BIO chaining and closing

Thanks, So BIO_new_socket would create a BIO around the socket of my choosing which would be more portable than doing BIO_set_fd afterwards? But then the current code uses BIO_new_ssl_connect to create the bio in the first place. I assume I would replace this with BIO_new_socket and BIO_new_s

ssl routines problem

hi all, i m using syslog-ng with stunnel (to encrypt network transfer of logs). For some days i used the setup without any problem but after that i got some errors and stunnel dows not load. Actually i load my stunnel from rc.local (for starting it at boot) and exceptions are thrown related to ope

Re: SSL over SOCKS solved?

On Wed, Mar 02, 2005, Peter wrote: > I am using BIO_set_fd to set the file descriptor of a BIO created by > BIO_new_connect to the socket of an existing SOCKS connection. This > seems to work fine, "lsof -i" reports that indeed I am connected to the > proxy. However, I want to be sure that my

Re: PKCS12 help needed

On Wed, Mar 02, 2005, Carlos Roberto Zainos H wrote: > Hi there!!! > > I'm trying to use the openssl pkcs12 option from command line but I don't > undestand very well the options. > > I have a pair (private key and certificate file) both in PEM format. I want > to get a PKCS#12 file which c

PKCS12 help needed

Hi there!!!   I'm trying to use the openssl pkcs12 option from command line but  I don't undestand very well the options.   I have a pair (private key and certificate file) both in PEM format. I want to get a PKCS#12 file which content both. I would like importa that (the PKCS12 file) into MS Outlo

Re: SSL over SOCKS solved?

I am using BIO_set_fd to set the file descriptor of a BIO created by BIO_new_connect to the socket of an existing SOCKS connection. This seems to work fine, "lsof -i" reports that indeed I am connected to the proxy. However, I want to be sure that my ip address is not embedded in the SSL conn

Re: SSL over SOCKS

Essentially, lets say I have a file descriptor(int) for an existing SOCKS connection. I want SSL to use that existing file descriptor and to know that it doesn't need to open the actual TCP/IP connection. What are the BIO and such calls for this? Currently I'm using BIO_new_ssl_connect and B

Re: setting certificate expiry to more than 30 days

Sanjay Acharya wrote: But Ted, if I have to use -days option then why do we need to specify "default_days" name-value pairs in the openssl.cnf? :( Sanjay Acharya Wichita State University Hmm, default_days is in the CA-section of the config. So I think it applies to the CA-command only. It would

Unknown openssl error in my apache logfiles ...

Hello, I have an https Apache website that proxies to an IIS webserver. The site is secure with openssl (mod_ssl) version OpenSSL 0.9.7d. I am getting the following errors in my weblogs: [Wed Mar 2 14:55:37 2005] [error] OpenSSL: error:0D0680A8:asn1 encoding routine s:ASN1_CHECK_TLEN:wrong tag

Re: setting certificate expiry to more than 30 days

But Ted, if I have to use -days option then why do we need to specify "default_days" name-value pairs in the openssl.cnf? :( Sanjay Acharya Wichita State University --- Bernhard Froehlich <[EMAIL PROTECTED]> wrote: > Sanjay Acharya wrote: > > >Hello. I am posting this message again. Can some

ASN1 stuff

Hi,all. Sorry for my english. Please help me to clarify the using of the such ASN1 structure in RDNSequence and in SubjectDirectoryAttributes. Why do they have different ASN1 structure, if they play the same role but in different contexts. For what reason there is "SET OF"? OpenSSL always used on

Re: setting certificate expiry to more than 30 days

Sanjay Acharya wrote: Hello. I am posting this message again. Can someone help me over this. I am trying to create certificate using "req" command as follows, See http://www.openssl.org/docs/apps/req.html Use -days option. Ted ;) -- PGP Public Key Information Download complete Key from http://ww

setting certificate expiry to more than 30 days

Hello. I am posting this message again. Can someone help me over this. I am trying to create certificate using "req" command as follows, 1) First generated the cert request, > openssl req -newkey rsa:1024 -config openssl.cnf -out xyz_careq.pem 2) Then generated the certificate as follows, openss

RSA Key verification failure

Hello All,   I am working on an IPF(Itanium Processor Family) HPUX machine. Using the configure option hpux-ia64-cc would be the appropriate configure option while building OpenSSL in this platform. But I have problems with OpenSSH authentication when I use this