Re: How text-ish are PEM files?

2020-01-27 Thread Viktor Dukhovni
On Tue, Jan 28, 2020 at 02:17:21AM +, Douglas Morris via openssl-users wrote: > I expect from RFC 8555 that an ACME server issues a full chain > certificate as a reply body in the PEM format. The media type is > 'application/pem-certificate-chain'. https://www.iana.org/assignments/media

How text-ish are PEM files?

2020-01-27 Thread Douglas Morris via openssl-users
I expect from RFC 8555 that an ACME server issues a full chain certificate as a reply body in the PEM format. The media type is 'application/pem-certificate-chain'. I can only guess from RFC 1421, sec. 4.3.1 that the byte encoding of the certificate necessarily uses line breaks. I get US-ASCII

RE: Re:openssl-users Digest, Vol 62, Issue 6

2020-01-27 Thread Dr. Matthias St. Pierre
e send buffer is full and there is nothing to receive, I will keep getting WANT_READ for receive, and WANT_WRITE for send until actual data arrives or can be sent which defeats the purpose of epoll. I've been banging my head here for several days. Any help here will be much appreciated. Thx, Er

RE: Determine that there is no forward progress with non blocking SSL socket

2020-01-27 Thread Michael Wojcik
From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Eran Borovik Sent: Monday, January 27, 2020 07:07 > When do I stop? what is the best way to actually determine there can > be no more forward progress both on the send and the receive side, and > epoll must be used? ...

Re: Decryption slower in 1.1.1 branch?

2020-01-27 Thread Viktor Dukhovni
On Mon, Jan 27, 2020 at 06:20:27PM +, Dan Heinz wrote: > I upgraded a library that used OpenSSL 1.0.2 to the OpenSSL 1.1.1d. > On Windows, I have found that the time to decrypt had doubled. After > a bit of timestamp logging, I found the RSA_private_decrypt function > is taking twice as long

Re:openssl-users Digest, Vol 62, Issue 6

2020-01-27 Thread RUBEN BARAINCA
Hi!! I want to unsubscribe.  Original message From: openssl-users-requ...@openssl.orgDate: Mon, Jan 27, 2020, 7:20 PMTo: openssl-users@openssl.orgSubject: openssl-users Digest, Vol 62, Issue 6Send openssl-users mailing list submissions to openssl-users@openssl.orgTo subscribe or uns

Decryption slower in 1.1.1 branch?

2020-01-27 Thread Dan Heinz
I upgraded a library that used OpenSSL 1.0.2 to the OpenSSL 1.1.1d. On Windows, I have found that the time to decrypt had doubled. After a bit of timestamp logging, I found the RSA_private_decrypt function is taking twice as long with 1.1.1d as it did with 1.0.2t. This is being called from a W

Determine that there is no forward progress with non blocking SSL socket

2020-01-27 Thread Eran Borovik
Hi all, My application is using non-blocking sockets to send and receive data. To avoid issues, my code guarantees that a specific socket is always owned by a specific thread, thus preventing any issues or races from concurrently running send and receive at the same time on the same socket. I've re

Re: What option is not recognized by OpenSSL 1.1.1d?

2020-01-27 Thread Matt Caswell
On 26/01/2020 21:03, Jeffrey Walton wrote: > I'm trying to convert some scripts from OpenSSL 1.0.2 to OpenSSL 1.1.1d. > > Configure is dying: > > * Unsupported options: no-comp > --prefix=/home/jwalton/tmp/build-test > --libdir=/home/jwalton/tmp/build-test/lib > > According to INSTALL