Re: Hardware Acceleration.

2005-06-08 Thread Riaz Rahaman
Since the card does IPSec hardware acceleration, then I believe you can use it for SSL acceleration as well..provided you are planning to port openssl to the card and write you engine driver code using the low level hardware api's which should be provided with the card..I can give you more info if

RE: Compile error in n_pkey.c with 0.9.7g on Win32 using ntdll.mak and nasm

2005-06-08 Thread Edward Chan
Title: Compile error in n_pkey.c with 0.9.7g on Win32 using ntdll.mak and nasm Crap.  Nevermind.  I forgot to run   > perl Configure VC-WIN32 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edward ChanSent: Wednesday, June 08, 2005 1:51 PMTo: openssl-users@opens

Compile error in n_pkey.c with 0.9.7g on Win32 using ntdll.mak and nasm

2005-06-08 Thread Edward Chan
Title: Compile error in n_pkey.c with 0.9.7g on Win32 using ntdll.mak and nasm I get the following compile error:     cl /Fotmp32dll\f_string.obj  -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDI AN -DDSO_WIN32

RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified'

2005-06-08 Thread Chris Mckenzie
Title: RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified' Something has to be broken here. I even attempted to supply the CRL file. 1) Checked that my CA cert verifies correctly, in the process determine the cert's CDP: openssl x509 -in cacert.pem -text Ce

RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified'

2005-06-08 Thread Chris Mckenzie
Title: RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified' Yet another update. Just upgraded to openssl 9.7g latest, non-beta. No difference. It doesn't explicitly say anywhere that if you don't set Net::SSLeay::X509_V_FLAG_CRL_CHECK, that CRL verification won't

RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified'

2005-06-08 Thread Chris Mckenzie
Title: RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified' Just to follow up, all 3 CA certs in /root/ca/ are pem format and check out fine with openssl x509. Now, something for the author's of IO::Socket::SSL. There looks to be 2 points of strangeness here: W

RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified'

2005-06-08 Thread Chris Mckenzie
Title: RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified' Well I got this much working: my $hashref    = $IO::Socket::SSL::GLOBAL_CONTEXT_ARGS; $hashref->{'SSL_verify_mode'} = Net::SSLeay::VERIFY_PEER(); #$hashref->{'SSL_ca_path'} = "/root/ca"; $hashref->{'SSL_

Problem reading 'large' responses

2005-06-08 Thread Paul Slootweg
I've got some code that seems to work, except when the server responds with a 'large' amount of data. When I call SSL_read() I get a SSL_ERROR_SYSCALL error but no data returned. I've scoured the archive for related questions, but none of the answers seem to tell me where I'm going wrong. Th

RE: Quick question about 'client-ssl-warning' => 'Peer certificat e not verified'

2005-06-08 Thread Chris Mckenzie
Title: RE: Quick question about 'client-ssl-warning' => 'Peer certificate not verified' Made some progress I think. I'm hoping someone can slap me in the right direction. Using LWP and IO::Socket::SSL, I should be able to define the SSL constructor's args by setting $GLOBAL_CONTEXT_ARGS afte

RNG questions with s_client. and 0.9.8beta4

2005-06-08 Thread Frédéric Donnat
Hi all, I'm using openssl-0.9.7x and s_client option without any problem. openssl s_client -connect etc... I've just test this with openssl-0.9.8-beta4 and this does not work. LD_LIBRARY_PATH=/usr/local/ossl-0.9.8-beta4/lib /usr/local/ossl-0.9.8-beta4/bin/openssl version OpenSSL 0.9.8-beta4 06

IIS 6 and certreq.txt

2005-06-08 Thread gurkan
Hi I work with IIS6 and SSL , i can't generate one key like reqkey.pem with my private key that i did generate before with openssl and the file certreq.txt of the iis6 . the idea is that reqkey must contain the private key and the certificat request , to sign by my personal CA . Can you give the