Re: Need a certificate verification help

2001-03-13 Thread Aaron Stromas
Dr S N Henson wrote: > Aaron Stromas wrote: > > > > Sorry, it's a typo, of course. I'm using X509_verify_cert(&ctx). Was it > > supposed to work, i.e., successfully verify? > > > > See what error you get and see if: > > openssl verify -CAfile cacert.pem cert.pem > > works. It does. Returns OK.

Re: Problem using Libeay32.dll

2001-03-13 Thread Dr S N Henson
Aslam wrote: > > Hi, > Following code is giving me a Access Violation on Microsoft Windows... > > #include "x509.h" > int main(int argc, char* argv[]) > { > X509* pX509 = 0; > FILE* fp = 0; > > fp = fopen( "d:\\temp\\cert.der", "rb" ); > d2i_X509_fp( fp, &pX509 ); > return 0; > } > > I'm using

Re: Need a certificate verification help

2001-03-13 Thread Dr S N Henson
Aaron Stromas wrote: > > Sorry, it's a typo, of course. I'm using X509_verify_cert(&ctx). Was it > supposed to work, i.e., successfully verify? > See what error you get and see if: openssl verify -CAfile cacert.pem cert.pem works. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy

Problem using Libeay32.dll

2001-03-13 Thread Aslam
Hi, Following code is giving me a Access Violation on Microsoft Windows... #include "x509.h" int main(int argc, char* argv[]) { X509* pX509 = 0; FILE* fp = 0; fp = fopen( "d:\\temp\\cert.der", "rb" ); d2i_X509_fp( fp, &pX509 ); return 0; } I'm using openssl-0.9.6 and trying to fill the x509

Re: Need a certificate verification help

2001-03-13 Thread Aaron Stromas
Sorry, it's a typo, of course. I'm using X509_verify_cert(&ctx). Was it supposed to work, i.e., successfully verify? -a Dr S N Henson wrote: > Aaron Stromas wrote: > > > > I am probably making a silly mistake but I've been stuck on it for quite > > a long time. Please help me to get out of my p

Re: Need a certificate verification help

2001-03-13 Thread Dr S N Henson
Aaron Stromas wrote: > > I am probably making a silly mistake but I've been stuck on it for quite > a long time. Please help me to get out of my predicament. This is what > I'm doing: > > BIO *bstdout; > X509 *x, *ca; > X509_STORE *store; > X509_STORE_CTX ctx; > > bstdout = BIO_new_fp(stdou

Need a certificate verification help

2001-03-13 Thread Aaron Stromas
I am probably making a silly mistake but I've been stuck on it for quite a long time. Please help me to get out of my predicament. This is what I'm doing: BIO *bstdout; X509 *x, *ca; X509_STORE *store; X509_STORE_CTX ctx; bstdout = BIO_new_fp(stdout, BIO_NOCLOSE); /* load & show CA cert

Openssl complie error

2001-03-13 Thread 김기욱
I complied Opennssl(0.9.6) library. But I had complie error. error message = Building OpenSSL mkdir tmp32dll mkdir out32dll mkdir inc32 mkdir inc32\openssl NMAKE : fatal error U1073 : don't know to make '.\crypto\cryptlib.h' stop =

Openssl complie error

2001-03-13 Thread kim ki uk
I complied Opennssl(0.9.6) library. But I had complie error. error message = Building OpenSSL mkdir tmp32dll mkdir out32dll mkdir inc32 mkdir inc32\openssl NMAKE : fatal error U1073 : don't know to make '.\crypto\cryptlib.h' stop ==

RE: Signatures with DSA. How do I get p,q,g from public/private keys?

2001-03-13 Thread Darryl Wagoner
> > This is probably a stupid question. :-) > I generated a keypair for DSA ,signed some data and stored the > public/private keys for later use. > > Later on I want to verify the data i previously signed. > So I just create a DSA struct and and add the public key to it. > But that doesn't wo

image and open-ssl

2001-03-13 Thread Laurence Besson
Hello, I use apache ( 1.3.12) && mod-ssl (mod_ssl-2.6.6-1.3.12) && openssl (openssl-0.9.6). When I use https protocol, i have some trouble to load image (icone). The html page are load but all icones don't load and i have a message in the log: Tue Mar 13 12:46:03 2001] [notice] child pid 215

RE: Client Certificate Presentation

2001-03-13 Thread Barrie Jarman
Hey, I had a very similar problem recently, and I found out the following... Sometimes (not sure what circumstances) IE5 will only present you with a personal certificate to choose IF the personal certificate is valid, this means that it must be recognised by the webserver as from a trusted ca, an

Re: Client Certificate Presentation

2001-03-13 Thread Sandipan Gangopadhyay
Thanks for the pointer. I had put the directory of the ssl.crt (crt store) in the SSLCACertificatePath originally. Then, I also put the actual common Root CA crt file name in the SSLCACertificateFile (when Oliver Bode suggested it). I also looked at the handshake process as suggested by Dr Henson

imap-pop3

2001-03-13 Thread Panagiotis Drakopoulos
Hello all, i have the following problem: i'm working on a sun sparcstation10 with solaris 2.6. I want to setup a secure imap and pop mail server on my machine.For that i downloaded and installed perl 5.6 - openssl-0.9.6 - stunnel 3.14. I made the configurations at inetd.conf and etc/services and i