Re: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

2012-05-24 Thread Greg Wittmeyer
In response to your message on 18-May-2012 5:57:33a I added the line of code per http://cvs.openssl.org/chngview?cn=22565 but it did not help. The latest snapshot only mentions one other change, and it is unrelated. But I tried it anyway, and still no luck. Exact same error occurs. Sincerely

Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-24 Thread Richard Levitte
In message on Thu, 24 May 2012 17:46:49 +0530, Sudarshan Raghavan said: sudarshan.t.raghavan> Hi, sudarshan.t.raghavan> sudarshan.t.raghavan> I am using CRYPTO_set_mem_functions to use our own custom memory sudarshan.t.raghavan> routines in a non blocking proxy implementation. This was work

Re: Questions about method to compress ECDSA signatures

2012-05-24 Thread Matt Caswell (fr...@baggins.org)
On 24/05/12 14:40, Khuc, Chuong D. wrote: Hello, I was able to sign my message using the ECDSA 256 function from openssl: ECDSA_SIG *signature = ECDSA_do_sign( &message[0], message_length, eckey); And the sign is verified to be valid also. And my question is about the compression of the signatur

RE: pkcs11 Certificate Selection Dialog

2012-05-24 Thread CASTELLUCCI, BEN CIV DFAS
After thinking about it I realized that was a silly suggestion - openssl.cnf is used by the command line client which is in the application realm - we are talking the libraries themselves here (which, as you have stated, know nothing about what the application is doing) so that obviously won't work

X509 Subject Alternative Name

2012-05-24 Thread Nou Dadoun
Hi folks, I'm looking for openssl information on extracting a certificate's list of Subject Alternative names for matching a query substring to select a certificate in particular contexts. All the openssl sample code that I've managed to find seems to be more heavy-weight than I'm interested

Re: License text, OpenSSL used by FFmpeg

2012-05-24 Thread Jakob Bohm
Since there is misinformation on this floating around, even in the openssl.org FAQ itself, here are the GPL+OpenSSL, and LGPL+OpenSSL rules: 1. Code under LGPL (any version) can link to OpenSSL with each of part (OpenSSL and the code under LGPL) remaining under its own license. LGPL consider

Undefined symbol _OCSP_RESPID_free in libssl.1.0.0.dylib

2012-05-24 Thread Sachin Srivastava
Hi all, I build openssl-1.0.1c on Snow Leopard (10.6.8) with 10.5 SDK used this as configure option: ./Configure darwin-i386-cc --prefix=/usr/local/i386 --shared "-isysroot /Developer/SDKs/MacOSX10.5.sdk -mmacosx-version-min=10.5" make all make install now when I use the libs to compile a test pr

Questions about method to compress ECDSA signatures

2012-05-24 Thread Khuc, Chuong D.
Hello, I was able to sign my message using the ECDSA 256 function from openssl: ECDSA_SIG *signature = ECDSA_do_sign( &message[0], message_length, eckey); And the sign is verified to be valid also. And my question is about the compression of the signature. I understand that the signature has an r

RE: pkcs11 Certificate Selection Dialog

2012-05-24 Thread CASTELLUCCI, BEN CIV DFAS
Thank you for the reply - all of that makes perfect sense. And I am fairly certain it is because each operation is a new execution of the application. Is there a possibility of maybe controlling this behavior with an external file, such as openssl.cnf? What I mean is maybe there could be a key in

Re: License text, OpenSSL used by FFmpeg

2012-05-24 Thread Antti Peuhkurinen
Thanks! Binary we include from FFmpeg uses OpenSSL's .so and so FFmpeg can't be "just" LGPL anymore. Seems that many programs having this case list FFmpeg with LGPL license without any clause and list OpenSSL separately with OpenSSL's license. Might be that we do the same :) -Antti On Wed, May 2

Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-24 Thread Dr. Stephen Henson
On Thu, May 24, 2012, Sudarshan Raghavan wrote: > Hi, > > I am using CRYPTO_set_mem_functions to use our own custom memory > routines in a non blocking proxy implementation. This was working fine > in 0.9.8 and 1.0.0 but with 1.0.1c I can see that the custom free > routine is being invoked with a

Re: pkcs11 Certificate Selection Dialog

2012-05-24 Thread Dr. Stephen Henson
On Thu, May 24, 2012, CASTELLUCCI, BEN CIV DFAS wrote: > Greetings. > > Applications that make use of OpenSSL and deal with smart cards prompt > the user to select a client certificate to use via a modal popup dialog > window when there is more than one client certificate in the store that > woul

pkcs11 Certificate Selection Dialog

2012-05-24 Thread CASTELLUCCI, BEN CIV DFAS
Greetings. Applications that make use of OpenSSL and deal with smart cards prompt the user to select a client certificate to use via a modal popup dialog window when there is more than one client certificate in the store that would satisfy the request. There does not seem to be a way to 'cache' th

Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-24 Thread Sudarshan Raghavan
Hi, I am using CRYPTO_set_mem_functions to use our own custom memory routines in a non blocking proxy implementation. This was working fine in 0.9.8 and 1.0.0 but with 1.0.1c I can see that the custom free routine is being invoked with a NULL argument after calling SSL_free and this results in the