RE: Pop, imap cert

2003-12-02 Thread Lee Dilkie
> > > CN=pop.xxx.com > > CN=smtp.xxx.com > > CN=www.xxx.com > > > > That way, pop3, smtp and https can use the same certificate > and the clients > > won't complain of a name mismatch. > > How do add (or create) multiple CNs in a certificate? I used openssl to create a root certificate and then

Re: Seg fault in BN_mod_exp

2003-12-02 Thread Dr. Stephen Henson
On Tue, Dec 02, 2003, Dr. Stephen Henson wrote: > On Tue, Dec 02, 2003, Ashutosh Jaiswal wrote: > > > > > Pardon my rather limited knowledge about debugging with gdb, but does > > this mean that there's some problem with glibc: > > > > Program received signal SIGSEGV, Segmentation fault. > > 0x

Re: Seg fault in BN_mod_exp

2003-12-02 Thread Dr. Stephen Henson
On Tue, Dec 02, 2003, Ashutosh Jaiswal wrote: > > Pardon my rather limited knowledge about debugging with gdb, but does > this mean that there's some problem with glibc: > > Program received signal SIGSEGV, Segmentation fault. > 0x45964169 in free () from /lib/libc.so.6 > (gdb) i sym 0x45964169

SSL_ERROR_SYSCALL in https client

2003-12-02 Thread KOverton
Client: OpenSSL 0.9.6k, Windows98 WebServer: IIS 6.0 (Don't know the OS specifics) My client app is getting this from SSL_get_error() after an SSL_read() returning 0. errno = ENOENT, which in the Win32 universe means "no such file or directory". This occurs on the 3rd successive SSL_read() in t

Re: Seg fault in BN_mod_exp

2003-12-02 Thread Ashutosh Jaiswal
Dr. Stephen Henson wrote: On Tue, Dec 02, 2003, Ashutosh Jaiswal wrote: I might be doing something really stupid, but I checked my code again and don't seem to be able to find it. I'm trying to use the function BN_mod_exp for values which are earlier generated by other BN_* funct

Re: Seg fault in BN_mod_exp

2003-12-02 Thread Ashutosh Jaiswal
Dr. Stephen Henson wrote: On Tue, Dec 02, 2003, Ashutosh Jaiswal wrote: I might be doing something really stupid, but I checked my code again and don't seem to be able to find it. I'm trying to use the function BN_mod_exp for values which are earlier generated by other BN_* funct

Re: Seg fault in BN_mod_exp

2003-12-02 Thread Dr. Stephen Henson
On Tue, Dec 02, 2003, Ashutosh Jaiswal wrote: > I might be doing something really stupid, but I checked my code again > and don't seem to be able to find it. I'm trying to use the function > BN_mod_exp for values which are earlier generated by other BN_* > functions. Here's the code: > > e = BN_

Re: intermediate CA

2003-12-02 Thread Dr. Stephen Henson
On Tue, Dec 02, 2003, Jia L Wu wrote: > Hello, > My question is: > I created a certificate chain: usr.cert->CA_1.cert->CA.cert. > where CA.cert is self-signed certificate and is imported as trusted > certificate. > Signing CA_1's request with CA's private key and certificate generates > CA_1.cert.

Seg fault in BN_mod_exp

2003-12-02 Thread Ashutosh Jaiswal
I might be doing something really stupid, but I checked my code again and don't seem to be able to find it. I'm trying to use the function BN_mod_exp for values which are earlier generated by other BN_* functions. Here's the code: e = BN_new(); /* e = (a ^ t) (mod(phi)) */ if (!BN_mod_exp(e, a,

intermediate CA

2003-12-02 Thread Jia L Wu
Hello, My question is: I created a certificate chain: usr.cert->CA_1.cert->CA.cert. where CA.cert is self-signed certificate and is imported as trusted certificate. Signing CA_1's request with CA's private key and certificate generates CA_1.cert. Signing usr's request with CA_1's private key and CA

Re: async windows sockets

2003-12-02 Thread Dr. Stephen Henson
On Tue, Dec 02, 2003, tuviah snyder wrote: > Oops sorry wrong thread. > > Can anyone help me with my Windows Async sockets questions? I have it > working fine on Unix, and I'm hoping I don't have to modify my app to use > select or polling. > OpenSSL socket BIOs don't care how you decide data i

Re: config file to generate request with asn1parse

2003-12-02 Thread Dr. Stephen Henson
On Tue, Dec 02, 2003, Ñëåïíåâ Âëàäèìèð wrote: > Hello, > > some time ago I posted a question to this list about how to generate a > certificate request, knowing only the public key. One of the answers I > got is generate a request "manually" from its fields, then hack the > openssl utilities s

Re: Printing ssl handshake messages...

2003-12-02 Thread Jostein Tveit
Sriram R <[EMAIL PROTECTED]> writes: > Is it possible to print the ssl handshake and keys exchanged > on the openssl side?..If so how? I recommend using ssldump http://www.rtfm.com/ssldump/ >. -- Jostein Tveit ([EMAIL PROTECTED]) _

Re: async windows sockets

2003-12-02 Thread tuviah snyder
Oops sorry wrong thread. Can anyone help me with my Windows Async sockets questions? I have it working fine on Unix, and I'm hoping I don't have to modify my app to use select or polling. TIA, Tuviah __ OpenSSL Project

Re: config file to generate request with asn1parse

2003-12-02 Thread tuviah snyder
Can anyone help me with my Windows Async sockets questions? I have it working fine on Unix, and I'm hoping I don't have to modify my app to use select or polling. TIA, Tuviah __ OpenSSL Project htt

config file to generate request with asn1parse

2003-12-02 Thread Слепнев Владимир
Hello, some time ago I posted a question to this list about how to generate a certificate request, knowing only the public key. One of the answers I got is generate a request "manually" from its fields, then hack the openssl utilities so they don't check the signature on the request. The new f