Re: DER-encoded issuer name

ASN1_INTEGER *serial; serial = X509_get_serialNumber(x); What function should be called for using 'serial->data' as DER-encoded string? Use the normal i2d_ASN1_INTEGER() function, i.e. (without error checking): int len; unsigned char *buf, *p; len = i2d_ASN1_INTEGER(seria

Re: Slapper denial-of-service problem - why isn't this fixed?

Joe Rhett wrote: So, say you have a server which listens on both port 443 for SSL and 80 for HTTP, does access on port 80 get blocked at the same time as access on port 443 gets blocked. Yes. Not 'blocked' -- TCP connects happen, but the server doesn't reply for up to the Timeout period. It

OpenSSL documentation for openssl(1) broken?

My browser connects me to the openssl(1) main page each time when I click on one of the sub-commands like asn1parse, ca, etc. of openssl(1). The browser address line displays the presumably correct file name asn1parse.html etc. but I do not see the expected content. Regards, Martin _

RE: Who steal my memory??

Hi, When a new browser window is opened and client_key_exchange is processed, my SSL server will lose memories about 0x13000 ~ 0x16000 byte. I'm sure that every SSL_new() is along with SSL_free(). I doubted the function of cache, so I set SSL_CTX_sess_set_cache_size(ctx,0). But it didn't hel