HOWTO for pkcs11 patch?

2003-06-25 Thread Reinhard Moosauer
Hello List, trustway's pkcs11-patch came with basically no info about it's usage. Especially the handling of stored keys on the smartcard is obscure. (openssl normally can only deal with files) req -newkey .. seems to work, but the key is not written to the card Please, please can anybody give s

Is there a bug in WinCE's SSL_connect( )? returns SSL_ERROR SSL after the 512th iteration. Any ideas ?

2003-06-25 Thread Bala Kanagasabai
Hi All, I am performing an SSL load, soak and stress test on WIN CE. My test program runs on a WIN CE PDA that has an ARM chip. The PDA talks to an openssl UNIX server at the other end. The test program on the PDA client uses non-blocking I/O to connect and disconnect from the SSL server. The foll

port openssl to vxworks 5.4

2003-06-25 Thread linux guy
hi all,I am porting openssl 0.9.7b to vxworks 5.4 now. here is what I have do: 1.install active perl one my win2000 PC. 2.install cygwin 3.run ./configure no-asm no-threads --openssldir=d:\\openssl-0.9.7b vxworks-ppc405 to generate the Makefile.ssl but when I run make,error below occurs: bash-2

RE: make problem with OpenSSL

2003-06-25 Thread David Schwartz
> Hi All, > > I get the following error when I compile the sample program in demos/bio > > openssl-engine-0.9.6j> cc -I../../include -L../.. sconnect.c > -lssl -lcrypto > > ../../libcrypto.a(dso_dlfcn.o): In function `dlfcn_load': > dso_dlfcn.o(.text+0x77): undefined reference to `dlopen' > dso_dlf

make problem with OpenSSL

2003-06-25 Thread Krithiga Thangavelu
Hi All, I get the following error when I compile the sample program in demos/bio openssl-engine-0.9.6j> cc -I../../include -L../.. sconnect.c -lssl -lcrypto ../../libcrypto.a(dso_dlfcn.o): In function `dlfcn_load': dso_dlfcn.o(.text+0x77): undefined reference to `dlopen' dso_dlfcn.o(.text+0xe3):

Re: Certificate CRLs & X509_V_ERR_UNABLE_TO_GET_CRL

2003-06-25 Thread Dr. Stephen Henson
On Wed, Jun 25, 2003, Lee Dilkie wrote: > > It always assumes that a certifcate will have an accessible > > current CRL. As I > > mentioned the absence of a CRLDP extension doesn't > > necessarily mean that the CA > > doesn't issue CRLs: just that it doesn't give details about > > how to download

overcoming make problems with SSL

2003-06-25 Thread james lankton
I have configured openssl-0.9.7bThe command I used to configure is per theinstall readme. "./ "When I invoke the make command the resultis an error message as given below.Any suggestions would be helpful.[EMAIL PROTECTED] ~$ cd openssl-0.9.7b[EMAIL PROTECTED] ~/openssl-0.9.7b$ makemaking all in cry

RE: Certificate CRLs & X509_V_ERR_UNABLE_TO_GET_CRL

2003-06-25 Thread Lee Dilkie
> It always assumes that a certifcate will have an accessible > current CRL. As I > mentioned the absence of a CRLDP extension doesn't > necessarily mean that the CA > doesn't issue CRLs: just that it doesn't give details about > how to download > them in the certificate. > > Steve. Ok, so I didn'

Re: Certificate CRLs & X509_V_ERR_UNABLE_TO_GET_CRL

2003-06-25 Thread Dr. Stephen Henson
On Wed, Jun 25, 2003, Lee Dilkie wrote: > This question intrigues me as well. Does the crl check key on the presence > of the crl extension in the certificate or does it assume that all > certificates have a crl regardless of the certificate extension. I would > expect the behaviour that you descr

Re: Different certificate chains?

2003-06-25 Thread Joe Auricchio
When I switch the two certificates, the problem is still there - meaning it's an application problem not a certificate problem. I'll talk to the Binc IMAP folks about it... Thanks for your time though! :) Joe Auricchio ~ [EMAIL PROTECTED] ___

Re: Different certificate chains?

2003-06-25 Thread Joe Auricchio
Hi Pablo, For the CA root certificate (self-signed, created with CA.pl -newca then recreated with openssl ca with notafterdate 10 years from now) Certificate: Data: Version: 3 (0x2) Serial Number: 0 (0x0) Signature Algorithm: md5WithRSAEncryption Issuer: C=US,