X-Authentication-Warning: delorie.com: mail set sender to djgpp-bounces using -f
X-Received: by 10.224.184.11 with SMTP id ci11mr16348474qab.1.1356638453157;
        Thu, 27 Dec 2012 12:00:53 -0800 (PST)
Newsgroups: comp.os.msdos.djgpp
Date: Thu, 27 Dec 2012 12:00:52 -0800 (PST)
In-Reply-To: <1b2d3d9b-2d91-40b0-b816-0de2061ea1b2@googlegroups.com>
Complaints-To: groups-abuse AT google DOT com
Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=46.79.98.127; posting-account=v5xbdQoAAAAOGc9Ccc-kLZyobvPlN3Qr
NNTP-Posting-Host: 46.79.98.127
References: <1b2d3d9b-2d91-40b0-b816-0de2061ea1b2 AT googlegroups DOT com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <b9977d20-20b4-43f2-8151-e6b6dcdabdbe@googlegroups.com>
Subject: Re: Openssl problems
From: dosusb AT googlemail DOT com
Injection-Date: Thu, 27 Dec 2012 20:00:53 +0000
Content-Type: text/plain; charset=ISO-8859-1
Bytes: 2992
Lines: 43
To: djgpp AT delorie DOT com
DJ-Gateway: from newsgroup comp.os.msdos.djgpp
Reply-To: djgpp AT delorie DOT com
Errors-To: nobody AT delorie DOT com
X-Mailing-List: djgpp AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com
Precedence: bulk

After reading some OpenSSL documention I started to test with the s_client option. Maybe someone can tell me what should get this working. This is what I get now:

openssl version 1.0.0d:

openssl s_client -no_ssl2 -debug -host www.google.com -port 443 -state
WARNING: can't open config file: /dev/env/DJDIR/ssl/openssl.cnf
warning, not much extra random data, consider using the -rand option

CONNECTED(00000006)
SSL_connect:before/connect initialization
SSL_connect:error in SSLv2/v3 write client hello A
write:errno=0

I do not understand why it does not find openssl.cnf, it is available and I do:
 
set DJDIR=c:\djgpp
set DJGPP=c:\djgpp\djgpp.env

I also found openssl 097 on the net: 
http://www.filegate.net/utiln/utilnet/ossl097d.zip
 
This gets me further:
openssl version 097:

openssl s_client -no_ssl2 -host www.google.com -port 443 -state
warning, not much extra random data, consider using the -rand option
CONNECTED(00000008)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=1 /C=ZA/O=Thawte Consulting (Pty) Ltd./CN=Thawte SGC CA
verify error:num=20:unable to get local issuer certificate
verify return:0
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server done A
SSL_connect:error in SSLv3 write client key exchange A
SSL_connect:error in SSLv3 write client key exchange A
1:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded:md_rand.c:503:

So I do get a server hello and SSLv3 seems to be initialized. Somehow I seem to have to provide random numbers to get this to continue.

The ossl097d package does not include a libssl.a so I cannot test that. And older versions of openssl have been removed from the djgpp ftp site now. Can someone add these for me again please :)

Georg