huge memory allocation on simultaneous ssl handshakes.

2007-10-29 Thread Ramashish Baranwal
Hi, I have a server which accepts ssl connections. I have a client which does parallel ssl connections to this. After closing all connections the server has unfreed memory. This gets reused for subsequent ssl connections, so no issue there. My problem is with the amount of memory left over. I do

Re: How to get the openssl ocsp to send OCSP requests to the responder list in contained in the certifcate Authority Information Access?

2007-10-29 Thread Bruce Keats
Could this be the reason I am having difficulty getting other applications such as stunnel to use the certificate's AIA? To rephrase the question, does this code belong within openssl or is the something that an application has to do? I am not that familar with the openssl API. On that note, is

Re: How to get the openssl ocsp to send OCSP requests to the responder list in contained in the certifcate Authority Information Access?

2007-10-29 Thread Dr. Stephen Henson
On Mon, Oct 29, 2007, Bruce Keats wrote: > Hi, > > I have been trying for a couple of days now to test an OCSP responder, but I > am having problems getting the openssl OCSP client to send the OCSP requests > to the OCSP responder listed in the certificate's AIA. If I use the -url > option with

Re: OpenSSL How to redistribute as part of our application

2007-10-29 Thread Thomas J. Hruska
Bernhard Froehlich wrote: Dave Bound schrieb: Hi Can anyone tell me how to deploy the necessary OpenSSL files as part of a Win32 application? The app is deployed using a Windows Installer EXE. I’m not particularly familiar with how this works, but it has been suggested that an OpenSSL merg

Re: OpenSSL How to redistribute as part of our application

2007-10-29 Thread Bernhard Froehlich
Dave Bound schrieb: Hi Can anyone tell me how to deploy the necessary OpenSSL files as part of a Win32 application? The app is deployed using a Windows Installer EXE. I’m not particularly familiar with how this works, but it has been suggested that an OpenSSL merge module might be what I’m

OpenSSL How to redistribute as part of our application

2007-10-29 Thread Dave Bound
Hi Can anyone tell me how to deploy the necessary OpenSSL files as part of a Win32 application? The app is deployed using a Windows Installer EXE. I'm not particularly familiar with how this works, but it has been suggested that an OpenSSL merge module might be what I'm looking for? Thanks Dave

Re: Questions on FIPS validated version of OpenSSL

2007-10-29 Thread Steve Marquess
Roger Boden wrote: We are including openssl in a development platform. We are seeing more and more requests from our customers for the FIPS validated version of OpenSSL. I am now trying to understand what it would mean to include the FIPS validated platform in our development platform. That's g

Questions on FIPS validated version of OpenSSL

2007-10-29 Thread Roger Boden
Hello, We are including openssl in a development platform. We are seeing more and more requests from our customers for the FIPS validated version of OpenSSL. I am now trying to understand what it would mean to include the FIPS validated platform in our development platform. Currently, the FIPS

PKCS....without certificates

2007-10-29 Thread Lidia
I'm looking for this, and i find in the IAIK API the following, that is part of PKCS7 standard: 1. Use the |EncryptedData(byte[] data)|

Delay in sending out 'Client Key Exchange'

2007-10-29 Thread Prabhu S
Hi, My application tries to make multiple SSL connections to a server in a persistent TCP Connection. The client will establish for once a TCP connection and later on attempt n number of SSL connections in the same TCP connection. In a particular case where the client times out ['select' is use