Re: possible user error / memory leak using RSA_new() and RSA_free();

2010-04-19 Thread Stuart Weatherby
Steve & Mounir, Thanks a lot for answering my questions. Stuart - Original Message From: Dr. Stephen Henson To: openssl-users@openssl.org Sent: Mon, April 19, 2010 4:38:14 PM Subject: Re: possible user error / memory leak using RSA_new() and RSA_free(); On Mon, Apr 19, 2010, Stuar

Re: possible user error / memory leak using RSA_new() and RSA_free();

2010-04-19 Thread Dr. Stephen Henson
On Mon, Apr 19, 2010, Stuart Weatherby wrote: > Thanks Steve, > > After commenting out lines 24 & 25 there is still unfree'd memory: > http://www.openssl.org/support/faq.html#PROG13 Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http:

Re: possible user error / memory leak using RSA_new() and RSA_free();

2010-04-19 Thread Stuart Weatherby
Thanks Steve, After commenting out lines 24 & 25 there is still unfree'd memory: Stuart ==8155== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 4 from 1) ==8155== malloc/free: in use at exit: 528 bytes in 10 blocks. ==8155== malloc/free: 137 allocs, 127 frees, 13,340 bytes allocated. ==81

Re: possible user error / memory leak using RSA_new() and RSA_free();

2010-04-19 Thread Mounir IDRASSI
Hi, Remove the unecessary call to RSA_new and the memory leak will disappear!! (The variable p est allocated by PEM_read_RSA_PUBKEY) Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr On 4/19/2010 11:07 PM, Stuart Weatherby wrote: Hi List, I am trying to figure out why there is a memory l

Re: possible user error / memory leak using RSA_new() and RSA_free();

2010-04-19 Thread Dr. Stephen Henson
On Mon, Apr 19, 2010, Stuart Weatherby wrote: > Hi List, > > I am trying to figure out why there is a memory leak using RSA_new & RSA_free: > Below is a code sample (which will produce a memory leak) and the relevent > valgrind output. I have checked the documentation but I still fail to see my

RE: Verisign client requirements

2010-04-19 Thread Rene Hollan
I think you need a tutorial in how X.509 hierarchies and chains of trust work. Consider a public and private key pair: if I have a private key and you have the corresponding public key, you can decrypt something I encrypt. This permits all sorts of interesting possibilities: If I encrypt someth

possible user error / memory leak using RSA_new() and RSA_free();

2010-04-19 Thread Stuart Weatherby
Hi List, I am trying to figure out why there is a memory leak using RSA_new & RSA_free: Below is a code sample (which will produce a memory leak) and the relevent valgrind output. I have checked the documentation but I still fail to see my error. As I understand the docuumentation, RSA_free()

Re: Verisign client requirements

2010-04-19 Thread piper.guy1
David, Sorry for my late response. (pulled in another direction for a while). But i still have a few holes in my understanding (and maybe my head!!). Here are some facts about our implementation: 1. The server does not have my root certificate. 2. I do not have the server's root certificate. 3.

Re: Multi Threaded questions

2010-04-19 Thread Sad Clouds
On Mon, 19 Apr 2010 11:09:33 -0700 "Jeremy Farrell" wrote: > That's the usual way to handle significant numbers of connections. > For many programs handling a small number of connections, two threads > per connection is the normal approach. It's simpler, and much easier > to port between OSes. Ho

RE: Multi Threaded questions

2010-04-19 Thread Jeremy Farrell
> > > However do you really need to use multiple concurrent threads > > > with the same SSL object? Think of it as a TCP socket, each > > > thread has a list of open sockets, or SSL objects, there is > > > no need to share it with other threads. > > "David Schwartz" wrote: > > > > Actually, it's

Re: Multi Threaded questions

2010-04-19 Thread Jeffrey Walton
Hi Sads, On Mon, Apr 19, 2010 at 3:32 AM, Sad Clouds wrote: > On Sun, 18 Apr 2010 21:11:40 -0700 > "David Schwartz" wrote: >> Sad Clouds wrote: >> >> > > 1)  According to the FAQ, "an SSL connection may not concurrently >> > > be used by multiple threads". Does this mean that an SSL >> > > conne

Re: Binding outgoing SSL connection to certain IP address

2010-04-19 Thread Sad Clouds
On Mon, 19 Apr 2010 11:58:51 +0200 (CEST) Ondrej Jombik wrote: > I do need this for client side. Machine where connection is > originating has several IP addresses and the remote machine will > accept connection only from one of those. So I need to choose exactly > one source IP address when crea

[FWD] Error: SSL: couldn't create a context!

2010-04-19 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from sumit sengupta - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.in; s=s1024; t=1271681043; bh=EWieRuvM759TV601L/2vGiP1boYErqP6lbAkC+avdWQ=; h=Message-ID

Re: SSLv23_method in OpenSSL 1.0.0

2010-04-19 Thread Dr. Stephen Henson
On Sun, Apr 18, 2010, Luigi Auriemma wrote: > Hey, > > I have noticed that a client ssl connection initialized with the > classical SSLv23_method no longer works in OpenSSL 1.0.0. > > This has been tested on both Windows (mingw) and Linux and both > connecting to a v2 and v3 server with the same

Re: Binding outgoing SSL connection to certain IP address

2010-04-19 Thread Ondrej Jombik
I do need this for client side. Machine where connection is originating has several IP addresses and the remote machine will accept connection only from one of those. So I need to choose exactly one source IP address when creating connection. Can your example be modified for this? Also I noticed

Two questions about the certificate revocation

2010-04-19 Thread Arm Abramyan
Dear OpneSSL support team Could you please answer to my questions: 1. What process occurs when we revoke the certificate with the command: openssl ca -revoke 2. Why openssl software allows to one Certification Authority(CA) to revoke certificate signed by another CA. Thank you in advance Best re

Re: Binding outgoing SSL connection to certain IP address

2010-04-19 Thread Sad Clouds
On Sun, 18 Apr 2010 23:35:16 +0200 (CEST) Ondrej Jombik wrote: > [ Please Cc me in the answer as I'm not in the list. Thank you. ] > > I was googlig for over two days and now I'm stuck. The thing I would > like to accomplish is to bind outgoing SSL connection to certain IP > address. > > Our se

Binding outgoing SSL connection to certain IP address

2010-04-19 Thread Ondrej Jombik
[ Please Cc me in the answer as I'm not in the list. Thank you. ] I was googlig for over two days and now I'm stuck. The thing I would like to accomplish is to bind outgoing SSL connection to certain IP address. Our server has several IP addresses, but remote machine will accept connections only

Re: Multi Threaded questions

2010-04-19 Thread Sad Clouds
On Sun, 18 Apr 2010 21:11:40 -0700 "David Schwartz" wrote: > > Sad Clouds wrote: > > > > 1) According to the FAQ, "an SSL connection may not concurrently > > > be used by multiple threads". Does this mean that an SSL > > > connection can be used by different threads provided access is > > > li