Re: Certificate Revocation List (CRL) management recommendations?

Sorry to prolong this thread, but does the function X509_CRL_verify() actually check to see if the CRL has expired? If not what function performs this verification? I'm confused as to the actually mechanics of using the default_crl_days in code. -David Brock- Ber

test BN_sqr failed

I'm new to openssl.   When I run make report I get Square test failed!.   What exactly should I be looking for to determine why the test failed?   Thanks John Majikes

Parsing Email Addresses

Hi, I'm new to OpenSSL, and I'm hoping someone can tell me the easiest/best way to parse an email address from a X.509 V3 client email cert. Any suggestions would be appreciated. Thanks, Thomas __ OpenSSL Project

Re: info about a certificate request

Martin Matusiak wrote: I was wondering how to print info about a certificate request.. if I create a self signed certificate by passing the -x509 flag, I can use $ openssl x509 -in pubkey.pem -noout -text to print information about it. How can I do the same for a certificate request? The reason

RE: d2i_RSAPublicKey doesn't work

That part of the code remains the same, and continues to work fine. By the way, my last code snippet should have been: U8* tmp = buf; RSA* pub = d2i_RSAPublicKey(0, (const U8**)&tmp, len); I mistakenly typed *len instead of len. Anyways, after I call i2d_RSAPublicKey, calling d2i_RSAPublicKey

Re: MSVC 2005 compilation problem

Hello, I have not tried to build Openssl with Withbey (MSVC 2005), but i think you have the same problem as i suffered when i compiled the code for Windows Mobile 2003 (see openssl-dev list, a topic a week ago). To use functions as strlen or old string related functions you may use #define ST

MSVC 2005 compilation problem

Hello developers, How to correclty build openssl-0.9.8 using MS Visual 2005. Most of the functions are deprecated by the C++ runtime and compiler stops with error codes. How to compile it correctly ? Thank you, Mariusz Ciepły. _

RE: MD5 not returning hash for string ending with "."

You are again using strlen(): hexprint(op, strlen(op)); > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of kaustubh mendki > Sent: Tuesday, July 19, 2005 3:03 PM > To: Ken Goldman > Cc: openssl-users@openssl.org > Subject: Re: MD5 not returning has

Test

mail server test please ignore __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL

Re: MD5 not returning hash for string ending with "."

Hi Ken, Yes, hash can contain printable as well as nonprintable chars.As I mentioned this code was working with other strings and giving correct hash length(16).To eliminate this issue, i converted these chars to hex. Now code look like this: #include #include "openssl/md5.h" void hexprint(uns

RE: Investigating a leak

> That'd do it. But if you're doing the loop in that sequence, and > if you have > set non-blocking on the sockets, then instead of polling for the > connection > you can use select or poll (depending on your platform) to wait > for incoming > connection activity, then enter ssl_accept in blocking

info about a certificate request

I was wondering how to print info about a certificate request.. if I create a self signed certificate by passing the -x509 flag, I can use $ openssl x509 -in pubkey.pem -noout -text to print information about it. How can I do the same for a certificate request? The reason I ask is that I need to

Re: MD5 not returning hash for string ending with "."

> Date: Tue, 19 Jul 2005 04:30:03 -0700 (PDT) > From: kaustubh mendki <[EMAIL PROTECTED]> > > I am trying a simple program to get MD5 hash of > any string.The program is as follows: > > #include > #include "openssl/md5.h" > > int main() > { > unsigned char var[]="k."; > unsigne

SSL_write & SSL_ERROR_SYSCALL problem

Hi developers, The problem is as follows: I want to send ie. 24297 bytes using SSL_write() function. But this function returns -1, SSL_get_error tells() this is SSL_ERROR_WANT_WRITE. Immediately I call SSL_write() second time (with same params) as stated in documentation. After that second call S

MD5 not returning hash for string ending with "."

Hi, I don't know if anyone earlier posted similar message earlier..If so apologise me for repetition. I am trying a simple program to get MD5 hash of any string.The program is as follows: // try.c #include #include "openssl/md5.h" int main() { unsigned char var[]="k."; unsigne

Re: Investigating a leak

Why don't you move the ssl handshake to the thread code? Let the main loop accept tcp sockets, then create the thread with the tcp socket as the argument you pass to the thread run method ... perform then the ssl_accept loop (blocking or non-blocking, up to you) in the thread ... Just a suggestio

RE: Investigating a leak

That'd do it. But if you're doing the loop in that sequence, and if you have set non-blocking on the sockets, then instead of polling for the connection you can use select or poll (depending on your platform) to wait for incoming connection activity, then enter ssl_accept in blocking mode which wou

smime encryption

Hi all, For implementing AS2, where is the best place to look for resources on how to encrypt and decrypt using SMIME via the openssl libraries? Thanks Pj. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ralf Hauser Sent: Tuesday, 19 July 2005 4:33 PM

Re: Investigating a leak

On 7/19/05, Rich Salz <[EMAIL PROTECTED]> wrote: > > Doing this now, but since my app is a server, it never really reaches > > the end, and the leaks build up during its lifetime, which I'd rather > > hoped could be more than a day or so. As it is now, the process' > > virtual memory size quickly r

Re: how to smime decrypt if certificate is lost?

Ralf Hauser wrote: Hi, If I do still have the public key and private key, I hope I still can use openssl to decrypt a message even if I lost the certificate originally used to encrypt to. Unfortunately, my attempts fail so far: openssl smime -decrypt -in encrypted.eml -recip privKeyAndPubkeyI

Re: PKCS12_parse() fails (0.9.8.)

Milan Tomic wrote: PKCS12_parse() fails (returns 0) in my case, although PKCS12_verify_mac() succeed (return 1). I have tried to export cert & key into .pfx file in two ways: - using Internet Explorer GUI, - using java's keytool. but still the same. What should I do? :( does ERR_print_erro

how to smime decrypt if certificate is lost?

Hi, If I do still have the public key and private key, I hope I still can use openssl to decrypt a message even if I lost the certificate originally used to encrypt to. Unfortunately, my attempts fail so far: openssl smime -decrypt -in encrypted.eml -recip privKeyAndPubkeyInOtherCert.pem Enter

Re: d2i_RSAPublicKey doesn't work

Edward Chan wrote: If you're referring to http://www.openssl.org/support/faq.html 3. How do I read or write a DER encoded buffer using the ASN1 functions? ... The opposite assumes we already have len bytes in buf: unsigned char *p; p = buf; p7 = d2i_PKCS7(NULL, &p, len); At this point p7

RE: PKCS12_parse() fails (0.9.8.)

Title: Message   Can someone give me a hand with this problem? :)     -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Milan TomicSent: Monday, July 18, 2005 1:20 PMTo: openssl-users@openssl.orgSubject: PKCS12_parse() fails (0.9.8.) PK

Verifying certificate integrity

Is there any way for me to verify that the contents of the certificates that I am loading are okay? In addition, can I check to see if the chained certificate holds an RSA certificate? -- Nadav Golombick __ OpenSSL Project