Application data problem

2008-09-12 Thread parvathy
Hi, I have used the curl options properly. And I can able to get application data continuously from specific server if I do following modification in s3_pkt.c file. Please refer if condition from s3_lib.c file. This -1 is returning from s3_pkt.c file(SSL_MODE_AUTO_RETRY). It is

Re: Problem generating csr

2008-09-12 Thread Kenneth Goldman
The rpm manager will only update if you install through rpm. 1.5 gb sounds absurd for a csr. Perhaps dump the beginning of it to see if a particular field is incorrect. [EMAIL PROTECTED] wrote on 09/11/2008 02:34:04 PM: I am running Red Hat Enterprise 5.2 with OpenSSL 0.9.8h. The version of

Fw: Error: unable to get local issuer certificate!!!

2008-09-12 Thread Shivakumar Balur
Hi All, Please provide any solution for error: Response Verify Failure 4:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:122:Verify error:unable to get local issuer certificate resolve.pem: unknown This Update: Sep 8 16:38:27 2008 GMT more

X509v3 extensions

2008-09-12 Thread Christian Weber
Dear participators, trying to add some x509v3 extension awareness tu openssl we've become a bit short for solutions. x509 extensions are as versatile as asn1 permits. As extension to certificates there are an object id and a critical flag followed by whatsoever. If it comes to unknown oids at

Re: Fw: Error: unable to get local issuer certificate!!!

2008-09-12 Thread Sergio
Shivakumar Balur escribió: Hi All, Please provide any solution for error: Response Verify Failure 4:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:122:Verify error:*unable to get local issuer certificate* resolve.pem: unknown This Update: Sep

Problem in using SSL_accept on vxWorks 5.5 (Pentium)

2008-09-12 Thread vne
Hi, I am trying to use SSL_accept on vxWorks 5.5 (Pentium). But when the SSL client sends the initial handshake message (Client Hello), then SSL_accept returns failure with error as SSL_ERROR_WANT_READ. The same code works fine when used on Linux platform and handshake completes successfully.

Question about compatibility

2008-09-12 Thread Chin, Andrew
To all: I am fairly new at participating in a mailing list so I apologize if I'm doing anything out of place. I don't have that much knowledge in openSSL, either. But what I was hoping to have answered is: OpenSSL produces S-MIME version 2 and BouncyCastle results in S-MIME version 3, which will

Callong FIPS_mod_set() before/after SSL_library_init()

2008-09-12 Thread robert
Hi, I'm building cURL with FIPS capable OpenSSL module. I'm calling FIPS_mode_set function to enable FIPS somewhere after SSL_library_init() has already been called. The binary file is working fine, but is there a problem that the FIPS mode is turned on after SSL_library_init() but before

RE: Problem in using SSL_accept on vxWorks 5.5 (Pentium)

2008-09-12 Thread David Schwartz
Hi, I am trying to use SSL_accept on vxWorks 5.5 (Pentium). But when the SSL client sends the initial handshake message (Client Hello), then SSL_accept returns failure with error as SSL_ERROR_WANT_READ. The same code works fine when used on Linux platform and handshake completes

Re: Question about compatibility

2008-09-12 Thread Dr. Stephen Henson
On Fri, Sep 12, 2008, Chin, Andrew wrote: To all: I am fairly new at participating in a mailing list so I apologize if I'm doing anything out of place. I don't have that much knowledge in openSSL, either. But what I was hoping to have answered is: OpenSSL produces S-MIME version 2 and

RE: Problem in using SSL_accept on vxWorks 5.5 (Pentium)

2008-09-12 Thread vne
You are right that I am making a non-blocking SSL_accept call. The problem is on vxWorks when 'select' states that some connection request is present, SSL_accept returns failure with error code as SSL_ERROR_WANT_READ. But if I add some delay in between this 'select' and 'SSL_accept', then it

RE: Problem in using SSL_accept on vxWorks 5.5 (Pentium)

2008-09-12 Thread David Schwartz
You are right that I am making a non-blocking SSL_accept call. The problem is on vxWorks when 'select' states that some connection request is present, SSL_accept returns failure with error code as SSL_ERROR_WANT_READ. That's because the connection request was present but the negotiation

FIPS_mod_set() before/after SSL_library_init() ?

2008-09-12 Thread Robert Sicoie
Hi, I'm building cURL with FIPS capable OpenSSL module. I'm calling FIPS_mode_set function to enable FIPS somewhere after SSL_library_init() has already been called. The binary file is working fine, but is there a problem that the FIPS mode is turned on after SSL_library_init() but before

RE: Problem in using SSL_accept on vxWorks 5.5 (Pentium)

2008-09-12 Thread vne
Hi, I replaced the call to SSL_select to this one and it worked !!! Thanks for your help. int i =0; while(1 == i) { dRetVal = SSL_accept(pSsl); if(!(SSL_ERROR_WANT_READ == SSL_get_error(pSsl,dRetVal))) i=0; } So, this

RE: Problem in using SSL_accept on vxWorks 5.5 (Pentium)

2008-09-12 Thread vne
[Corrected] Hi , I replaced the call to SSL_accept to this one and it worked !!! Thanks for your help. int i =0; while(1 == i) { dRetVal = SSL_accept(pSsl); if(!(SSL_ERROR_WANT_READ == SSL_get_error(pSsl,dRetVal))) i=0;

0.9.8e OpenSSL SSL_write memory leak?

2008-09-12 Thread gary clark
Hello, Using windows XP. I'm trying to confirm why when sending data using SSL_write intermittently I get a 4K jump in memory. It does not happen on every SSL_write which is driving me crazy. Could somebody please tell me if they have seen something similar and if so what was the solution?

OpenSSL Web Server Certificate renewed

2008-09-12 Thread Lutz Jaenicke
Hi! I have just installed a new (2048bit) certificate and key to the OpenSSL Project webserver. It is a wildcard certifcate for *.openssl.org catching both www.openssl.org and rt.openssl.org. Many thanks go to Steve Roylance from Globalsign for donating a 3 year wildcard SSL certificate!! Best

Re: OpenSSL Web Server Certificate renewed

2008-09-12 Thread Joe Flowers
Thanks a lot Steve! We'll definitely be keeping Globalsign is mind. Joe - On Fri, Sep 12, 2008 at 1:49 PM, Lutz Jaenicke [EMAIL PROTECTED]wrote: Hi! I have just installed a new (2048bit) certificate and key to the OpenSSL Project webserver. It is a wildcard certifcate for

RE: Problem in using SSL_accept on vxWorks 5.5 (Pentium)

2008-09-12 Thread David Schwartz
Hi, I replaced the call to SSL_select to this one and it worked !!! Thanks for your help. int i =0; while(1 == i) { dRetVal = SSL_accept(pSsl); if(!(SSL_ERROR_WANT_READ == SSL_get_error(pSsl,dRetVal))) i=0; }