Re: 1.1.1d build failure with no-shared

2019-11-24 Thread Claus Assmann
On Sat, Nov 23, 2019, Richard Levitte wrote: > You don't happen to have a libcrypto.so lying around in your build > directory? That was probably be the (my) mistake, sorry for the false alarm (I cannot reproduce the problem in a setup where I just untar'ed the source code). > Just now, I noticed

Re: Clutter in log files, bogus connections

2019-11-24 Thread Kurt Roeckx
On Sat, Nov 23, 2019 at 04:42:50PM -0800, Hal Murray wrote: > > I see a lot of clutter in log files from things like > error:1408F10B:SSL routines:ssl3_get_record:wrong version number > I assume they are from bad guys probing for openings. > > Is the error code returned by ERR_get_error()

Re: SSL_set_client_CA_list(ssl, NULL) problem?

2019-11-24 Thread Claus Assmann
Seems it is impossible to override the list with NULL for SSL, as the code will then use the list from CTX (if my limited understanding of the code is correct): STACK_OF(X509_NAME) *SSL_get_client_CA_list(const SSL *s) { ... if (s->client_CA != NULL) return (s->client_CA);