Re: PR_Close and PR_Shutdown hang if an SSL socket is blocking on Read

2007-07-13 Thread Yahel Zamir
On Jul 12, 8:59 pm, Wan-Teh Chang <[EMAIL PROTECTED]> wrote: > Yahel Zamir wrote: > > > OK... Since my application does not use PRThread's I guess should > > obtain the PRThread id of the Read thread and the Write thread (using > > PR_GetCurrentThread), and t

Re: PR_Close and PR_Shutdown hang if an SSL socket is blocking on Read

2007-07-11 Thread Yahel Zamir
On Jul 12, 12:36 am, Wan-Teh Chang <[EMAIL PROTECTED]> wrote: > Yahel Zamir wrote: > > > Yes, clearly PR_Shutdown was written to block until the lock is > > available... So I would like to rephrase my question -- when an NSPR > > socket is blocking on Read or Write

Re: PR_Close and PR_Shutdown hang if an SSL socket is blocking on Read

2007-07-11 Thread Yahel Zamir
On Jul 10, 10:57 pm, Wan-Teh Chang <[EMAIL PROTECTED]> wrote: > Yahel Zamir wrote: > > Hi, > > > I have encountered a problem in using SSL sockets in blocking mode. My > > application is multi threaded, with one thread waiting to read and > > another that is

Re: PR_Close and PR_Shutdown hang if an SSL socket is blocking on Read

2007-07-10 Thread Yahel Zamir
Oops, I forgot some details - we are using NSS-3.11.4 and NSPR-4.6.4 on a RedHat Linux with Kernel 2.4, using gcc 3.4.5. On Jul 10, 5:36 pm, Yahel Zamir <[EMAIL PROTECTED]> wrote: > Hi, > > I have encountered a problem in using SSL sockets in blocking mode. My > application

PR_Close and PR_Shutdown hang if an SSL socket is blocking on Read

2007-07-10 Thread Yahel Zamir
PR_Shutdown or PR_Close never returns from SSL_LOCK_READER(ss). Following are a simple client and server that demonstrate the problem (search the client for 999 and the server for "delayed_close"). Thanks, Yahel Zamir, SW Engineer at CWNT === M_DIST = /usr/home/yahel/programs/nss/mo

Re: certificate and certutil questions

2007-01-08 Thread Yahel Zamir
Dennis Sinelnikov wrote: Yahel Zamir wrote: Hi Everyone, Our company develops a server to be deployed at customer sites, and we would like to use NSS to authenticate client connections. As a start, we can setup a CA sign our own certificates. I tried to follow the instructions in the SSL

Re: certificate and certutil questions

2007-01-08 Thread Yahel Zamir
Wan-Teh Chang should get the credit for that :-) Yahel. Nelson B wrote: Yahel Zamir wrote: Hi Everyone, Our company develops a server to be deployed at customer sites, and we would like to use NSS to authenticate client connections. As a start, we can setup a CA sign our own certificates

Re: a server application using NSS

2007-01-04 Thread Yahel Zamir
Wan-Teh Chang wrote: Yahel Zamir wrote: selfserv uses SECU_Strerror, but this is a private function. in addition, on my machine it does not find an error string for -8174, for example. Could you find out why? -8174 is SEC_ERROR_BAD_DATABASE, a common error code. SEC_ERROR_BAD_DATABASE is

certificate and certutil questions

2007-01-03 Thread Yahel Zamir
-L -d server_db" did not display anything. Any idea what is missing here? 4. I tried to proceed to "Creating the CA Certificate and Adding It to the Database". Using the string "f7c1" returned an error, so I changed to "rsa". But at step (2), certutil complained

Re: a server application using NSS

2007-01-03 Thread Yahel Zamir
Nelson B wrote: Yahel Zamir wrote: Hi Everyone, I am using NSS for a server application, a multi-threaded program running on Linux. I have encountered a number of questions, and would be glad to know if anyone has more information. My questions are based on following the "Overview of a

Re: a server application using NSS

2007-01-03 Thread Yahel Zamir
Hi Wan-Teh Chang, Please see some replies below. Wan-Teh Chang wrote: Yahel Zamir wrote: 1. When writing an application that uses NSS, I would expect all Platform Dependent configuration to reside in some configuration file, so that the build process of the whole application will not need

a server application using NSS

2007-01-01 Thread Yahel Zamir
en after SSL_ImportFD(), which replaces tcpSocket by sslSocket. Thanks, Yahel Zamir. ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: NSS thread support for concurrent read and write

2006-12-21 Thread Yahel Zamir
.2FOpenSSL_certificates_with_mod_nss.3F Wan-Teh Chang wrote: Yahel Zamir wrote: 1. Our current server is a multi-threaded application (using pthreads), running on a Red Hat Linux machine. It uses regular TCP socket communcation in the clear, in full duplex. My intention is to add an SSL

Re: NSS thread support for concurrent read and write

2006-12-20 Thread Yahel Zamir
server_db" did not display anything. Any idea what is missing here? 4. I tried to proceed to "Creating the CA Certificate and Adding It to the Database". Using the string "f7c1" returned an error, so I changed to "rsa". But at step (2), certutil complained &q

NSS thread support for concurrent read and write

2006-12-18 Thread Yahel Zamir
Hi Everyone, I have noted an important limitation of OpenSSL, and I would like to make sure that this limitation does not exist with NSS. What I need is the ability to use one thread for writing to an SSL socket in blocking mode, and another thread for reading from the same socket, and let them r