Re: Passing certificates for peer verification via memory?

2004-11-26 Thread Peter Sylvester
> > > > X509_STORE_add_cert(ctx->cert_store,sk_X509_value(p.ca,sk_X509_num(p.ca)-1)); > > > > The previous line is the one you were looking at. you have have instead used > > a buffer with the cert (openssl x509 -C) and d2i_X509 to parse it. > > > > > > The full program can be found in

Re: Passing certificates for peer verification via memory?

2004-11-26 Thread Dr. Stephen Henson
On Fri, Nov 26, 2004, Peter Sylvester wrote: > > The last line of code is the interesting I assume. > [snip] > > > > X509_STORE_add_cert(ctx->cert_store,sk_X509_value(p.ca,sk_X509_num(p.ca)-1)); > > The previous line is the one you were looking at. you have have instead used > a bu

Re: Passing certificates for peer verification via memory?

2004-11-26 Thread Peter Sylvester
The last line of code is the interesting I assume. you can replace the three usual functions for loading a client key, a client cert and verify locations by code like the following. It takes first a pkcs12 file containing a key, a cert and a ca cert. The ca cert is assumed to be the 'trustwort

Passing certificates for peer verification via memory?

2004-11-26 Thread Andreas Rieke
Hi, my application intends to verify the peer for an SSL connection, and usually, one can use the SSL_CTX_load_verify_locations function for that. However, that function requires that the certificate is written to a file, and this is unsafe for my application since the root user on the same mach

RE: problem about using certificate

2004-11-26 Thread David C. Partridge
Sounds like the client doesn't have a key set and certificate, or the certificate for the CA that issued the client's cert isn't installed at your web server. __ OpenSSL Project http://www.openssl.

problem about using certificate

2004-11-26 Thread hzhijun
if i comment the following line: #SSLVerifyClient require the internet explorer can visit my apache server(version:Apache_2.0.52-Openssl_0.9.7e) with url:https://10.71.105.40/index.htm   But, if I use SSLVerifyClient require option, internel explorer can't visit the above url.   What maybe th

Quiet handshake

2004-11-26 Thread Andre Stryabkov
Hi! Please help me! Can I make quiet handshake by https? With best regards, Andre __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated L

certificates and smartcard in Windows 2000

2004-11-26 Thread Jan Lucenius
I'm trying to use certificates generated with openssl to log in to a wireless network. We use EAP-TLS and a Radius server. The WLAN base station is a D-Link DWL-7000AP and the wireless card D-Link DWL-AG650. We have got this system to work on Windows XP, although it is a bit instabile, and far f