Re: How to detect (e.g.) RC4_CHAR mismatch application <-> shared lib

2011-12-21 Thread Dr. Stephen Henson
On Thu, Dec 22, 2011, Per Hedeland wrote: > Hello, > > I recently had the misfortune of running into the case of an application > built with an OpenSSL installation that had the RC4_CHAR option set > (linux-ppc in Configure), but run using libcrypto.so from an > installation that *didn't* have RC

How to detect (e.g.) RC4_CHAR mismatch application <-> shared lib

2011-12-21 Thread Per Hedeland
Hello, I recently had the misfortune of running into the case of an application built with an OpenSSL installation that had the RC4_CHAR option set (linux-ppc in Configure), but run using libcrypto.so from an installation that *didn't* have RC4_CHAR set (Debian/powerpc). As could be expected, ever

Re: faled to read serial number(ASN1_INTEGER) from x509 certiticate using openssl

2011-12-21 Thread Dr. Stephen Henson
On Wed, Dec 21, 2011, chetanrun wrote: > > How to read certificate details ( serial number, issuer , subject details) > from x509 certificate using Openssl. > > I parsed P12 file using PKCS12_parse(), then retrieved serial number in > ASN1_INTEGER format from objtained x509 certificate. But how

Re: Memory leak in SSL_CTX_load_verify_locations()

2011-12-21 Thread Jeffrey Walton
On Wed, Dec 21, 2011 at 1:26 PM, nandan shantharaj wrote: > Hi All, > SSL_CTX_load_verify_locations() is causing memory leak in my > application. Folowing is the function trace. > >    262  1072 bytes leaked in 4 blocks (2.25% of all bytes leaked) >    263  These range in size from 268 to 268

Re: Malformed Certificate Created for Windows but Not Linux

2011-12-21 Thread harrije
> Which OpenSSL version was it? It was for version 1.0.0e. It would be nice if the Configure script for VC-WIN32 added this option automatically. Alternatively the INSTALL.W32 instructions could have a warning that on x64 PCs to use: perl Configure VC-WIN32 -D_USE_32BIT_TIME_T -- View thi

TLS/SSL Re-Negotiation Vulnerability [CVE-2011-1473]

2011-12-21 Thread Hasan, Rezaul (NSN - US/Arlington Heights)
Hello All, We have openssl 0.9.8r on our Linux Server. Application thats used is httpd. A Nessus security scan on our Linux server tells us that we may be vulnerable to a potential DOS due to SSL/TLS Renegotiation Vulnerability [CVE-2011-1473]. The suggestions of mitigating these (we believe) ar

faled to read serial number(ASN1_INTEGER) from x509 certiticate using openssl

2011-12-21 Thread chetanrun
How to read certificate details ( serial number, issuer , subject details) from x509 certificate using Openssl. I parsed P12 file using PKCS12_parse(), then retrieved serial number in ASN1_INTEGER format from objtained x509 certificate. But how do I parse it so that it can be read. -- View this

Re: Problems with including zlib

2011-12-21 Thread Jakob Bohm
On 12/19/2011 10:38 AM, grarpamp wrote: I have a case that needs zlib statically in openssl. But I can't seem to make that. Only dynamic is made. For testing I put zlib125 in its own. Then for openssl... ./config --prefix= --with-zlib-include=/include --with-zlib-lib=/lib shared zlib make make

Memory leak in SSL_CTX_load_verify_locations()

2011-12-21 Thread nandan shantharaj
Hi All, SSL_CTX_load_verify_locations() is causing memory leak in my application. Folowing is the function trace. 262 1072 bytes leaked in 4 blocks (2.25% of all bytes leaked) 263 These range in size from 268 to 268 bytes and are allocated 264 #0 0x83ffefb9b6b8 in default_mall

Re: Malformed Certificate Created for Windows but Not Linux

2011-12-21 Thread Jakob Bohm
On 12/17/2011 1:36 AM, harrije wrote: The certificate malformation was for the Validity fields of notBefore and notAfter. Turns out the problem was how I built it. I followed the instructions in INSTALL.W32 because I needed to link the results with other W32 binaries, however I was building on an

Re: SSL/TLS Renegotiation Vulnerability [CVE-2011-1473]

2011-12-21 Thread Jakob Bohm
On 12/21/2011 12:18 AM, Hasan, Rezaul (NSN - US/Arlington Heights) wrote: Hello All, You will have a much better chance of getting an answer if you don't use the "Reply" button to start a new discussion. Most readers of this list/forum use software which groups together replies under the message

Re: Transferring DH public key from server to client

2011-12-21 Thread Jakob Bohm
On 12/17/2011 2:44 AM, Dave Thompson wrote: Sorry for the delay, I misplaced this temporarily. From: owner-openssl-us...@openssl.org On Behalf Of Odomae Bro Sent: Thursday, 08 December, 2011 12:02 I am now working with 1.0.0.e and am able to get the anonymous DH going.