ECDSA support for Android

2011-10-27 Thread Bell, Adam
Hello, I am attempting to activate EC support on Android 2.2.1. (openssl 0.9.8.m) I have successfully removed the OPENSSL_NO_EC, OPENSSL_NO_ECDSA, and OPENSSL_NO_ECDH from the proper makefiles and Included all EC files from openssl/ec, openssl/ecdsa, and opensll/ecdh. Everything compiles and

Re: strong TLS connections

2011-10-27 Thread Jakob Bohm
On 10/27/2011 2:14 AM, Kristen J. Webb wrote: On 10/8/11 1:16 AM, Michael Sierchio wrote: On Fri, Oct 7, 2011 at 7:40 PM, Kristen J. Webbkw...@teradactyl.com wrote: My understanding is that a TLS connection with a server cert only identifies the server to the client. This leads to a MiTM

SSL session ID vs session ticket

2011-10-27 Thread Matthias Meixner
Hello! When upgrading to version 0.9.8r my system stopped supporting session resumption. It looks like session tickets are the reason for this. I was using some external session cache to support session resumption on a cluster of servers where it should be possible that each server in the

Re: strong TLS connections

2011-10-27 Thread Michael S. Zick
On Wed October 26 2011, Kristen J. Webb wrote: Having an app that can use certs, it appears, is nothing compared with how to deploy it and manage those certs ;) A general truism not specific to certs. Recognizing (or implementing) a need for trust is one thing; Determining (or establishing)

Re: SSL session ID vs session ticket

2011-10-27 Thread Jeffrey Walton
On Thu, Oct 27, 2011 at 8:09 AM, Matthias Meixner matthias.meix...@verifone.com wrote: Hello! When upgrading to version 0.9.8r my system stopped supporting session resumption. It looks like session tickets are the reason for this. I was using some external session cache to support session

Re: OpenSSL 1.0.1 example with SRP

2011-10-27 Thread Norm Green
, the snapshot is broken. Jeff === System === uname -a Linux studio 2.6.32-34-generic #77-Ubuntu SMP Tue Sep 13 19:39:17 UTC 2011 x86_64 GNU/Linux === Server === openssl-1.0.1-stable-SNAP-20111027$ ./apps/openssl s_server -cipher SRP -nocert -tls1 -accept 57784 -debug WARNING: can't open

Re: OpenSSL 1.0.1 example with SRP

2011-10-27 Thread Dr. Stephen Henson
On Thu, Oct 27, 2011, Norm Green wrote: The best I can tell, the snapshot is broken. At this point, I wouldn't be surprised. Update: I made some (major) changes to my example code based on the SRP code in ssltest.c. Mainly, I implemented and used all the SRP callback functions.

Re: OpenSSL 1.0.1 example with SRP

2011-10-27 Thread Norm Green
That did the trick! My example code now sets up an SSL client/server connection using SRP. Thanks very much Steve and all others who helped. Norm - Original Message - From: Dr. Stephen Henson st...@openssl.org To: openssl-users@openssl.org Sent: Thursday, October 27, 2011

Re: SSL session ID vs session ticket

2011-10-27 Thread Richard Könning
Am 27.10.2011 14:09, schrieb Matthias Meixner: Hello! When upgrading to version 0.9.8r my system stopped supporting session resumption. It looks like session tickets are the reason for this. I was using some external session cache to support session resumption on a cluster of servers where

Re: SSL session ID vs session ticket

2011-10-27 Thread Dr. Stephen Henson
On Thu, Oct 27, 2011, Richard Knning wrote: Am 27.10.2011 14:09, schrieb Matthias Meixner: Hello! When upgrading to version 0.9.8r my system stopped supporting session resumption. It looks like session tickets are the reason for this. I was using some external session cache to

writing an SSH server

2011-10-27 Thread David Durham
Hi all, I'm new to C++ and libssl, but nevertheless trying to write an SSH server. I have gone through tutorials and believe I have a working server that initializes and SSL context, binds and listens on a TCP socket, and accepts a connection. Using a debugger I see that if I try to ssh

RE: Issue with Connection Reset

2011-10-27 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Ratin, Yuliya S. Sent: Wednesday, 26 October, 2011 09:55 Connection to SQL Server 2008 R2 database (cluster install) We're seeing the connection reset while testing from multiple sources and applications - it seems

Re: writing an SSH server

2011-10-27 Thread Eric S. Eberhard
I believe the last function, the write, is missing a return false with the error message? Writing servers is VERY difficult to make 100% reliable, good logging, etc. I have many years experience and still avoid it when I can. You need to understand blocking and non-blocking calls, your

Re: writing an SSH server

2011-10-27 Thread David Durham
On Thu, Oct 27, 2011 at 4:09 PM, Eric S. Eberhard fl...@vicsmba.com wrote: I believe the last function, the write, is missing a return false with the error message? Doesn't matter though, it's not an issue. Thanks. __ OpenSSL

RE: writing an SSH server

2011-10-27 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of David Durham Sent: Thursday, 27 October, 2011 16:48 I'm new to C++ and libssl, but nevertheless trying to write an SSH server. I have gone through tutorials and believe I have a working server that initializes and SSL context, binds and

RE: writing an SSH server

2011-10-27 Thread Eric S. Eberhard
I end up using SSL because, weirdly, credit card companies and shipping companies (I do business software), and so forth, all use SSL -- almost always HTTPS -- and I don't have a call for a protocol. It would be REALLY cool if you could make a wrapper on stunnel to handle the H protocol