openSSL performance

(sorry for duplicating the thread, I did'nt receive any answer in my mailbox as I expected, I only saw them through the mail archive...?) Are you sure that the key exchange is not a factor? Have you measured SSL setup times compared to post-setup transfer times?4K RSA is computationally

openSSL performance

RSA key size only affects handshake, and should be costly client side only if using client-auth; are you?No; as client and server code is under my responsability, I chosed to also asked for client-auth. Still, I don't see how this could be the reason for my slowdown given the overall data

reason behind error message

i am getting the following error from openssl. Any inputs where things are going wrong? error:140A4044:SSL routines:SSL_clear:internal error -Thanks in advance.

RE: openSSL performance

Ø (sorry for duplicating the thread, I did'nt receive any answer in my mailbox as I expected, I only saw them through the mail archive...?) It’s common (and many would say, the correct behavior) for mailing list replies to go to the mailing list. Ø I've started with a 1K key and later on

Re: reason behind error message

On Tue, Oct 08, 2013 at 02:52:33PM +0530, Mithun Kumar wrote: I am getting the following error from openssl. Any inputs where things are going wrong? error:140A4044:SSL routines:SSL_clear:internal error int SSL_clear(SSL *s) { if (s-method == NULL) {

Signature did not match the certificate request

Hi !! I'm signing a CSR that is generated by Windows Phone. But in that CSR I have a null character in the subject property. After changing the subject property and trying to sign the CSR i get an error message Signature did not match the certificate request How to get through this ?? Here is

Re: Signature did not match the certificate request

On 08.10.2013 15:00, Rahul Tolani wrote: Actual Subject Property = subject=/CN=B1C43CD0-1624-5FBB-8E54-34CF17DFD3A1\x00 this is just a bug - the \x00 looks like the terminating \0 ... Required Subject Property = subject=/CN=B1C43CD0-1624-5FBB-8E54-34CF17DFD3A1 Greetings, Walter

Re: Signature did not match the certificate request

On Tue, Oct 08, 2013 at 06:00:39AM -0700, Rahul Tolani wrote: I'm signing a CSR that is generated by Windows Phone. But in that CSR I have a null character in the subject property. You're not signing the CSR, the phone did that, which is why you can't modify it. You're trying to issue a

Re: Strange behaviour

I thought similar, but it becomes more strange; if the webserver uses a certificate that is signed from a CA with built in token, then this needn't be; and in case it is signed from my internediate certificate, this doesn't help ... Greetings, Walter On 07.10.2013 09:39, Mat Arge wrote:

RE: Implementing msCRLNextPublish extension

Hi, May someone help me or give me a clue ? Regards Adrien From: apis...@hotmail.com To: openssl-users@openssl.org Subject: Implementing msCRLNextPublish extension Date: Fri, 13 Sep 2013 11:24:06 +0200 Hi, A new non-critical extension is available in order to download the Crl before his

Displaying DH parameter size

I'm writing a client app that uses OpenSSL to connect to an SSL server. I want to display the number of bits used for the DH parameter set. How do I do this? So far I've found struct dh_st and it has (from dh.h): BIGNUM *p;

RE: openSSL performance

Aside: this message was pretty garbled, and in richtext which my Outlook won't fix sensibly. I've tried to manually reformat what I can, but it would be easier if you posted plaintext. From: owner-openssl-us...@openssl.org On Behalf Of laurent.boll...@laposte.net Sent: Tuesday, October 08,

RE: Displaying DH parameter size

From: owner-openssl-us...@openssl.org On Behalf Of Sean Alexandre Sent: Tuesday, October 08, 2013 20:08 I'm writing a client app that uses OpenSSL to connect to an SSL server. I want to display the number of bits used for the DH parameter set. snip I've tried (psuedocode): SSL *ssl;