RE: Function Definition?

2001-08-15 Thread Tony Vo
Title: RE: Function Definition? There are several macros in sha_locl.h and md32_common.h. Regards, Tony Vo -Original Message- From: Prasanna Rao K [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 14, 2001 10:34 PM To: [EMAIL PROTECTED] Subject: Function Definition? Hi,  

RE: Socket hangs on SSL_read/SSL_write

2001-08-15 Thread Bill @ Rebey.com
Here's the stack you asked for: NTDLL! ZwWaitForSingleObject + 11 bytes MSAFD! WSPStartup + -19775 bytes WS2_32! WSARecv + 174 bytes WSOCK32! recv + 51 bytes PENSERVER_D! BIO_new_socket + 199 bytes PENSERVER_D! BIO_read + 87 bytes PENSERVER_D! ssl23_read_bytes + 45 bytes PENSERVER_D! ssl23_get_cl

PKCS7 ptr to a char ptr

2001-08-15 Thread Frank Geck
Any way to convert the data that is pointed to by a PKCS7 * variable to a char * without going to a file first (i.e. PEM_write_PKCS7(fp, p7), then read it back in). Thanks, Frank __ OpenSSL Project

VxWorks Port of OpenSSL

2001-08-15 Thread Richard Schmitt
Viridien Technologies has recently completed a port of OpenSSL to VxWorks v. 5.4.   We are considering ways to incorporate our changes into the CVS branch of OpenSSL, but until that time, we would like to offer our experiences to those who need it.    Viridien technologies is a software d

Re: Socket hangs on SSL_read/SSL_write

2001-08-15 Thread Eric Rescorla
"Bill @ Rebey.com" <[EMAIL PROTECTED]> writes: > I have a pair of programs that work fine (they can communicate with one > another) in "clear" (non-SSL mode), but when I switch them to use SSL, the > SSL_write hangs, as does the SSL_read on the other end. ( "select"ing for > Read on the reader's

RE: you suck re: Richard Levitte's comment

2001-08-15 Thread Orton, Yves
Title: RE: you suck re: Richard Levitte's comment > Pointing fingers doesn't help.  We should be able to deal > with this problem ourselves because it affects us often > enough.  ANy suggestions how? Simple.  Reject all/any mails that contain the string 'Out of Office'. Or some permutat

Socket hangs on SSL_read/SSL_write

2001-08-15 Thread Bill @ Rebey.com
I have a pair of programs that work fine (they can communicate with one another) in "clear" (non-SSL mode), but when I switch them to use SSL, the SSL_write hangs, as does the SSL_read on the other end. ( "select"ing for Read on the reader's handle doesn't even work - the "select" never trips).

Re: Reprise of my: Cliet Certificate Verify problems...

2001-08-15 Thread Lutz Jaenicke
On Thu, Aug 16, 2001 at 04:47:18PM +0200, Carlo Medas wrote: > server_cert = SSL_get_peer_certificate (ssl); CHK_NULL(server_cert); > > long res = SSL_get_verify_result(ssl); ... > The result value of the SSL_get_verify_result is always one of this 2: > > 20 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT

Reprise of my: Cliet Certificate Verify problems...

2001-08-15 Thread Carlo Medas
When my client prg tries to verify my self-signed certs in this way, I have some errors: server_cert = SSL_get_peer_certificate (ssl); CHK_NULL(server_cert); long res = SSL_get_verify_result(ssl); if(res==X509_V_OK) printf("Certificate verification passed...\n"); else printf("Verify return val

CA signing question

2001-08-15 Thread Nevalainen, Eric
Probably a simple (and often asked) question: I'm attempting to build a CA for testing purposes running Openss. .9.5.a on OpenBSD 2.8. I've set up the CA (I think): bash-2.04# ./CA.pl -newca CA certificate filename (or enter to create) Making CA certificate ... Using configuration from /etc/ss

verifying certificate

2001-08-15 Thread Gisela Acosta
Hi, I've signed my message with a netscape certificate. When I try to verify it, the following error occurs: 26: unsupported certificate purpose I set the ctx structure with X509_PURPOSE_SMIME_SIGN, like it's in verify.c. I tried setting the structure whith X509_PURPOSE_ANY, and it seems to work

client && server

2001-08-15 Thread Raja Said
Hi, i have a question regarding the SSL_CTX *ctx; assuming that my application includes two peers that both of them behaves as a alient and as a server against each other. i.e each one of them somtimes connects to the other and another time accepts the other so i wondered about the ctx . as i unde

SV: Reading an RSA public key

2001-08-15 Thread Hellan,Kim KHE
>> I'm trying to use OpenSSL (0.9.6) to read an RSA public key (PKCS#1, DER >> encoded). >> I use the following command: >> openssl rsa -inform DER -in publickey.der -pubin >> >The PKCS#1 RSA public key format isn't supported on the command line. >There are however various functions that suppo

Re: Creating / verifying certificates

2001-08-15 Thread Uros Gaber, PowerCom d.n.o.
Well the thing that I would like to know is what parameters to pass to openssl when creating a server cert. The server certificates are signed by my self-signed CA. Must there be a special CA.crt for creating these kind of certificates? Thank you Uros Gaber PowerCom Gaber & Globocnik d.n.o. Tel:

Re: PKCS7 verification between CryptoAPI & OpenSSL

2001-08-15 Thread Dr S N Henson
"Khassaia, Amir" wrote: > > Hi, > I've encountered the following problem: > I generate PKCS#7 detached & signed data using CryptSignMessage() in > CryptoAPI and try to verify it using OpenSSL but I get an OpenSSL Error: > {error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to fi > nd mess

Re: Reading an RSA public key

2001-08-15 Thread Dr S N Henson
"Hellan,Kim KHE" wrote: > > I'm trying to use OpenSSL (0.9.6) to read an RSA public key (PKCS#1, DER > encoded). > I use the following command: > openssl rsa -inform DER -in publickey.der -pubin > > This gives the following errors: > > unable to load key > 1404:error:0D0A0007:asn1 encoding ro

Reading an RSA public key

2001-08-15 Thread Hellan,Kim KHE
I'm trying to use OpenSSL (0.9.6) to read an RSA public key (PKCS#1, DER encoded). I use the following command: openssl rsa -inform DER -in publickey.der -pubin This gives the following errors: unable to load key 1404:error:0D0A0007:asn1 encoding routines:d2i_X509_ALGOR:expecting an asn1 seque

Re: SSL_get_app_data/SSL_set_app_data

2001-08-15 Thread Lutz Jaenicke
On Tue, Aug 14, 2001 at 11:37:33PM -, ganesh kumar godavari wrote: >i am looking out for information on SSL_get_app_data > and SSL_set_app_data. i could not find any documentation > on the openssl website > http://www.openssl.org/docs/ssl/ssl.html). i had gone > through the code of ssl.h t

Re: session caching

2001-08-15 Thread Lutz Jaenicke
On Wed, Aug 15, 2001 at 12:02:54AM -, ganesh kumar godavari wrote: > i am writting a minimal concurrent ssl server, i am > planning to use external session caching for this. > i am using the the following hooks. > > SSL_CTX_sess_set_remove_cb(ctx, cb) > void call_back(SSL_CTX,SSL_SESSION) >

Re: PKCS7 verification between CryptoAPI & OpenSSL

2001-08-15 Thread Vadim Fedukovich
On Wed, 15 Aug 2001, Khassaia, Amir wrote: > > Hi, > I've encountered the following problem: > I generate PKCS#7 detached & signed data using CryptSignMessage() in > CryptoAPI and try to verify it using OpenSSL but I get an OpenSSL Error: > {error:2107106C:PKCS7 routines:PKCS7_signatureVerify:un