[openssl-users] "shutdown while in init" error from SSL_read

2017-11-01 Thread Jeffrey Lindsey
What might cause the following error as a result of a call to SSL_read: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init I'm seeing this error reported well after the initial handshake should have been completed, and before any call to SSL_shutdown on the SSL object given to

[openssl-users] Problem with using EC private keys

2017-11-01 Thread rmawatson rmawatson
Hi, I am confused about the two different ways I can generate an EC private key and why this is causing me problems with the test s_client s_server applications So, I am using the command below to generate a private key, then using this to create a certificate to work with openssl s_client

Re: [openssl-users] OCSP_BASICRESP_verify() in 1.1.0

2017-11-01 Thread Benjamin Kaduk via openssl-users
On 11/01/2017 09:52 AM, Dave Coombs wrote: >>> It would be nice, though, if the API provided a way to get the signer's >>> certificate. There is OCSP_resp_get0_signature(), but that only returns >>> the bit string. Comparable functions in other modules (eg: >>> X509_get0_signature(),

Re: [openssl-users] OCSP_BASICRESP_verify() in 1.1.0

2017-11-01 Thread Dave Coombs
>> It would be nice, though, if the API provided a way to get the signer's >> certificate. There is OCSP_resp_get0_signature(), but that only returns the >> bit string. Comparable functions in other modules (eg: >> X509_get0_signature(), X509_REQ_get0_signature(), X509_CRL_get0_signature(),