Hi Wangzihao,
Thank you very much for using wolfSSL! 

I tried reproducing what you are seeing. Here is what I did :

cd wolfssl
git checkout master
./autogen.sh 
./configure --enable-static --enable-sp-math-all --enable-opensslall
make all
make check 
sudo make install

I then copied the code supplied in your post into a file called `forum.c` and did the following:

g++ forum.cpp /usr/local/lib/libwolfssl.a  -o forum
./forum

Here are the results I got:

get mp_int af: 0
get mp_int bf: 0
get mp_int prime: 0
get mp_int order: 0
get mp_int ra: 0
get mp_int s: 0
get ecc_point pointG: 0
point is on curve: 0
n3*G: 0
n1*G: 0
n2*B: 0
A is equal to C: 0
get mp_int ra1: 0
get mp_int ra2: 0
ra3*G: 0
ra1*G: 0
ra2*E: 0
D is equal to F: -1

Is this what you are seeing as well? 

I will need to confer with my colleagues. Please stay tuned.

Warm regards, Anthony

Hi,
I apologize for not getting you answer more promptly.  I need to go back to my colleagues for this.
Warm regards, Anthony

Note, you can also get the generated certificates from here: https://github.com/wolfSSL/wolfssl-examples/pull/375

And yes, the generated files should be moved to wolfssl/certs/ directory

Hi basak,

My name is Anthony and I'm a member of the wolfSSL team. Please note that the certificates are not included as part of wolfSSL.  They need to be generated. The instructions for generating them are at https://github.com/wolfSSL/osp/tree/mas … /README.md .

Please let us know about your progress with this experiment.

Warm regards, Anthony

Hi msorage,

There is some sort of problem here.  Your debug output indicates you only processed 2 certificates. You should have processed all the certificates in the /etc/ssl/certs.

Please use a debugger to figure why that hasn't happened.

Warm regards , Anthony

Hi msorage,
I guess you're going to have to try again with --enable-debug to get some more verbose logging since I can't reproduce your issue here. 
Warm regards, anthony

Hi,
Also, please consider tiny-curl. You can find it at https://www.wolfssl.com/download/

Warm regards, Anthony

Hi,

May I ask why you are doing this and what you are trying to achieve?  Is this an academic or hobby project?  We love know what people are doing with wolfSSL.

Have you considered using curl? You can download the source for curl and build it with wolfSSL underneath.  Then you can look at how curl is calling wolfSSL to get a better understanding of what is needed. Or, depending on your needs, curl might be a better fit.

Warm regards, Anthony

Hi msorage,

Thanks for trying this out.  I guess we're going to need more information.  Can you start by turning on logging? Build with --enable-debug and call wolfSSL_Debugging_ON() at the beginning of your application.

Warm regards, Anthony

Hi jobryansr,

My name is Anthony Hu and I am a member of the wolfSSL team.  Can you please e-mail facts@wolfssl.com with your question? This forum is more focused on technical questions.  We can handle your FIPS questions better via email.

Warm regards, Anthony

Hi _angelo_

1) are you asking to never send change_cipher_spec and to ignore them if received ?
2) in `wolfssl/internal.h` we define max record size as follows:

MAX_RECORD_SIZE = 16384,    /* 2^14, max size by standard */

Hope this helps.  Let me know your clarifications on the first point and if you have any further questions.

Warm regards, Anthony