Digital Certificates

2014-11-23 Thread Niraj Sorathiya
Hi , Thankyou all and thankyou Stephen for giving me some hope for my idea :) But truly speaking I didn't get your steps. I don't know anything about Digital Certificates , but I have started working on this. I am referring books like openssl cookbook and network security with openssl by

s_client connecting to https proxy?

2014-11-23 Thread dapiot holmp
I read here http://rt.openssl.org/Ticket/Display.html?id=266user=guestpass=guest of support for an https proxy CONNECT command but I don't see it in the documentation https://www.openssl.org/docs/apps/s_client.html __ OpenSSL

Re: Schanner secu

2014-11-23 Thread Gilles Vollant
Where can we found the RFC about this cipher ? This blog page contain information about cipher order in Windows and the bug http://blog.ittoby.com/2014/11/microsoft-kb-2992611-winshock-more.html 2014-11-19 10:16 GMT+01:00 Mounir IDRASSI mounir.idra...@idrix.net: Hi, The latest Windows

RE: s_client connecting to https proxy?

2014-11-23 Thread Salz, Rich
http://rt.openssl.org/Ticket/Display.html?id=266user=guestpass=guest of support for an https proxy CONNECT command but I don't see it in the documentation https://www.openssl.org/docs/apps/s_client.html It's not implemented yet.

Re: Small memory leak on multithreaded server

2014-11-23 Thread Jakob Bohm
On 21-11-2014 23:23, Viktor Dukhovni wrote: On Fri, Nov 21, 2014 at 04:13:58PM -0500, Jeffrey Walton wrote: A fixed amount of memory that is not deallocated and is independent of the number of operations performed, is NOT a memory leak. Languages like Java and C# can continuously load and

Re: Small memory leak on multithreaded server

2014-11-23 Thread Viktor Dukhovni
On Sun, Nov 23, 2014 at 10:56:41PM +0100, Jakob Bohm wrote: Unloading of shared libraries is generally unsafe. Loading and unloading of pure of Java packages may work well enough, but I would [not] expect a Java runtime that unloads native libraries to stay running for very long. That is

RE: SSL alert number 51

2014-11-23 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Charles Mills Sent: Friday, November 21, 2014 12:30 Thanks. I guess I may have to open a problem with IBM. The IBM documentation clearly lists a number of cipher suites (at they call them) that use SHA1 (including the one we (IBM+OpenSSL)

Re: which cipher was chosen?

2014-11-23 Thread James
Hi, Alternatively you can use the wireshark or tcpudmp to capture the packet and decode the SSL - Client Hello and Sever Hello That also may help to identify which protocol and cipher we use regards, James Arivazhagan Ponnusamy On Sat, Nov 22, 2014 at 7:12 AM, Chris Bare chris.b...@gmail.com

Query reg obselete func get_crl() from openssl-0.9.8d

2014-11-23 Thread Mukesh Yadav
HI All, I have query for func get_crl() present in openssl-0.9.8d. My Application code earlier uses openss-0.9.8d and now has been updated to use openss-1.0.1h There was a peice of code which used to call ctx-get_crl() to confirm if matching CRL is present or not. ctx = X509_STORE_CTX_new();

Is TLS1.2 supported by openssl 0.9.8zc? Is there a plan to support TLS1.2 in 0.9.8 branch?

2014-11-23 Thread 王波
Hi all, From the release notes, seems TLS1.2 is only supported in 1.0.1 branch, however it is not an easy job to migrate from 0.9.8 to 1.0.1 unless there is no any other resort. If this is true, is there a plan to support TLS1.2 in 0.9.8 branch? thanks, Bo