OpenSSL engine NFast

Hi, I'm trying to uderstand how the engine object is working with openssl-engine. I'm using a NFast crypto device (chil) and when I look into hw_ncipher.c I found three interristing functions: static int hwcrhk_insert_card(const char *prompt_info, const char *wrong_info, HWCryptoHook_Pa

Re: Question about SSL_CTX_load_verify_locations

You need to SSL_CTX_new() before using the context with SSL_CTX_load_verify_locations(). --- "Paul E. Bible" <[EMAIL PROTECTED]> wrote: > Hi there, > > I'm currently working on an application that uses SSL for its Internet > communications. In this applications, I am verifying the certificat

Compiling 0.9.6g on RHat 6.2

gcc -o openssl -DMONOLITH -I../include -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM openssl.o verify.o asn1pars.o req.o dgst.o dh.o dhparam.o enc.o passwd.o gendh.o errstr.o ca.o pkcs7.o crl2p

CRYPTO_malloc - segmentation fault on Solaris 2.5.1

Title: CRYPTO_malloc - segmentation fault on Solaris 2.5.1 Hello, I've just installed openssl-0.9.6g on a sparc Solaris 2.5.1 - (compiler: gcc version 2.95.3 20010315 (release)). I also compiled an program which uses OpenSSL for its libcrypto library. When running this program, I keep gett

Problem with client authentication , apache 2 mod_ssl and java client

Hi All, I have problem with client authentication. I have setup my CA using openssl , created server certificate and client certificate both signed by the CA. I have converted the client certificate to P12 format, imported this into IE6 and ssl communication was successful from Internet explorer

RE: Question about auth with client certificates

There are two things you need to do: authenticate and then authorize. C-Kermit provides hooks to organizations in the form of two functions: X509_to_user() - who does this certificate represent X509_userok() - may the user gain access with this certificate C-Kermit provides two implementa

RE: Question about auth with client certificates

-Mensaje original- De: Gastón Christen Enviado el: Martes, 24 de Septiembre de 2002 10:00 Para: 'Gregory Stark' Asunto: RE: Question about auth with client certificates Ok, I get it. But I would be happier if I would be able to authenticate not the certificate subject, but the public

Openssl Engine

Hi, Currently I've an application that creates keys, certificate requests and certificates using NFast and openssl-0.9.5. I've updated my code to use the openssl-engine. Everything works perferctly with some modifications. Now, I would like to use the ENGINE concept with my NFast. I've already un

the g value is not a generator???

Hi... I want to use a fixed prime in the DH(generator=2). So, I comment out the random prime generator... then... DH(key exchange) is successful, but exception(error?) output is remained about generator... "the g value is not a generator". Ref) variable used fixed DH G(generator) = 2 N(prime) = 1

How to turn off the certificate purpose check while ssl handshakes?

Hello,   When I tested the OpenSSL SSL handshake process, I found that it is might be impossible to turn off some certificate extended usage checks while verifying certificate, I investigate the following part of source: In openssl/ssl/ssl_cert.c of OpenSSL 0.9.7 beta-

Openssl-0.9.7-beta3 applications are not being built "s_server.exe" etc.

Where are the applications in OpenSSL-0.9.7-beta3 30 Jul 2002?     The applications in the apps directory are not being built. The package compiles and passes all test but it does not build the applications, only the object files are being built.   Marcus