Re: thread support and Memory leaks

Hi, > 2- thread support: do we have to explicitly call > CRYPTO_set_locking_callback and CRYPTO_set_id_callback in a multithreaded > context? Yes, if your application is multi-threaded you have to set the callbacks. >It is said so in the "threads" manpage, but they seem to be used > only in te

Re: Solaris7, redefinition of int8_t errors

Something might be broken with your GCC install. You also might want to look at bitypes.h and see what it's defining int16_t etc. to be. I've seen before where Sun has made syntactical mistakes before. My SPARC is down right now, otherwise I'd try the compile myself. --Chris

Re: thread support and Memory leaks

From: "Richard Dykiel" <[EMAIL PROTECTED]> Subject: thread support and Memory leaks Date: Mon, 5 Jun 2000 17:02:15 -0400 Message-ID: <000901bfcf31$53a0fdb0$[EMAIL PROTECTED]> richard.dykiel> Hello, richard.dykiel> sorry, mem leaks again. richard.dykiel> richard.dykiel> On SunOs 5.6, openssl 0.9.

Re: target hostname / cert subject name checking

From: "RL 'Bob' Morgan" <[EMAIL PROTECTED]> rlmorgan> There is also the delicate question of exactly what name the rlmorgan> app hands to the check algorithm as the target host name. rlmorgan> The text below is unambiguous that it must be "what the user rlmorgan> typed", not the canonical host na

Re: PKCS12 certs and NT 4.0

May be your MSIE5.0 is 512 bit RSA. Try this patch: http://www.swisskey.ch/prod/pkg_html_show.p_show_page?iv_lang=5&iv_node=19 - Original Message - From: Costantino Imbrauglio To: [EMAIL PROTECTED] Sent: Monday, June 05, 2000 7:13 PM Subject: PKCS12 certs and NT 4.0 Hi, I've been gener

RE: Apache+mod_ssl+openssl and different versions of IE...

What version of OpenSSL are you using ?     I have experienced problems with OpenSSL 0.9.5a but having back stepped to OpenSSL 0.9.4 my problems have gone, despite this solving the problem it appears to step from a Microsoft Bug ...   See Knowledge Base Q247367   http://support.microsoft.co

RE: Re[2]: Certificate with no expiration date.

Try follow the example described in http://www.ultranet.com/~fhirsch/Papers/cook/ssl_cook.html Nathan Wang >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED]]On Behalf Of Jurijs Dorofejevs >Sent: Monday, June 05, 2000 3:09 PM >To: [EMAIL PROTECTED] >Subject: Re[2]

Re: Solaris7, redefinition of int8_t errors

> Those are warnings from the compiler. Warnings don't cause compiles > and makes to fail. Examine your error output and determine the real > cause of the failure. and actually I can compile openssl-0.9.5a on solaris8/sparc with gcc-2.95.2. see (http://aohakobe.ipc.chiba-u.ac.jp /misc/doc

Problem with Apache/SSL and IE.

Yello again!   Not sure if this got to anyone the first time (I hadn't registered with the group yet).   I am running an Apache+mod_ssl+openssl webserver that uses a Verisign Global ID (128 bit/128 bit secret key).  Some Internet Explorer users with low cipher strengths (i.e. 40 bit or

Re: Ending NonBlocking Read from CyberTrust server

I am not WinSock programmer, I just give you my suppose opinion, and may be it's wrong, just an advice: for WSAEventSelect( m_iSocketID, m_hSocketEvent, FD_READ|FD_CLOSE); you need add an write enent select(FD_WRITE I guess),for the write enent, it needs only do the same thing as read event.The r

thread support and Memory leaks

Hello, sorry, mem leaks again.   On SunOs 5.6, openssl 0.9.5a :   In a multithreaded context, I have memory leaks reported when my application is compiled with CRYPTO_MDEBUG_ALL (see attached file). I have 3 questions on this:   1- am I not chasing leaks coming from the debug memory functions

target hostname / cert subject name checking

As folks may know, for most applications a SSL/TLS client is supposed to check that the DNS name of the host as found in the server cert matches the host name that the client is trying to connect to, ie the one that supplies the service the client is trying to use. This check is not mandated in

Re: attachments

Arnaud De Timmerman wrote: > > hi, > > Thanks for answers about the exit codes. > > On the web page for openssl, s/mime utility gives an example for sending an > email with sendmail : > > > openssl smime -sign -in in.txt -text -signer mycert.pem -from [EMAIL PROTEC

Re: Certificate with no expiration date.

Carles Xavier Munyoz Baldó wrote: > > Hello, > I'm using the next command for make may CA certificate: > openssl req -new -x509 -days 365 -key ca.key -out ca.crt > > How can I make a certificate with no expiration date ? > You can't certificates must have an expiration date. You can however cr

Re: Problem with SSL Site

> I was wondering if anyone could shed some light on this: > > I am using the s_client command within OpenSSL utility under Windows NT > which works great > for testing most secure sites. However one site, out of the hundreds I've > tested has > proven problematic. A GET against https://www.genui

RSA_verify and NID_ripemd160

It seems that the RSA_verify function does not support the NID_ripemd160 hashing algorithm. If I hash data with ripemd160, sign it and try to verify it, the verify function returns 0 (error). Trying to debug I've seen that the ripemd160 algorithm is not checked, and the Verify code tales the bran

attachments

hi, Thanks for answers about the exit codes. On the web page for openssl, s/mime utility gives an example for sending an email with sendmail : openssl smime -sign -in in.txt -text -signer mycert.pem -from [EMAIL PROTECTED] -to someone@somewhere -subject "Signed me

Certificate with no expiration date.

Hello, I'm using the next command for make may CA certificate: openssl req -new -x509 -days 365 -key ca.key -out ca.crt How can I make a certificate with no expiration date ? Greetings. --- Carles Xavier Munyoz Baldó / [EMAIL PROTECTED] Internet Business Unit - Uni2 Dpto. Sistemas / System Depar