Hi Mahris,

I have attached the wolfSSL Secure Renegotiation User Guide.  Please note that we strongly recommend not using Secure Renegotiation unless it is a strong requirement in your project.  See note at the top of the document for more info.

Best Regards,
Chris

We added this to our desired feature list, but probably won't get to it until we finish our name change.  We're in the process of changing the "CyaSSL" product name to "wolfSSL".

Thanks,
Chris

Hi Ray,

wolfSSL embedded SSL has never supported SSL 2.0.  It was considered insecure at the time we began writing wolfSSL as a project, thus left it out.

In <wolfSSL/version.h>, you can find the version of wolfSSL installed with either the LIBWOLFSSL_VERSION_STRING or LIBWOLFSSL_VERSION_HEX define.  For example in 3.3.0, version.h includes:

#define LIBWOLFSSL_VERSION_STRING "3.3.0"
#define LIBWOLFSSL_VERSION_HEX 0x03003000

Best Regards,
Chris

Hi,

Usually we see a socket error (-308) when the peer encountered an error of some sort. Have you tried connecting to a different server to see if the problem is consistent?  When porting to a new platform, we usually test against the wolfSSL example server (<wolfssl_root>/examples/server/server) running on a desktop machine somewhere.  This will allow you to turn on debugging on the server side (./configure --enable-debug) and see more information about why the connection is failing on the server side.

Thanks,
Chris

Hi,

Can you clarify if you are looking for the total heap usage?  Or the heap usage for a single connection?  In either case, I think our Resource Use document will be helpful.  It should be attached to this post.

It sounds like you already found our memory abstraction layer (XMALLOC, XREALLOC, etc.).  There are a few more details on this in Section 5.1.1.1 of the CyaSSL Manual:

http://yassl.com/yaSSL/Docs-cyassl-manu … ility.html

Best Regards,
Chris

Hi Marcus,

We have a couple of different functions in <cyassl/ctaocrypt/ecc.h> that can be used for reading in public and/or private keys:

/* import public ECC key in ANSI X9.63 format */
int ecc_import_x963(const byte* in, word32 inLen, ecc_key* key);

/* ecc private key import, public key in ANSI X9.63 format, private raw */
int ecc_import_private_key(const byte* priv, word32 privSz, const byte* pub, word32 pubSz, ecc_key* key);

/* Import raw ECC key */
int ecc_import_raw(ecc_key* key, const char* qx, const char* qy, const char* d, const char* curveName);

Best Regards,
Chris

Hi Eason,

To generate a CSR with wolfSSL, you'll need to define WOLFSSL_CERT_REQ, which will make the wc_MakeCertReq() function available.  Example usage can be found in <wolfssl_root>/wolfcrypt/test/test.c in the rsa_test() function.

Best Regards,
Chris

Hi,

"Mutual authentication" involves both sides of the SSL/TLS connection sending a certificate chain during the handshake and verifying the peer's chain.  CyaSSL does mutual authentication when:

1.  The client has loaded a client certificate, private key, and CA cert to verify the server chain, and has enabled peer verification with CyaSSL_CTX_set_verify() or SSL_CTX_set_verify().

2.  The server has loaded a server certificate, private key, and CA cert to verify the client chain.  Peer verification is turned on by default on the CyaSSL server side, unless specifically disabled by the application.

The CyaSSL example client and server do mutual authentication by default, and are a good examples to reference.  These are located in <cyassl_root>/examples/client/client.c and <cyassl_root>/examples/server/server.c.

Best Regards,
Chris

Hi,

Can you also verify that you are cross compiling correctly, and that you are using "--host=" instead of "--target="?  You can reference section 2.6 of the CyaSSL Manual for a simple description of how to cross compile.

http://www.yassl.com/yaSSL/Docs-cyassl- … yassl.html

Thanks,
Chris

Hi Amit,

Please see my response in your other topic:
http://www.yassl.com/forums/topic603-er … -keys.html

Thanks,
Chris

Hi Sainath,

How are you compiling your application?  Are you linking against the wolfSSL library, ie:

gcc main.c -lcyassl

Best Regards,
Chris