RE: TLS application data MAC

Hello Dragos, I was able to solve this issue.. thanks to Niklas and Goran :) I was using the wrong sequence number. Once again thank you everyone for your help. Regards, Avinash -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of dragos liciu Sent: Tuesday,

building for WinCE

hi! while building for WinCE i had two problems 1. it couldn't find windows.h and other header files in the PocketPC SDK include directory. i added the directory to the PATH and INCLUDE environment variables as well as adding them to WCEARM.BAT SDKROOT but it still didn't work. i had the same prob

About RFC3546 (TLS extensions)

Hi all, I am interested in adding extensions support for tls protocol. It seems that OpenSSL does not support it yet. So, if anyone has done something on this, can I join in and offer some efforts? -- Si, Tiange <[EMAIL PROTECTED]> ___

Re: PKCS7_add_attribute

On Mon, Sep 20, 2004, Antonio Ruiz Martínez wrote: > Dr. Stephen Henson wrote: > > >On Thu, Sep 16, 2004, Antonio Ruiz Martínez wrote: > > > > > >>I tried to put the sequence in an octet_string and with that way there > >>is no problem but I would like to use the SEQUENCE directley if it is >

OpenSSL and Outlook (2000)

Hello everyone, I'm having a tuff time with Outlook 2000 and openssl. Here's my situation: I have cyrus-imapd 2.2.8 w/TLS enabled. Basically I've created my CA: openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 3650 -config ./openssl.cnf Then created my imap server cert/key

Re: Adding signature algorithm for verification

Lee Baydush wrote: Will somebody tell me how to add an OID and corresponding verification routine to OpenSSL version 0.9.7c to verify a SHA-256 signature. Currently I am trapping the X509_V_ERR_CERT_SIGNATURE_FAILURE and X509_V_ERR_CRL_SIGNATURE_FAILURE errors in my verify callback routine, compa

RE: TLS application data MAC

Hi Avinash, Sorry for late reply, but I didn't follow the emails on weekend. You sent: . Key for HMAC_MD5 = server_auth_key Input msg to MAC algorithm { seq no = 0x00 (8bytes) Type = 0x23 (application data) version = 0x0301 Length = 0x05 Data = 0x01 0x07 0x00 0x05 0x01 } ..

RE: Problems with get_notAfter

Thanks a lot!!! It´s working!!! I used the first part of your code... Now, what BIO_s_file and Bio_set_fp actually do??? Thanks again!!! Marcos --- Lee Baydush <[EMAIL PROTECTED]> escreveu: > ok. It must be the bio then. If you are > debugging/running this in a console window, try > this...

RE: Problem signing certificate OpenSSL 0.9.7d

Anyone have any thoughts or an explanation for this??? Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David C. Partridge Sent: 17 September 2004 15:15 To: Openssl-Users Subject: Problem signing certificate OpenSSL 0.9.7d C:\temp>openssl version OpenS

RE: Problems with get_notAfter

ok. It must be the bio then. If you are debugging/running this in a console window, try this... BIO *bio_out; bio_out=BIO_new(BIO_s_file()); ASSERT(bio_out!=NULL); BIO_set_fp(bio_out, stdout, BIO_NOCLOSE); ASN1_TIME_print(bio_out, X509_get_notAfter(cert)); BIO_free_all(bio_out); Otherwise, you c

RE: Problems with get_notAfter

Yes, I checked if the hbio and the cert were properly loaded (hbio!= NULL and cert!= NULL)... As I wrote before, I was able to print the full cert... Marcos --- Lee Baydush <[EMAIL PROTECTED]> escreveu: Do you know are you trying to output to an input only BIO? I assume you also checked the hb

Adding signature algorithm for verification

Will somebody tell me how to add an OID and corresponding verification routine to OpenSSL version 0.9.7c to verify a SHA-256 signature. Currently I am trapping the X509_V_ERR_CERT_SIGNATURE_FAILURE and X509_V_ERR_CRL_SIGNATURE_FAILURE errors in my verify callback routine, comparing the OID in t

RE: Problems with get_notAfter

Do you know are you trying to output to an input only BIO? I assume you also checked the hbio!=NULL and cert!=NULL? -Original Message- From: Marcos Paraiso [mailto:[EMAIL PROTECTED] Sent: Monday, September 20, 2004 9:08 AM To: [EMAIL PROTECTED] Subject: Problems with get_notAfter Hi ev

Problems with get_notAfter

Hi everebody, I´m new with OpenSSL and am having some trouble ... I´m trying to print the endDate of a certificate, using the ASN1_TIME_print function but nothing happens. Here´s an excerpt from the code: FILE *file; BIO *hbio; X509 *cert; hbio = BIO_new_file(file, "r"); cert = PEM_read_bio_X50

Re: PKCS7_add_attribute

Dr. Stephen Henson wrote: On Thu, Sep 16, 2004, Antonio Ruiz Martínez wrote: I tried to put the sequence in an octet_string and with that way there is no problem but I would like to use the SEQUENCE directley if it is possible. I tried that test file and it chokes sev