126 Reply by anthony

(5 replies, posted in wolfSSL)

Hello bluscape,

my name is Anthony and I am a member of the wolfSSL team. Please have a look at https://github.com/wolfSSL/wolfssl/blob … /dertoc.pl which comes with wolfSSL. its a great utility script for converting der files into arrays which can then be embedded into your source code.

Once you have them embedded into your application you can use the following APIs to pass them to wolfSSL: 

wolfSSL_CTX_load_verify_buffer
wolfSSL_use_certificate_chain_buffer
wolfSSL_CTX_use_certificate_chain_buffer
wolfSSL_use_PrivateKey_buffer
wolfSSL_CTX_use_PrivateKey_buffer

Warm regards, Anthony

Go to forum: wolfSSL

127 Reply by anthony

(8 replies, posted in wolfSSL)

Hi Michele,

TLS 1.3 is supported and enabled by default for both FiPS and non-FIPS code. Can you please try removing the `-gu` parameters on your execution of `nm`?

> I am attaching my user_seettings.h file

Sorry, but I did not find any attachments on your latest message.  Can you try again?

Warm regards, Anthony

Go to forum: wolfSSL

128 Reply by anthony

(8 replies, posted in wolfSSL)

Hi Michele,

For XCode instructions, please see https://github.com/wolfSSL/wolfssl/tree … /IDE/XCODE .
That will show you the README.md which will give you instructions regarding user_settings.h which refers to this file:

https://github.com/wolfSSL/wolfssl/blob … settings.h

You can add your macro defines and undefs in there.

Warm regards, Anthony

Go to forum: wolfSSL

129 Reply by anthony

(3 replies, posted in wolfSSL)

Hi,

currently for iOS we suggest XCode as you have noted in your previous message.  Please see
https://www.wolfssl.com/documentation/m … -x-and-ios as well.  Is swift a requirement?  If so, this conversation would be more appropriate on our support@wolfssl.com alias.  Please send a message there.

Warm regards, Anthony

Go to forum: wolfSSL

130 Reply by anthony

(7 replies, posted in wolfSSL)

Hi, Can you be more specific?  Which semaphore?

Warm regards, Anthony

Go to forum: wolfSSL

131 Reply by anthony

(4 replies, posted in wolfSSL)

Hi Kalen, in order to avoid the filter problems, I suggest opening a support ticket instead.  Can you send a clear report to support@wolfssl.com?

Go to forum: wolfSSL

132 Reply by anthony

(4 replies, posted in wolfSSL)

Hi, Kalen,

My name is Anthony Hu and I am a member of the wolfSSL team. Thanks for reaching out to us.

Can I ask, what should I replace  googleapisurl_here  with?

Also, you have a certificate in PEM format. I'm not sure what I'm supposed to do with that. I'm somewhat confused.  Can you please help me by clarifying?


Warm regards, Anthony

Go to forum: wolfSSL

133 Reply by anthony

(7 replies, posted in wolfSSL)

I see the 5 0 bytes at the end.  When you use the debugger, does your code that writes in the header, length and content get executed? If not, you need to figure out why.

Warm regards, Anthony

Go to forum: wolfSSL

134 Reply by anthony

(6 replies, posted in wolfCrypt)

Hi Zihao,

You're very welcome. We'd still love to have a chat.  If you have a chance, please send me a meeting invite to anthony@wolfssl.com.

Warm regards, Anthony

Go to forum: wolfCrypt

135 Reply by anthony

(7 replies, posted in wolfSSL)

Hi,

I don't see your attachment.

You're probably going to need to run a debugger such as gdb to see if you are actually writing the extension as you expected.

Warm regards, Anthony

Go to forum: wolfSSL

136 Reply by anthony

(6 replies, posted in wolfCrypt)

Hi Wang Zihao,

Thank you for confirming you got the same result. 
Unfortunately, I don't think I got any message from you. 
Did you send it to anthony@wolfssl.com ?

Can you please re-send to that address?

Warm regards, Anthony

Go to forum: wolfCrypt

137 Reply by anthony

(6 replies, posted in wolfCrypt)

Hi Wangzihao,

How are you? We would love to get on a call with you to better understand how you are using wolfSSL. Would you be open to such a call? Don't worry about potential language issues. I can speak Mandarin. Please let me know.

Warm regards, Anthony

Go to forum: wolfCrypt

138 Reply by anthony

(7 replies, posted in wolfSSL)

Hi,

I've had a quick scan of your changes. nothing really jumps out as being wrong. Perhaps it would be a good idea to get wireshark to see and make sure you know the root cause.

Can you please let me know what wireshark shows you?

Warm regards, Anthony

Go to forum: wolfSSL

139 Reply by anthony

(6 replies, posted in wolfCrypt)

Hi Wangzihao,
Thank you very much for using wolfSSL! 

I tried reproducing what you are seeing. Here is what I did : 

cd wolfssl
git checkout master
./autogen.sh 
./configure --enable-static --enable-sp-math-all --enable-opensslall
make all
make check 
sudo make install

I then copied the code supplied in your post into a file called `forum.c` and did the following: 

g++ forum.cpp /usr/local/lib/libwolfssl.a  -o forum
./forum

Here are the results I got: 


get mp_int af: 0
get mp_int bf: 0
get mp_int prime: 0
get mp_int order: 0
get mp_int ra: 0
get mp_int s: 0
get ecc_point pointG: 0
point is on curve: 0
n3*G: 0
n1*G: 0
n2*B: 0
A is equal to C: 0
get mp_int ra1: 0
get mp_int ra2: 0
ra3*G: 0
ra1*G: 0
ra2*E: 0
D is equal to F: -1

Is this what you are seeing as well? 

I will need to confer with my colleagues. Please stay tuned.

Warm regards, Anthony

Go to forum: wolfCrypt

140 Reply by anthony

(4 replies, posted in wolfSSL)

Hello joseph.mazza,

I've put up a pull request on github: https://github.com/wolfSSL/wolfssl/pull/6276
Lets see how my colleagues feel about it in the review comments.

In the meantime, we love to know more about how our code is being use and by whom.  To that end, I have a few questions. 

Can you please let us know your location and any academic or professional affiliations?  I'd also love to know about your project. Can you let us know what you are trying to do and your goals?

Warm regards, Anthony 

Warm regards, Anthony

Go to forum: wolfSSL

141 Reply by anthony

(4 replies, posted in wolfSSL)

Hi,
I apologize for not getting you answer more promptly.  I need to go back to my colleagues for this.
Warm regards, Anthony

Go to forum: wolfSSL

142 Reply by anthony

(4 replies, posted in wolfSSL)

Hello joseph.mazza,

It would seem you have found a bug. I apologize, however, it is quite late in my time zone so I will have ask you to be patient as I start my investigation tomorrow.  In the meantime, please let me know your location and affiliated organization so that I may better prioritize your issue.

Warm regards, Anthony

Go to forum: wolfSSL

143 Reply by anthony

(8 replies, posted in wolfSSL)

Note, you can also get the generated certificates from here: https://github.com/wolfSSL/wolfssl-examples/pull/375

Go to forum: wolfSSL

144 Reply by anthony

(8 replies, posted in wolfSSL)

Hi Basak,

but, still I cannot start my server with it.

What error message are you seeing?

Go to forum: wolfSSL

145 Reply by anthony

(8 replies, posted in wolfSSL)

And yes, the generated files should be moved to wolfssl/certs/ directory

Go to forum: wolfSSL

146 Reply by anthony

(8 replies, posted in wolfSSL)

Hi Basak,

I don't know your computer's directory setup so I cannot give you the exact commands you need to execute. When I say /path/to/osp/... I mean "The path to where you downloaded osp project to...."

Hope this helps!

Warm regards, Anthony

Go to forum: wolfSSL

147 Reply by anthony

(8 replies, posted in wolfSSL)

Hi basak,

My name is Anthony and I'm a member of the wolfSSL team. Please note that the certificates are not included as part of wolfSSL.  They need to be generated. The instructions for generating them are at https://github.com/wolfSSL/osp/tree/mas … /README.md .

Please let us know about your progress with this experiment.

Warm regards, Anthony

Go to forum: wolfSSL

148 Reply by anthony

(21 replies, posted in wolfSSL)

Ok, so you are now having success with our example client. You can now use that as a template to better understand what you need to do.  Since you mentioned embedded, please do consider tiny curl.  It just might fit your use case!

Warm regards, Anthony

Go to forum: wolfSSL

149 Reply by anthony

(21 replies, posted in wolfSSL)

Hi msorage,

There is some sort of problem here.  Your debug output indicates you only processed 2 certificates. You should have processed all the certificates in the /etc/ssl/certs.

Please use a debugger to figure why that hasn't happened.

Warm regards , Anthony

Go to forum: wolfSSL

150 Reply by anthony

(21 replies, posted in wolfSSL)

Hi,
Please do this and then send over the logs:

./configure --enable-sys-ca-certs  --enable-debug
make all
./examples/client/client -h www.wolfssl.com -p 443 --sys-ca-certs

Go to forum: wolfSSL