Re: Another Protocol Bites The Dust

2009-11-05 Thread Kyle Hamilton
(replying to a message on dev-security at mozilla, but since this affects OpenSSL more than Mozilla, I'm sending this one directly to openssl-users and bcc:ing dev-security. I hope the spam filter lets it through.) When handled properly (i.e., you don't rely on anything before the renegotiation,

Searching the true about multithreading

2009-11-05 Thread faturita
Hello everyone, Good morning/afternoon/evening ! Win32, Windows XP Professional. Openssl0.9.8k compiled with multithreading support. I am using a blocking BIO to read and write to an SSL socket using two threads (because it is in blocking mode). There is the Reading thread: while (true)

Re: Searching the true about multithreading

2009-11-05 Thread Sebastián Treu
Hi, On Thu, Nov 5, 2009 at 4:07 PM, faturita rram...@gmail.com wrote: This is all very basic, and it is working but I am aware of the OpenSSL multithreading (or not so) things and I would like to know if this basic stuff needs some form of synchronization (using THREAD_setup() and

Re: Searching the true about multithreading

2009-11-05 Thread Sebastián Treu
Hi, I forgot the producer The consumer (sender) will wait for a signal from the producer (reader) and will block the shared buffer queue. This is, the producer gains exclusive access to the ssl structure of the client for SSL_read() and SSL_get_error() checking the SSL_ERROR_WANT_READ or

Re: Another Protocol Bites The Dust

2009-11-05 Thread Victor Duchovni
On Thu, Nov 05, 2009 at 11:00:42AM -0800, Kyle Hamilton wrote: (replying to a message on dev-security at mozilla, but since this affects OpenSSL more than Mozilla, I'm sending this one directly to openssl-users and bcc:ing dev-security. I hope the spam filter lets it through.) When

openvpn vs openssl

2009-11-05 Thread Lin Shen
Does anyone here have openvpn experience? I want to build a SSL vpn product. Trying to decide if I should use openssl or openvpn as the base. From my research, sounds like using openvpn would save my some work such as management UI etc. Any comments? lin

RE: Client Hello from HP Insight Manager crashes application

2009-11-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Josue Andrade Gomes Sent: Wednesday, 04 November, 2009 09:14 On Tue, Nov 3, 2009 at 11:12 PM, Dave Thompson dave.thomp...@princetonpayments.com wrote: To be clear: s_client with -sessout to a file, followed by s_client with -sessin from

RE: ASN1_get_object:too long

2009-11-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of dutchman1 Sent: Tuesday, 03 November, 2009 15:42 I'm trying to parse a DER cert that seems to be invalid. I can parse it but not load it or convert it into a PEM file. Is there a way to find out what's wrong with the file? Thanks in

Re: Searching the true about multithreading

2009-11-05 Thread faturita
Hello Sebastian, Thanks a lot for your reply !! The consumer (sender) will wait for a signal from the producer (reader) and will block the shared buffer queue. This is, the producer gains exclusive access to the ssl structure of the client for SSL_read() and SSL_get_error() checking the

RE: Searching the true about multithreading

2009-11-05 Thread David Schwartz
Faturita wrote: I am using a blocking BIO to read and write to an SSL socket using two threads (because it is in blocking mode). This is not permitted. You cannot have two threads call modification functions on the same object at the same time. There is the Reading thread: while (true)

RE: SSL_write reurns SSL3_WRITE_PENDING

2009-11-05 Thread David Schwartz
I tried after setting mode SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER. Still I am facing the same problem. It is successfully transmitting data of more than 2000 bytes but consistently giving problem in sending 166 bytes. After failing once it never succeds and we have to terminate the connection.