected fds in the (read/write) fdset for select. Will this works like that ? --Nilesh. - Original Message - From: "Robin Seggelmann" To: "Nilesh Vaghela" Cc: openssl-dev@openssl.org Sent: Wednesday, February 9, 2011 1:21:22 AM GMT -08:00 US/Canada Pacific Subjec

DTLSv1_listen in non-blocking

2011-02-09 Thread Nilesh Vaghela
I am using DTLSv1_listen in non-blocking underlying socket layer. I am using openssl-0.9.8o and I looked at the implementation. int dtls1_listen(SSL *s, struct sockaddr *client) { int ret; SSL_set_options(s, SSL_OP_COOKIE_EXCHANGE); s->d1->listen = 1; ret = SSL_accept(s); if (ret <= 0) r