RE: a question about building openssl

2006-01-03 Thread Airey, John
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of George R Goffe Sent: 30 December 2005 22:09 To: openssl-users@openssl.org Subject: a question about building openssl Howdy, I have looked a little on the web sites for the answer to this

SSL_accept error... need help

2006-01-03 Thread Samy Thiyagarajan
hi, I am testing a basic (an echo)TLS server with the openSSL client s_client. I get the following error server side : SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:888 client side: SSL_23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:489 I use SSLv23 as my method in the

Re: regarding usage of SSL_CTX in server

2006-01-03 Thread Peter Sylvester
jimmy wrote: Peter Sylvester wrote: It happened that I played with this a bit. It is not just that you have a list of servers in one context, all parameters of the server e;g. requirements for user certs etc can be different, so a separate SSL_CTX seems useful. does this theoretically rule

Re: SSL_accept error... need help

2006-01-03 Thread Bernhard Froehlich
Samy Thiyagarajan wrote: hi, I am testing a basic (an echo)TLS server with the openSSL client s_client. I get the following error [...] Have you checked the samples available on http://www.opensslbook.com/code.html ? If I remember it right there are code samples for a SSL server which

no EVP_dup?

2006-01-03 Thread Perry L. Jones
How do I dup a private key there is an X509_dup but I don't see a EVP_PKEY_dup ? Thanks, Perry __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: no EVP_dup?

2006-01-03 Thread Arno Garrels
Perry L. Jones wrote: How do I dup a private key there is an X509_dup but I don't see a EVP_PKEY_dup ? Good question, I missed that feature as well. Thanks, Perry __ OpenSSL Project

OpenSSL compile flags

2006-01-03 Thread Ryan B. Lynch
When building OpenSSL version 0.9.7i (and all prior versions that I've seen) on Linux, the compiler flags passed to 'gcc' include: -O3 -fomit-frame-pointer -mcpu=pentium This occurs even when the output of `uname -m` and `arch` are i486. I have a few machines with hacked 'uname' and 'arch'