Re: SSL_OP_NO_QUERY_MTU problem in openssl 1.0.0.e

2011-10-20 Thread Michael Tuexen
On Oct 19, 2011, at 11:45 PM, Oleg Moskalenko wrote: Hi I installed the new OpenSSL version and I immediately ran into a problem with DTLS: when the option SSL_OP_NO_QUERY_MTU is set, then the SSL_connect command produces a segmentation fault. Have you tried the first bug fix available

Problem with Server-Client Sessions with SSL proxy

2011-10-20 Thread saurabh pandya
Hi all, Problem seems very wired to me. please bear some deficiency in explaining the problem I am writing one Small HTTPS proxy (trasparent proxy only ) for study work. Client(IE)---Encrypted traffic--- || ClientSocket ---Plain text ServerSocket --Encrypted traffic--Https_WebServer In

OpenSSL Engine - configurable ciphers/digests

2011-10-20 Thread com...@gmx.ch
Hi, I need some help with a special case: a dynamic engine with non-static or configureable ciphers. While I do not use cryptodev, the code provides a good example of the intial problem: http://cvs.openssl.org/fileview?f=openssl/crypto/engine/eng_cryptodev.cv=1.23 I basically have it

FIPS_mode_set call fails

2011-10-20 Thread Sert, Banu Cicek
Hello, I just want to ask for help on a point. I have openssl 0.9.8r development version and just build the FIPS 1.2.3 modules.When I call FIPS_mode_set(1) in my application , it always returns 0. What I have done so far is the following: *I have set up perl *I have downloaded the openssl

Help Needed: SSL Connect starting from a weird state

2011-10-20 Thread Jeff Saremi
We've been running our SSL code for a while now with no issues. But recently one of our developers started encountering this problem. We did the best we could to troubleshoot to no avail. I know the problem is not OpenSSL and it's something we're doing incorrectly, probably at the start up. The

RE: Failing to verify the certificate of one specific site

2011-10-20 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Lucas Clemente Vella Sent: Wednesday, 19 October, 2011 22:44 snip: connect to graph.facebook.com:443 using cafile=DigiCertHighAssuranceEVRootCA.crt gets rc=20 Then I found this directory in my system, /etc/ssl/certs, containing my installed

RE: SSL documentation

2011-10-20 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Jakob Bohm Sent: Wednesday, 19 October, 2011 06:04 On 10/19/2011 6:10 AM, Mohan Radhakrishnan wrote: Hi, Is there any material available that shows flows of one-way/two-ssl and different types of CA architectures ? We use two-way