Re: HTTPS connection hangs during SSL handshake

2012-09-12 Thread Aleksandr Konstantinov
On Tuesday 11 September 2012, Supratik Goswami wrote: Is there no one in the community who can help me to find the cause of the problem ? Maybe You have firewall issues on office IP macine. Have You tried tcpdump or similar utility to check if there is something being sent/received? Regards,

Re: Why is the OpenSSL documentation incomplete?

2012-09-12 Thread Matt Caswell
On Wed, 2012-09-12 at 00:28 +0300, farmdve data.bg wrote: I have seen a lot of applications that utilize the OpenSSL library, however I see that the majority of the documentation is incomplete. In particular, I need some documentation for the EC package in the 'crypto' sub-folder, I mean,

FIPS-Capable openssl-1.0.1c: HP-UX parisc2-gcc hmac.c Build Crashes if FIPS Algs Specified, Runs Otherwise

2012-09-12 Thread Welling, Conrad Gerhart
openssl-users: Has anyone tried building FIPS-capable openssl-1.0.1c on HP PA-RISC 2.0? If so, please give me a clue. I can build the FIPS Object Module and link it, but, attempts to use FIPS algs fail although non-FIPS algs work. Following is brief description of test with hmac.c example

Re: certificate validation issues with openssl 1.0.0 and expired certificates in cafile

2012-09-12 Thread Ashok C
Hi, I don't think this question was answered. Could you please reply? -- Ashok On Tue, Jul 31, 2012 at 11:13 PM, Klaus Darilion klaus.mailingli...@pernau.at wrote: Hi! I wrote a small program which dumps all root certificates from Windows certificate store into a file. Then I use openssl

Re: Does this mailinglist work?

2012-09-12 Thread Carlo Wood
On Mon, 10 Sep 2012 13:21:12 -0700 Charles Mills charl...@mcn.org wrote: Yes, it works. It may be moderated. Please be patient. Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Carlo Wood Sent: Monday,

Re: HTTPS connection hangs during SSL handshake

2012-09-12 Thread Supratik Goswami
It is not a firewall issue, I checked this from outside firewall. The strange part of the problem is it does not happen always, it works intermittently. [root@gateway bin]# openssl s_client -bugs -connect test.mydomain.com:443 -msg -state CONNECTED(0003) SSL_connect:before/connect

Re: FIPS-Capable openssl-1.0.1c: HP-UX parisc2-gcc hmac.c Build Crashes if FIPS Algs Specified, Runs Otherwise

2012-09-12 Thread Steve Marquess
On 09/11/2012 10:41 PM, Welling, Conrad Gerhart wrote: openssl-users: Has anyone tried building FIPS-capable openssl-1.0.1c on HP PA-RISC 2.0? If so, please give me a clue. We haven't had access to PA-RISC for some time now, so that platform is effectively unsupported. -Steve M. --

Re: Parsing X509 certificate subjectAltName

2012-09-12 Thread Kenneth Goldman
If I shouldn't use GEN_IPADD, what should I use? The goal is to extract the text value associated with several OIDs. dumpasn1 says the values are PrintableString. -- Ken Goldman kgold...@us.ibm.com 914-945-2415 (862-2415) From: Dr. Stephen Henson st...@openssl.org To:

Re: Why is the OpenSSL documentation incomplete?

2012-09-12 Thread Matt Caswell (fr...@baggins.org)
Username is guest, password is guest. Matt On 12 September 2012 14:12, Kenneth Goldman kgold...@us.ibm.com wrote: All I get is an (ironically unsecured) log in page. Do you have a link to the actual documentation? -- Ken Goldman kgold...@us.ibm.com 914-945-2415 (862-2415) From:

Re: Parsing X509 certificate subjectAltName

2012-09-12 Thread Dr. Stephen Henson
On Wed, Sep 12, 2012, Kenneth Goldman wrote: If I shouldn't use GEN_IPADD, what should I use? The goal is to extract the text value associated with several OIDs. dumpasn1 says the values are PrintableString. You check each value of the returned GENERAL_NAMES structure until you find the

Re: openssl on a home LAN

2012-09-12 Thread Gayathri Sundar
Hi John, I definitely do not agree with charles's email, but what I think he meant is, you need to write programs to use OpenSSL. Its an installable library, which you need to invoke from your application using its exposed APIs and recompile your code, link OpenSSL library and execute for it to

RE: openssl on a home LAN

2012-09-12 Thread Charles Mills
A thousand pardons. You totally misapprehend my intent. I guess that's a classic hazard of e-mail, isn't it? You're right, I make no pretense of being a moderator. It's a forum, and I'm just a citizen trying to help you out by answering the question you asked in the forum. I won't bother

Memory issues with ssl handshake

2012-09-12 Thread Thomas Eckert
Hi, Valgrind gives me a *lot* of messages like this ==19021== 2,056 bytes in 2 blocks are indirectly lost in loss record 186 of 190 ==19021==at 0x68EAC8B: malloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==19021==by 0x6C472DB: default_malloc_ex (mem.c:79) ==19021==by

RE: Memory issues with ssl handshake

2012-09-12 Thread Charles Mills
Not sure if it help at all but FWIW I am using Windows pre-built OpenSSL dll's with server client certificates, CAs, DH keys, and a CRL, and I am seeing no memory leaks whatsoever in Visual Studio 2010. Charles -Original Message- From: owner-openssl-us...@openssl.org

RE: openssl on a home LAN

2012-09-12 Thread John A. Wallace
No problem and no hard feelings. Take care and have a good day. Thanks. John From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Charles Mills Sent: Wednesday, September 12, 2012 11:14 AM To: openssl-users@openssl.org Subject: RE: openssl on a

RE: openssl on a home LAN

2012-09-12 Thread Charles Mills
Thanks. Take care. Good luck with your home LAN. Charles From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of John A. Wallace Sent: Wednesday, September 12, 2012 9:51 AM To: openssl-users@openssl.org Subject: RE: openssl on a home LAN No problem and

build openssl for android

2012-09-12 Thread Indtiny s
Hi, I have to build the openssl 1.0.1c for the android , I have added new ECC-CCM chiper key support at the openssl , hence i want build the same for android-ndk and use in my application as shared libraries . is there any guide to build the same ..? Rgds Indu

Re: build openssl for android

2012-09-12 Thread Jason Goldberg
For Android, check out this project as an example: https://github.com/eighthave/openssl-android They have the Android-specific Makefile configs for doing an NDK build. You could patch it with your changes and generate the .so libraries you need. On Sep 12, 2012, at 12:05 PM, Indtiny s

RE: openssl on a home LAN

2012-09-12 Thread John A. Wallace
Hi, Gayathri, I appreciate the clarification. It was helpful, yes. I think my confusion stemmed from the fact that in the past while installing one or another program, I found it to say that OpenSSL must be installed on your system for this program to work properly. Okay, I think I got it now,

Re: Why is the OpenSSL documentation incomplete?

2012-09-12 Thread farmdve data.bg
Thanks, will check it out. On Wed, Sep 12, 2012 at 4:30 PM, Matt Caswell (fr...@baggins.org) fr...@baggins.org wrote: Username is guest, password is guest. Matt On 12 September 2012 14:12, Kenneth Goldman kgold...@us.ibm.com wrote: All I get is an (ironically unsecured) log in page. Do

Re: build openssl for android

2012-09-12 Thread farmdve data.bg
Do not use that one, it's old. Use this one https://github.com/aluvalassuman/OpenSSL1.0.1cForAndroid Just calling ndk-build should work. On Wed, Sep 12, 2012 at 8:34 PM, Jason Goldberg jgoldb...@oneid.com wrote: For Android, check out this project as an example:

Re: build openssl for android

2012-09-12 Thread farmdve data.bg
Oh, and I highly suggest specifying the TARGET_ABI so that the code is optimized(considerable boost compared to without specifying it). So either add TARGET_ABI := android-APILEVEL-armeabi to android-config.mkOR open Android.mk in the crypto and ssl folders, and add it just before