[openssl-dev] [openssl.org #4043] monitoring software depending on openssl not working on cloudflare ssl websites

2015-09-15 Thread Horatiu N via RT
Greetings, Using the nagios plugins (latest debian package for 8.1) to check availability of https websites using cloudflare gives errors > CRITICAL - Cannot make SSL connection. > 139729452828304:error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 > alert internal error:s23_clnt.c:770: sam

Re: [openssl-dev] [openssl.org #4043] monitoring software depending onopenssl not working on cloudflare ssl websites

2015-09-15 Thread Rob Stradling via RT
Hi Horatiu. To connect to a site that uses CloudFlare Universal SSL [1], you need to specify the SNI (Server Name Indication) header. Modern browsers do this by default, but for s_client you need to do this... openssl s_client -connect :443 -servername This isn't an OpenSSL bug, so I suggest cl

Re: [openssl-dev] [openssl.org #4043] monitoring software depending onopenssl not working on cloudflare ssl websites

2015-09-15 Thread Horatiu N via RT
Thank you very much. Have a lovely day :) On 15-Sep-15 5:49 PM, Rob Stradling via RT wrote: > Hi Horatiu. To connect to a site that uses CloudFlare Universal SSL > [1], you need to specify the SNI (Server Name Indication) header. > Modern browsers do this by default, but for s_client you need to

[openssl-dev] [openssl.org #4044] cvsignore files are obsolete

2015-09-15 Thread Kaduk, Ben via RT
Now that everything's in git, the .cvsignore files seem to serve no useful purpose, and should be removed. -Ben ___ openssl-bugs-mod mailing list openssl-bugs-...@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod ___

[openssl-dev] [openssl.org #4044] cvsignore files are obsolete

2015-09-15 Thread Rich Salz via RT
Fixed in 1.0.2 and 1.0.1; thanks. -- Rich Salz, OpenSSL dev team; rs...@openssl.org ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] testing framework

2015-09-15 Thread Richard Levitte
In message on Tue, 15 Sep 2015 00:30:24 +0300, Sebastian Brestin said: sebastianbrestin> Hi guys, sebastianbrestin> sebastianbrestin> I just joined your community over here. Quick sebastianbrestin> question: why have you chosen Test:More as a testing sebastianbrestin> framework rather than gt

[openssl-dev] Update RE: [openssl.org #4033] Unable to build openssl git master branch on NetBSD for > 24 hours

2015-09-15 Thread yancm via RT
Hi Rich, I checked a couple of things.. apps/rehash.c is interesting (see below) - is it supposed to have two rehash_main() definitions? The second one is throwing the error? thanks, gene ** Error Message ** gmake[2]: Leaving directory '/usr/local/src/op

Re: [openssl-dev] Update RE: [openssl.org #4033] Unable to build openssl git master branch on NetBSD for > 24 hours

2015-09-15 Thread Salz, Rich
Yes, it has two main functions, based on #ifdef unix. Not sure why netBSD doesn't -Dunix. ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Update RE: [openssl.org #4033] Unable to build openssl git master branch on NetBSD for > 24 hours

2015-09-15 Thread Salz, Rich via RT
Yes, it has two main functions, based on #ifdef unix. Not sure why netBSD doesn't -Dunix. ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev