Re: 22 NOv 2004 SNAPSHOTS

2004-11-22 Thread Geoff Thorpe
On November 22, 2004 08:44 am, The Doctor wrote: > Seem to be unavailable. I know there was a problem with a full disk partition, this could be a consequence of that. I can't follow up directly, but please check the on the next snapshot as that should be ok if this was just a disk-space issue.

*param_dup() & C++

2004-11-22 Thread J.T. Conklin
The TAO SSLIOP implementation uses openssl, but does not compile with some C++ compilers (including current versions of g++) due to what appears to be problems with the DSAparams_dup() and DHparams_dup() macros. This bit of code is similar to that in TAO's SSLIOP_EVP_PKEY.cpp. It compiles fine

RPM build errors on RH9

2004-11-22 Thread Eric Wagar
While trying to build openssl rpm on RH9 (rpmbuild -bb and rpmbuild-ba) I receive these messages: error: File not found: /var/tmp/openssl-0.9.7e-root/var/ssl/lib Executing(%doc): /bin/sh -e /var/tmp/rpm-tmp.50330 + umask 022 + cd /usr/src/redhat/BUILD + cd openssl-0.9.7e + DOCDIR=/var/tmp/openssl-0

X509_STORE_CTX_init function

2004-11-22 Thread dragos liciu
Hi, I would like to hear somebody's opinion about the issue below (couldn't figure it out from code) The question is related to the fourth parameter of X509_STORE_CTX_init function (I've implemented an SSL client): int X509_STORE_CTX_init(X509_STORE_CTX *ctx, X509_STORE *store, X509 *x509, ST

Re: Certificate validation failure, Successful

2004-11-22 Thread Jason Haar
We do this here. Ensure your URLs are "application/x-x509-crl", and the CRL is DER encoded and you'll be fine. Cisco did a real good job with their PKI support in the VPN-3000 series - I wish I could say the same for IOS (our CA has a serial number of "0", and IOS refuses to trust a CA with a s

Re: Certificate validation failure, Successful

2004-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2004, Richard A. Faulk Jr. wrote: > I have configured a Cisco VPN 3005 concentrator to use digital certificate > authentication successfully with openssl. However, whenever I configure the > concentrator to read the CRL file via http, I receive a Certificate > validation failur

Certificate validation failure, Successful

2004-11-22 Thread Richard A. Faulk Jr.
I have configured a Cisco VPN 3005 concentrator to use digital certificate authentication successfully with openssl. However, whenever I configure the concentrator to read the CRL file via http, I receive a Certificate validation failure and the VPN client fails to connect. I am using the same

Problems with SSL_read() - SSL_ERROR_SYSCALL / EOF

2004-11-22 Thread Louis LeBlanc
Hey everyone. Been a long time since I've been able to spend much time on SSL code, but here I am again. My app is a client side HTTP/HTTPS application, and the problem that recently showed up (more likely it was just recently noticed) is a problem of sorts with SSL_read(). But only with some se

Re: Memory Leak!

2004-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2004, Jason Davis wrote: > > I am getting a large number of memory leaks, > > [snip] > > > This causes a large memory leak an since this occuors frequently This is a > big problem. I seam to have freed averything, what Have I missed > > Check the FAQ for some hints. > >

Re: Issues creating Certificate Authority

2004-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2004, Dan O'Brien wrote: > > Searched for openssl.cnf and it is on the system: > > [EMAIL PROTECTED]:/etc/ssl# locate openssl.cnf > /usr/lib/ssl/openssl.cnf > > Is this a clue to the problem? > Might be :-) Depends what's in that file. Does it contain a line with: [distinguis

Memory Leak!

2004-11-22 Thread Jason Davis
I am getting a large number of memory leaks,   Firstly when connecting:    _pSSL = SSL_new(pcertificateContext);  SSL_clear(_pSSL);   // Associate socket with the SSL context.   SSL_set_fd(_pSSL, handle());     SSL_connect(_pSSL); .. .. ..     SSL_shutdown(_pSSL);    // Close Socket   Close(Handl

Re: Issues creating Certificate Authority

2004-11-22 Thread Dan O'Brien
On Nov 18, 2004, at 1:27 PM, Dr. Stephen Henson wrote: On Thu, Nov 18, 2004, Dan O'Brien wrote: It's old, but it's the latest in "Debian Stable:" [EMAIL PROTECTED]:~# openssl version -a OpenSSL 0.9.6c 21 dec 2001 built on: Wed Mar 3 19:09:47 UTC 2004 platform: debian-i386 options: bn(64,32) md2(

RE:Possible bug in CSR generation in 0.9.6i

2004-11-22 Thread Bruce A. Friend
We have seen the same problem with the OpenSSL package from sunfreeware.com. We just downloaded it last week so it does appear to be a bug of some kind in the distributed package. Bruce A. Friend Antioch University Network Manager 937.769.1354 [EMAIL PROTECTED] D

Compilation on HP-UX

2004-11-22 Thread Yaron Hirsch
Hi, I've been trying to compile OpenSSL on HP-UX 11 and produce 64-bit binaries. I tried both with gcc (using hpux64-parisc-gcc) and cc (using hpux64-parisc-cc). The libraries are indeed created, but whenever a program tries to link to them - I get an error: "ld: Missing library symbol

22 NOv 2004 SNAPSHOTS

2004-11-22 Thread The Doctor
Seem to be unavailable. -- Member - Liberal International This is [EMAIL PROTECTED] Ici [EMAIL PROTECTED] God Queen and country! Beware Anti-Christ rising! Alberta on 22 Nov 2004 Boot out Ralph Klein - Vote Liberal!! __

Re: SSL session ID generation

2004-11-22 Thread Lutz Jaenicke
On Sun, Nov 21, 2004 at 04:03:20PM +0200, victor sherbinin wrote: > > > > I'm wondering whether generation of SSL session ID has to be based on > > random numbers. In my system, it would be more comfortable for me to > > generate a sequentially incrementing 64-bit or 128-bit session ID, with >

Re: PEM_read_X509 Crashes on openssl-0.9.7e

2004-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2004, Aftab Alam wrote: > Hi All, > > > > OS: WinXP SP1 > > Tool: VC 6.0 > > Active Perl 5.8 > > > > I created a test application with the openssl-0.9.7e, with the binaries > downloaded from Shining Light and tried to parse the subject name of > certificate, it worked fin

PEM_read_X509 Crashes on openssl-0.9.7e

2004-11-22 Thread Aftab Alam
Hi All,   OS: WinXP SP1 Tool: VC 6.0 Active Perl 5.8   I created a test application with the openssl-0.9.7e, with the binaries downloaded from Shining Light and tried to parse the subject name of certificate, it worked fine with me then I downloaded the source from OpenSSL.org and com

RE: Time Stamping in OpenSSL

2004-11-22 Thread Aftab Alam
Thanks Sarvan, I have to patch the openssl so that Windows binaries are created but the document there doesn't have any info on creating windows binaries? Regards, Muhammad Aftab Alam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sravan Sent: Friday, N