[openssl-users] Async BIO

2016-05-19 Thread Victor_Webber
Has anyone implemented the asynchronous version of the SSL_xxx(). It is nice to see that they appear to be supported, but I would like to know if anyone has actually implemented an application which uses the asynch version of the calls. I looked at the source, and there were a few niche areas

Re: [openssl-users] s_client/s_server trouble

2016-05-19 Thread Viktor Dukhovni
On Thu, May 19, 2016 at 06:31:54PM +0200, Jakob Bohm wrote: > >With 0.9.8 s_client or s_server will be able to use the default > >CApath that is probably hashed with the 0.9.8-compatible hash > >algorithm, allowing either or both to construct a more complete > >chain, > > Indeed, I find it very co

Re: [openssl-users] s_client/s_server trouble

2016-05-19 Thread Jakob Bohm
On 19/05/2016 18:19, Viktor Dukhovni wrote: With 0.9.8 s_client or s_server will be able to use the default CApath that is probably hashed with the 0.9.8-compatible hash algorithm, allowing either or both to construct a more complete chain, Indeed, I find it very confusing that specifying -CAfil

Re: [openssl-users] s_client/s_server trouble

2016-05-19 Thread Viktor Dukhovni
On Thu, May 19, 2016 at 05:58:11PM +0200, Jakob Bohm wrote: > What kind (and size) of keys are in your certificates? > > That sounds like the most likely issue. Perhaps that dhparam2049.pem does not actually contain a 2048-bit prime. I don't recall a floor on RSA key sizes in 1.0.1. The CHANGE

Re: [openssl-users] s_client/s_server trouble

2016-05-19 Thread Jakob Bohm
What kind (and size) of keys are in your certificates? That sounds like the most likely issue. On 19/05/2016 17:26, Jan Just Keijser wrote: Hi all, no one has seen this as well? I've seen other mails fly by on openssl-users after I posted this, yet no response to my query, nor to a previous

Re: [openssl-users] s_client/s_server trouble

2016-05-19 Thread Jan Just Keijser
Hi all, no one has seen this as well? I've seen other mails fly by on openssl-users after I posted this, yet no response to my query, nor to a previous mail I sent (about pkcs7). Should I file bug reports instead? thx, JJK / Jan Just Keijser Jan Just Keijser wrote: hi all, I've just run i

[openssl-users] Debug information in pdb file

2016-05-19 Thread hokusai
Hi all, Is there an 'official' way (or at least some recommended modification to the build scripts) to generate pdb files with the same name of the libraries? This question has been asked in the past. I wonder if there is really no straightforward solution, or am I missing something? I'm using O