Re: How to autenticate a client

2002-08-30 Thread Xperex Tim
Are you doing things in this order: SSL_CTX_set_verify ... SSL_accept ... SSL_get_peer_certificate ... --- Eduardo Muñoz <[EMAIL PROTECTED]> wrote: > Can anyone tell me hoy to authenticate a client? I > have tried the following code on my server, but it > keeps sending me the "Client does not ha

Signatures of this Certificate could not be verified (554)

2002-08-30 Thread rm
Hi group, I've searched the FAQ and archives on this subject and found very little. I've got Redhat 7.1 (with updates and patches) Apache 1.3.26, modssl 2.8.10-1.3, openssl-0.9.6g all compiled and installed on a clean system. I went through the MAKE CERTIFICATE sequence and got everything to st

stunnel 4.00 released

2002-08-30 Thread Michal Trojnara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Version 4.00, 2002.08.30, urgency: LOW: * New features sponsored by MAXIMUS http://www.maximus.com/ - New user interface (config file). - Single daemon can listen on multiple ports, now. - Native Win32 GUI added. - Native NT/2000/XP service a

Re: Is OCSP client (or server) support available in openssl?

2002-08-30 Thread Richard Koenning
At 13:00 30.08.2002 -0400, you wrote: >http://www.openssl.org/docs/apps/ocsp.html describes the "openssl ocsp" >command, but openssl-0.9.6g command line doesn't recognize the ocsp >command and I don't see it anywhere in the sources. > >Can anyone tell me if ocsp is available and, if so, where? Ii

Re: Is OCSP client (or server) support available in openssl?

2002-08-30 Thread Dr. Stephen Henson
On Fri, Aug 30, 2002, Bob Kupperstein wrote: > http://www.openssl.org/docs/apps/ocsp.html describes the "openssl ocsp" > command, but openssl-0.9.6g command line doesn't recognize the ocsp > command and I don't see it anywhere in the sources. > > Can anyone tell me if ocsp is available and, if s

Is OCSP client (or server) support available in openssl?

2002-08-30 Thread Bob Kupperstein
http://www.openssl.org/docs/apps/ocsp.html describes the "openssl ocsp" command, but openssl-0.9.6g command line doesn't recognize the ocsp command and I don't see it anywhere in the sources. Can anyone tell me if ocsp is available and, if so, where? Thanks, -Bob -Original Message- Fro

Re: [Fwd: certificate verification problem]

2002-08-30 Thread Dr. Stephen Henson
On Thu, Aug 29, 2002, Lutz Jaenicke wrote: > On Thu, Aug 29, 2002 at 09:10:47AM -0400, Shaheed Bacchus wrote: > > you are correct, "issuer" is not self signed (in fact it's > > the cert that's provided by default with openssl in the > > apps/demoCA dir). so how do i tell the verification > >

How to autenticate a client

2002-08-30 Thread Eduardo Muñoz
Can anyone tell me hoy to authenticate a client? I have tried the following code on my server, but it keeps sending me the "Client does not have certificate" message. SSL_CTX_set_verify(ctx,SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); client_cert = SSL_get_peer_certificate

Re: OpenSSL and iplanet problems - No more!!

2002-08-30 Thread Auteria Wally Winzer Jr.
you should post to the entire group exactly what you did in order to get OpenSSL and IPlanet working in parallel. wally winzer jr. - Original Message - From: "Ashwin C Uthappa" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 30, 2002 07:31 Subject: OpenSSL and iplanet pro

OpenSSL and iplanet problems - No more!!

2002-08-30 Thread Ashwin C Uthappa
Steve, Tom, Eric (and others)!!!, Thank you so much for your suggestions. I just changed the names of the functions and used #defines in the necessary .h files and things are working fine I really do appreciate your help!! BTW, just a last query, while changing the signature of the MD5_Upd

Re: RSA_check_key function cores

2002-08-30 Thread Nils Larsch
On Donnerstag, 29. August 2002 16:58, [EMAIL PROTECTED] wrote: > Hi Nils, Hi Vignesh, [...] > >RSA_Keys->n=BN_new(); > >BN_init(RSA_Keys->n); > > BN_init() is unnecessary, because BN_new() initialize > the BIGNUM structure. > > [...] > > > else if( !(RSA_Keys->n->d = (BN_ULONG *)malloc((