RE: java to openssl

2012-01-16 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Philip R. Landreth > Sent: Friday, 13 January, 2012 09:55 > The files were given to me in .txt format and the original file is a > .txt. as for the "keyfile" being in .txt I don't know. I used -p to > print the key and iv and used those instead

RE: Removing a cipher

2012-01-16 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Suter, Ray CTR NAVAIR, 724000D > Sent: Friday, 13 January, 2012 11:18 > Is there a way to remove a cipher completely from ever being > used? We use retina and it is picking up > DES-CBC-SHA and I need to remove it from being used, seen, or >

Re: Deadlock - SSL_Connect()

2012-01-16 Thread Michael S. Zick
On Mon January 16 2012, Nathan Smyth wrote: > Yes, strangely this doesn't help. Actually, what I do is set the socket to > non-blocking AFTER the SSL handshake, which I thought should work... > > Could there be some issue with numerous SSL connections between the same > parties? Or maybe it's >

Re: Deadlock - SSL_Connect()

2012-01-16 Thread Gayathri Sundar
you should be setting the non blocking thing before the ssl connect is called, which is part of the SSL handshake. SSL_connect will internally do socket read/write, so if its blocking then it will not come out until the underlying operation is completed. setting it after the SSL connect is done, wi

Re: Deadlock - SSL_Connect()

2012-01-16 Thread Nathan Smyth
Yes, strangely this doesn't help. Actually, what I do is set the socket to non-blocking AFTER the SSL handshake, which I thought should work... Could there be some issue with numerous SSL connections between the same parties? Or maybe it's some threading issue - perhaps SSL has some special con

Re: Deadlock - SSL_Connect()

2012-01-16 Thread Gayathri Sundar
did you try making use of non blocking fd? it cannot deadlock in if you use that. Thanks --Gayathri On Mon, Jan 16, 2012 at 10:17 AM, Nathan Smyth wrote: > Just seeking advice/things to consider for deadlock (or 'wait') on a > SSL_Connect(). Unfortunately it stalls here, so there's no return co

Deadlock - SSL_Connect()

2012-01-16 Thread Nathan Smyth
Just seeking advice/things to consider for deadlock (or 'wait') on a SSL_Connect(). Unfortunately it stalls here, so there's no return code. The project establishes a number of SSL conns between various application instances. It's in C++, where standard socket libs are used to establish the con

Re: Re: Verify intermediate certificate

2012-01-16 Thread Dr. Stephen Henson
On Mon, Jan 16, 2012, Eisenacher, Patrick wrote: > > -Original Message- > > From: Steffen DETTMER > > > > * Johannes Bauer wrote on Fri, Jan 13, 2012 at 14:22 +0100: > > [...] > > > >>> Or, in other words: Let's assume I have a ultimate root > > > >>> (self-signed) "Root" and a branched C

RE: Re: Verify intermediate certificate

2012-01-16 Thread Eisenacher, Patrick
> -Original Message- > From: Steffen DETTMER > > * Johannes Bauer wrote on Fri, Jan 13, 2012 at 14:22 +0100: > [...] > > >>> Or, in other words: Let's assume I have a ultimate root > > >>> (self-signed) "Root" and a branched CA "X". I would like to > > >>> trust "X" and all it's children,