Re: Non-Blocking Sockets for SSL HandShake?

2003-03-24 Thread Tim Regovich
--- rajagopalan ramanujam [EMAIL PROTECTED] wrote: hi tim, I forgot to mention about the version, its openssl-0.9.7 and the OS is threadX running on ARM processor using GH compiler. raj --- Tim Regovich [EMAIL PROTECTED] wrote: did youtry ERR_get_error() or perror() to see what

Re: How to build on Windows 2000?

2003-03-28 Thread Tim Regovich
Also, Make sure that you have the correct version of Perl on your Windoze machine, otherwise the asm make step will fail. Regards, Tim --- Thomas J. Hruska [EMAIL PROTECTED] wrote: At 11:04 AM 3/28/2003 -0500, [EMAIL PROTECTED] writeth: I'm new to openssl and I was wondering how to build on

Re: SSL and proxy server

2002-02-27 Thread Tim Regovich
are you talking about an http protocol or a custom protocol? If you are doing custom work you will need to wrap your stuff in the calls that proxy servers use, either SOCKS or http. If you are talking about an http proxy server, check the rfc. you will want to use the connect command to tunnel

Re: how to verify data is really encrypted?

2002-08-28 Thread Tim Regovich
Ed, You have several simple options. The most reliable option is to use a packet sniffer on your client machine and look at the data that is being exchanged. Tim --- Edward Chan [EMAIL PROTECTED] wrote: Hi there, I'm done implementing SSL support in my server. It appears the that when the

RE: Remove passprase

2002-10-25 Thread Tim Regovich
Robbert, only if you have can crack it. Anyone have quantum computer laying around that can help with this? your best bet is to create a new key and start over. Tim --- Robbert Hardin [EMAIL PROTECTED] wrote: Hello Bruno I tried, but it doesn't work: # openssl rsa -in cakey.pem -out

Re: Rolling a Windows Secure Webserver...

2002-10-31 Thread Tim Regovich
This question is asked a lot. With asynchornous sockets, you need to check the err using SSL_get_error. If the error IS SSSL_ERROR_WANT_READ or SSL_ERROR_WANT_WRITE then you need to call SSL_accept again. I would reccommend adding the FD back into your select queue based on the read/write status,

Re: Building openssl on Win2K

2002-10-31 Thread Tim Regovich
check the version of perl you are using. I had the exact same problem and upgrading my perl version fixed all of the issues. I am sorry, but I do not have version numbers handy. Regards, Tim --- Noel Burton-Krahn [EMAIL PROTECTED] wrote: Right, I remember I had a ton of problems building

Re: how do i make SSL_connect time out ?

2002-11-07 Thread Tim Regovich
Try setting an alert if the socket is not timing out to your liking. Better yet, switch to using non blocking asynch sockets and manage socket timeouts sepperately, on your own schedule. Hope this helps, Tim --- Guillaume Peersman [EMAIL PROTECTED] wrote: Hi, I am trying to find a way to

Re: SSL_read() hang after read http 100 continue headers

2002-11-07 Thread Tim Regovich
Lin Ma, Please reference : http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.2.3 I beleive that the other end of the connection is waiting for a message body to be passed. Regards, Tim --- Lin Ma [EMAIL PROTECTED] wrote: Thanks. The problem is SSL_Read hangs there without

Re: Apache+SSL Not working ---OpenSSL Error?

2002-11-12 Thread Tim Regovich
To make sure that this is an openssl issue, and not your apache configuration, or the hardware that you are using (I noticed the ssl_engine_log), try running the test server program that is with the openssl distribution. Regards, Tim --- Manoj Kithany [EMAIL PROTECTED] wrote: Hi Experts: I

TLS issues with Opera

2003-01-13 Thread Tim Regovich
All, I have encountered an interesting problem when trying to connect to s_server with Opera, when only TLS is enabled in opera. I can only seem to connect to the s_server if I : 1) start s_server -ssl3 2) connect to https://localhost If i try connecting to https://192.168.2.69 (the ip of the

RE: SSL_accept hang

2003-02-03 Thread Tim Regovich
My $0.02 : *always* operate in non blocking mode. The code may be slightly more complex but will *always* work better. goven that statement, the problem is still relevant, since the connecting end cold just stay open forecever, eating up your sockets, so you have just pushed the timeout to a

Re: SSL_accept hang

2003-02-04 Thread Tim Regovich
OpenSSL on top of it! I am currently writing up a little HOWTO with some example code for handling non-blocking sockets, not using BIOs. I will include a very minimal connection manager/thread pooler that will hopefully clear up a lot of confusion. Regards, Tim Regovich --- Eric Rescorla [EMAIL

RE: SSL_accept hang

2003-02-04 Thread Tim Regovich
This doesn't really solve the problem of timeouts, as you will now have a dead thread lying around. Tim --- Jasper Spit [EMAIL PROTECTED] wrote: Don't know if this is appropriate for you, but if you're using a multithreaded app, make sure the SSL_accept call takes place in a seperate thread

Re: Internet Explorer and OpenSSL: SSL_accept problem

2003-02-14 Thread Tim Regovich
Lars, I had a similar problem a few years ago. What was happening to me was that IE was actually making two nearly simultaneous requests to my server, and effectivly ignoring one of them. I will see if I can find my notes on this one (I searched the archives, but didn't find anything :), but I