Enable A Individual Cipher

2014-06-25 Thread Kanchan
I got an error Error setting cipher list on following ciphers EXP1024-RC4-MD5 EXP1024-RC2-CBC-MD5 EXP1024-DES-CBC-SHA EXP1024-RC4-SHA EXP-DH-RSA-DES-CBC-SHA __ OpenSSL Project

Problem in cipher set

2014-06-25 Thread Kanchan
I am unable to set EXPORT1024 ciphers i got an error error setting cipher list 30157:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl_lib.c:1222: __ OpenSSL Project

Unable to build openssl 0.9.8za with fips module 1.2

2014-06-25 Thread Pradeep AV
Hi OpenSSl , I have followed the below method . Can you please check if i am following the correct procedure = 1. Compile openssl-fips1.2 module = a. Extract the contents of openssl-fips-1.2.tar.gz to

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jens Maus
Hello Viktor, On 2014-06-25 at 00:49, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Tue, Jun 24, 2014 at 07:58:27PM +0200, Jens Maus wrote: conn-ssLCtx = SSL_CTX_new(SSLv23_client_method()); SSL_CTX_set_options(conn-sslCtx, SSL_OP_ALL | SSL_OP_NO_SSLv2);

Re: Problem in cipher set

2014-06-25 Thread ankur dwivedi
This ciphers are not supported by servers. Check by using openssl ciphers command which export ciphers are supported. On Wed, Sep 7, 2011 at 11:31 AM, Kanchan kanchans...@gmail.com wrote: I am unable to set EXPORT1024 ciphers i got an error error setting cipher list 30157:error:1410D0B9:SSL

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Michel
Excerpt from the book : Network Security with OpenSSL : An SSL_CTX object will be a factory for producing SSL connection objects. This context allows us to set connection configuration parameters before the connection is made, such as protocol version, certificate information, and verification

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jens Maus
On 2014-06-25 at 15:06, Michel msa...@paybox.com wrote: Excerpt from the book : Network Security with OpenSSL : An SSL_CTX object will be a factory for producing SSL connection objects. This context allows us to set connection configuration parameters before the connection is made, such as

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Viktor Dukhovni
On Wed, Jun 25, 2014 at 03:23:27PM +0200, Jens Maus wrote: Ok, but then please allow the question how I should deal with SSL_CTX_set_cert_verify_callback(sslCtx, func, conn); Set this callback once, with a conn value of 0. Use ssl_idx = SSL_get_ex_data_X509_STORE_CTX_idx(); conn =

Converting public part of 'EVP_PKEY' structure to 'unsigned char*' , and back.

2014-06-25 Thread pratyush parimal
Hi all, I was trying to use ECDH (in OpenSSL v1.0.1f) for a project, and after generating the EVP_PKEY structure, I needed to extract its public key and send it over to the other party. I was unable to find a straightforward way which worked for me. What I tried was this: EVP_PKEY*

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jens Maus
On 2014-06-25 at 16:28, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Wed, Jun 25, 2014 at 03:23:27PM +0200, Jens Maus wrote: Ok, but then please allow the question how I should deal with SSL_CTX_set_cert_verify_callback(sslCtx, func, conn); Set this callback once, with a conn

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jakob Bohm
On 6/25/2014 3:23 PM, Jens Maus wrote: On 2014-06-25 at 15:06, Michel msa...@paybox.com wrote: Excerpt from the book : Network Security with OpenSSL : An SSL_CTX object will be a factory for producing SSL connection objects. This context allows us to set connection configuration parameters

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jens Maus
On 2014-06-25 at 16:58, Jakob Bohm jb-open...@wisemo.com wrote: On 6/25/2014 3:23 PM, Jens Maus wrote: So how can I specify an own app_data for every connection? IMHO there should be something like SSL_set_cert_app_data() so that I can specify different app_data for different SSL

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jeffrey Walton
On Wed, Jun 25, 2014 at 11:15 AM, Jens Maus m...@jens-maus.de wrote: ... Actually, I now understand that I can keep a single SSL_CTX throughout the whole lifetime of my application and just assign it to the SSL_new() call. However, as I outlined in my last posts, if I change my code like

Re: Enable A Individual Cipher

2014-06-25 Thread Jeffrey Walton
On Fri, Sep 9, 2011 at 7:18 AM, Kanchan kanchans...@gmail.com wrote: I got an error Error setting cipher list on following ciphers EXP1024-RC4-MD5 EXP1024-RC2-CBC-MD5 EXP1024-DES-CBC-SHA EXP1024-RC4-SHA EXP-DH-RSA-DES-CBC-SHA You can find a list of the ciphers supported by OpenSSL with

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jens Maus
On 2014-06-25 at 17:33, Jeffrey Walton noloa...@gmail.com wrote: On Wed, Jun 25, 2014 at 11:15 AM, Jens Maus m...@jens-maus.de wrote: ... Actually, I now understand that I can keep a single SSL_CTX throughout the whole lifetime of my application and just assign it to the SSL_new() call.

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Dr. Stephen Henson
On Wed, Jun 25, 2014, Viktor Dukhovni wrote: On Wed, Jun 25, 2014 at 03:23:27PM +0200, Jens Maus wrote: Ok, but then please allow the question how I should deal with SSL_CTX_set_cert_verify_callback(sslCtx, func, conn); Set this callback once, with a conn value of 0. Use

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jens Maus
Am 25.06.2014 um 18:09 schrieb Jeffrey Walton noloa...@gmail.com: On Wed, Jun 25, 2014 at 11:45 AM, Jens Maus m...@jens-maus.de wrote: Of course, everything is possible. But if I create a global data structure now that uses the SSL* as a key so that I can search for that one within the

RE: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Michael Wojcik
From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Jens Maus Sent: Wednesday, 25 June, 2014 11:05 On 2014-06-25 at 16:28, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Wed, Jun 25, 2014 at 03:23:27PM +0200, Jens Maus wrote: Ok, but

Re: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Jens Maus
Am 25.06.2014 um 18:22 schrieb Michael Wojcik michael.woj...@microfocus.com: […] To retrieve it in the callback, you use the code Viktor provided. First you get the index of the SSL* object in the X509_STORE_CTX's external data collection: int ssl_idx =

RE: Possibility to cache ca-bundle and reuse it between SSL sessions?

2014-06-25 Thread Michael Wojcik
From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Jens Maus Sent: Wednesday, 25 June, 2014 14:07 Am 25.06.2014 um 18:22 schrieb Michael Wojcik michael.woj...@microfocus.com: [...] Now, if you need additional application-specific information

Trouble building OpenSSL with Visual Studio 2013: Linker error cites ms\uptable.obj

2014-06-25 Thread boinst
I'm having real trouble getting OpenSSL to build with Visual Studio 2013. My build script is here http://pastebin.com/zxvNJZWN . The 32-bit build works fine, but I can't get the 64-bit build to work. My full compile output is here http://pastebin.com/abRM9wLQ . *The interesting bit of my

Re: Trouble building OpenSSL with Visual Studio 2013: Linker error cites ms\uptable.obj

2014-06-25 Thread boinst
boinst wrote I'm having real trouble getting OpenSSL to build with Visual Studio 2013. A colleague pointed out the problem to me, this issue is now *SOLVED*. If I call vcvarsall.bat *before* calling Configure the problem is resolved. Thanks all! -- View this message in context: