[Fwd: Re: Queries over OpenSSL programs]

2005-06-13 Thread Rohan Shrivastava
Hi there, Can any body please tell me, where can I find the answers to these questions? Thanks -Rohan Original Message Subject: Re: Queries over OpenSSL programs From:"Rohan Shrivastava" <[EMAIL PROTECTED]> Date:Wed, June 8, 2005

Re: Certificate chain problem

2005-06-13 Thread Goetz Babin-Ebell
Eleftheria Petraki wrote: > Hi all, Hello Eleftheria, > I have generated a self signed root certification authority and an > intermediate certification authority signed by the root CA using openssl > 0.9.7g. The intermediate CA signed an apache 1 with mod-ssl SSL server > certificate. Both t

Re: problem with X509_get_ext_d2i() and AUTHORITY_KEYID

2005-06-13 Thread soukyan
Hi I have solved my problem. The mistake was in this line: bool cCert::getAuthorityKeyID(int & crit, AUTHORITY_KEYID * akid) it should be: bool cCert::getAuthorityKeyID(int & crit, AUTHORITY_KEYID * & akid) and it works fine now. I have one another question. I have three structures: X509 * x5

RE: Upgrade openssl

2005-06-13 Thread Airey, John
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Arsen > Hairapetyan > Sent: 13 June 2005 13:07 > To: openssl-users@openssl.org > Subject: Upgrade openssl > > Hello! > I have CERN SLC3 installed on my machine. It came with > openssl v0.9.7a > inst

RE: Certificate chain problem

2005-06-13 Thread Per Nilsson
The root CA certificate needs to be installed in the browser, have you done that ? It is not enough to put the root CA in the ca chain. The client must be able to build a certificate chain that ends in a locally trusted certificate (usually a preinstalled root CA). I believe the hint in the log fil

Re: Certificate chain problem

2005-06-13 Thread Eleftheria Petraki
> Hi all, > > I have generated a self signed root certification authority and an > intermediate certification authority signed by the root CA using openssl > 0.9.7g. The intermediate CA signed an apache 1 with mod-ssl SSL server > certificate. Both the root and intermediate PEM certificates are pl

Re: SSL_connect() question

2005-06-13 Thread Paul Slootweg
At 13:54 13/06/2005, you wrote: Hi, I have the following code: INCSSL::SSL *ssl; INCSSL::SSL_CTX *ctx; int rc; ctx = SSL_CTX_new(SSLv23_client_method()); ssl = SSL_new(ctx); SSL_set_fd(ssl, insocket); rc = SSL_connect(ssl); and rc returns -1, meaning that the SSL handshake was not successful.

Signed data in CMS format

2005-06-13 Thread Madhu Sudhan Reddy
Hello Experts,       I am facing a big problem. In our project we have requirement to output signed data in CMS (Cryptographic Message Syntax, RFC 2630) format.   It is in my head to develop it. My doubt is, Can I use OpenSSL version “0.9.7d” to build sign d

SSL_connect() question

2005-06-13 Thread Adam Kornafeld
Hi, I have the following code: INCSSL::SSL *ssl; INCSSL::SSL_CTX *ctx; int rc; ctx = SSL_CTX_new(SSLv23_client_method()); ssl = SSL_new(ctx); SSL_set_fd(ssl, insocket); rc = SSL_connect(ssl); and rc returns -1, meaning that the SSL handshake was not successful. Can anyone tell what the reason

Re: Certificate chain problem

2005-06-13 Thread Olaf Gellert
Eleftheria Petraki wrote: > Hi all, > > I have generated a self signed root certification authority and an > intermediate certification authority signed by the root CA using openssl > 0.9.7g. The intermediate CA signed an apache 1 with mod-ssl SSL server > certificate. Both the root and intermedia

Upgrade openssl

2005-06-13 Thread Arsen Hairapetyan
Hello! I have CERN SLC3 installed on my machine. It came with openssl v0.9.7a installed. Now I want to replace it by openssl v0.9.7g. The following command reports that there are two following RPMs in the system: > rpm -qa|grep openssl openssl-0.9.7a-33.12 openssl-devel-0.9.7a-33.12 Now when I

Certificate chain problem

2005-06-13 Thread Eleftheria Petraki
Hi all, I have generated a self signed root certification authority and an intermediate certification authority signed by the root CA using openssl 0.9.7g. The intermediate CA signed an apache 1 with mod-ssl SSL server certificate. Both the root and intermediate PEM certificates are placed in