Re: build an application with the openssl source code (not the shared libraries)

2010-06-24 Thread Andrei Dumitrescu
Hello, Thank you, that works :). I would like to use some macros to modify the flow of the extension's operations, but, unfortunately, it seems the ones I define in my application are ineffective for the code in the static library (perhaps since that code is already compiled). However, for now, th

Re: OpenSSL on Win => Thread Safety

2010-06-24 Thread Ger Hobbelt
On Thu, Jun 24, 2010 at 7:25 PM, Massimiliano Pala < massimiliano.p...@dartmouth.edu> wrote: > Hi all, > > I have a question for Win coders.. I am porting LibPKI, which is based on > OpenSSL, to Win OSes. On UNiX OSes we used pthread to initialize support > for threads in OpenSSL. > > What is the

Re: Windows Certificate Store Private Key

2010-06-24 Thread Dr. Stephen Henson
On Thu, Jun 24, 2010, Harshvir Sidhu wrote: > Hey thanks all for the reply. > Stephen: >Yes i have to do client authentication, Is there some sample available > that demonstrates how can i use capi engine for the same? Thanks. > The option -ssl_client_cert_engine to s_client uses the relevan

Re: OpenSSL on Win => Thread Safety

2010-06-24 Thread Jeffrey Walton
Hi Massimiliano, If the locks need to be shared across processes, use a Mutex (the mutexes can be named for separate processes, or the mutex can be unnamed if Object Handle Inheritance is used (a flag to CreateProcess, which is similar to fork(2))). Otherwise, use a CRITICAL_SECTION. The critical

undef symbols on HP-UX11.11 RISC

2010-06-24 Thread Alona Rossen
Hello, I receive undef symbols when I build OpenSSL 0.9.8e or OpenSSL1.0.0a on HP-UX11.11 RISC : $> nm libcrypto.a | grep builtin EC_get_builtin_curves| 1236|extern|entry |$CODE$ ENGINE_load_builtin_engines| 0|extern|entry |$CODE$ OPENSSL_load_builtin_modules|

Re: error from generated code in ntdll.mak

2010-06-24 Thread William A. Rowe Jr.
On 6/24/2010 4:04 AM, Deckers, Rob wrote: >Creating library out32dll\libeay32.lib and object out32dll\libeay32.exp > IF EXIST out32dll\libeay32.dll.manifest mt -nologo -manifest > out32dll\libeay32.dll.manifest -outputresource:out32dll\libeay32.dll;2 > mt: Unknown option -n > Usage: mt

OpenSSL on Win => Thread Safety

2010-06-24 Thread Massimiliano Pala
Hi all, I have a question for Win coders.. I am porting LibPKI, which is based on OpenSSL, to Win OSes. On UNiX OSes we used pthread to initialize support for threads in OpenSSL. What is the best practice for Win OS ? Does anybody have some sample code around ? In particular, I am referring to t

Re: Windows Certificate Store Private Key

2010-06-24 Thread Harshvir Sidhu
Hey thanks all for the reply. Stephen: Yes i have to do client authentication, Is there some sample available that demonstrates how can i use capi engine for the same? Thanks. // Harshvir On Thu, Jun 24, 2010 at 7:29 AM, Dr. Stephen Henson wrote: > On Wed, Jun 23, 2010, Harshvir Sidhu wrote:

Re: Followup was Re: Solved was Re: openssl s_client intermittent problem (DNS?)

2010-06-24 Thread ohaya
Hi, Also, if openssl s_client IS doing a reverse DNS lookup, is there a way (command line parameter) to disable that from happening? Thanks again, Jim oh...@cox.net wrote: > Hi, > > I was kind of curious about 'why?' would openssl s_client be trying to do the > reverse DNS lookup? > >

Followup was Re: Solved was Re: openssl s_client intermittent problem (DNS?)

2010-06-24 Thread ohaya
Hi, I was kind of curious about 'why?' would openssl s_client be trying to do the reverse DNS lookup? In other words, when you do an: openssl s_client -connect xx.xx.xx.xx:443... why does openssl try to do a reverse DNS lookup on the xx.xx.xx.xx IP address, and why does it do that BEFORE (app

Re: crash from curl with pkcs12 certs and threads

2010-06-24 Thread Brian Makin
On Thu, 2010-06-24 at 15:22 +0200, Dr. Stephen Henson wrote: > On Tue, Jun 22, 2010, Brian Makin wrote: > > > Can you check to see if PKCS12_PBE_add() is called multiple times using the > debugger? It is only supposed to be called once before threads are started but > a bug means if it is cal

Re: crash from curl with pkcs12 certs and threads

2010-06-24 Thread Dr. Stephen Henson
On Tue, Jun 22, 2010, Brian Makin wrote: > On Tue, 2010-06-22 at 19:00 +0200, Dr. Stephen Henson wrote: > > On Tue, Jun 22, 2010, Brian Makin wrote: > > > > > Using curl 7.16.1 and 7.20.0 > > > with openssl 0.9.8l and 0.9.8o > > > I am getting intermittent crashes. Apache is setup with a pkcs12

[no subject]

2010-06-24 Thread Rabia
Best Regards Rabia Alklany System Analyst & Software Project Manager Shamir Optical Industry Ltd. | Kibbutz Shamir Upper Galilee, 12135 Israel T: (972) 4-690-1362 | M: (972) 50-5914543 | F: (972) 4-695-1302 www.shamir.co.il This mail was sent vi

Solved was Re: openssl s_client intermittent problem (DNS?)

2010-06-24 Thread ohaya
Hi, We think that we found the problem. The server end had a timeout, and apparently, openssl tries to do a reverse DNS lookup after establishing the connection to the server, but before sending the client HELLO, That reverse DNS lookup was failing, but taking awhile to fail, so the server

Re: Windows Certificate Store Private Key

2010-06-24 Thread Dr. Stephen Henson
On Wed, Jun 23, 2010, Harshvir Sidhu wrote: > Hi All, > I am trying to read Certificates and Private Key from Windows > Certificate Store and then using them in OpenSSL. I am able to read > Certificates but i am having trouble with reading Private Key. Have anyone > done this before, any point

Re: error from generated code in ntdll.mak

2010-06-24 Thread Carter Browne
Rob, Is there some reason you want to use the no-asm switch. I ran the standard Windows vsvars32.bat, and then used the OpenSSL perl scripts (without the no-asm switch) and everything compiled without any problems in a VC 2008 envrionment (XP SP3). Carter Carter Browne CBCS cbro...@cbcs-usa.com

Re: error from generated code in ntdll.mak

2010-06-24 Thread Dr. Stephen Henson
On Thu, Jun 24, 2010, Deckers, Rob wrote: > Dear All, > > I am trying to build OpenSSL on a Windows XP system. > I have Visual studio 2005 AND 2008 installed. > > For OpenSSL, I downloaded the Microsoft Visual C++ 2008 Redistributable > Package (X86) and the OpenSSL-sources (Jun 1 15:46:21 20

Re: build an application with the openssl source code (not the shared libraries)

2010-06-24 Thread Mounir IDRASSI
Hi Andrei, What about building the modified OpenSSL as static libraries and then link your apps with libcrypto.a and libssl.a? This way you will have no external dependency. Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr On 6/24/2010 12:24 PM, Andrei Dumitrescu wrote: Hello, I have so

build an application with the openssl source code (not the shared libraries)

2010-06-24 Thread Andrei Dumitrescu
Hello, I have somewhat experience with OpenSSL, and I've setup a client and a server which use SSL connection objects to communicate, but what I want is to compile my applications with the openssl source code (for example in ssl) because I've added an extension to the code to allow me to send supp

Re: Windows Certificate Store Private Key

2010-06-24 Thread Jakob Bohm
On 24-06-2010 00:43, Harshvir Sidhu wrote: Hi All, I am trying to read Certificates and Private Key from Windows Certificate Store and then using them in OpenSSL. I am able to read Certificates but i am having trouble with reading Private Key. Have anyone done this before, any pointers will

Re: Windows Certificate Store Private Key

2010-06-24 Thread Bernhard Froehlich
aerow...@gmail.com schrieb: Run mmc.exe (Microsoft Management Console), add the "Certificates" snap-in, and then export the certificate and private key to a PKCS#12 file. Then use openssl pkcs12 to parse it. Note that this works only if the private key is marked as exportable. Ted ;) -Kyle

RE: Integrating OpenSSL as a DLL in Windows

2010-06-24 Thread Rubin, RaizyX
You might need to specify the calling convention for the imported functions, especially if you intend to use callbacks (-with delegates) in your code, like: [DllImport("lib\\libeay32.dll" ,CallingConvention=CallingConvention.Cdecl)] Otherwise, you may get stack imbalance\ memory corruption excepti