CRYPTO_set_id_callback problem

2005-11-11 Thread Steffen Pankratz
Hi I have a Engine which uses pthreads and I copied the thread stuff from mttest.c to implement proper CRYPTO_set_locking_callback and CRYPTO_set_id_callback functions. If I don't call 'CRYPTO_set_id_callback' in 'void thread_setup(void)' openssl exits without any problem. If I call 'CRYPTO

what can be the content type (part of Content info ) other than simple data in Signed data

2005-11-11 Thread Konark
what can be the content type (part of Content info ) other than simple data in Signed data.     Structure description     SignedData ::= SEQUENCE {   version Version,     digestAlgorithms DigestAlgorithmIdentifiers,   contentInfo ContentInfo,   certificates    

Re: what's the difference between copy and move?

2005-11-11 Thread Goetz Babin-Ebell
Gerd Schering wrote: Hi, Hello Gerd, in the template config file that came with 0.9.8, I found that subjectAltName=email:copy subjectAltName=email:move are both possible, but what is the difference? it's obvious you never bothered to try it or apply a little bit of syntactical reasoning.

Re: is it me or ... [solved]

2005-11-11 Thread Jason
yall were right.. it was me.. didnt realize LD_OPTIONS was a make time variable.. not a configure time one. problem solved. thanks. Jason __ OpenSSL Project http://www.openssl.org User Support Mail

Re: is it me or ...

2005-11-11 Thread Jason
did make clean && rm Makefile and then tried LD_OPTIONS="-R/local/stuff/lib";export LD_OPTIONS ./config --shared --prefix=/local/stuff --openssldir=/local/stuff and did my make and still no rpath [EMAIL PROTECTED] dump -Lv apps/openssl | grep -i RUN [EMAIL PROTECTED] [EMAIL PROTE

Re: ASN1 OID values.

2005-11-11 Thread Dr. Stephen Henson
On Fri, Nov 11, 2005, Dr. Stephen Henson wrote: > On Fri, Nov 11, 2005, Katie Lucas wrote: > > > > > > > We're creating custom extensions, so I went off and registered us an > > OID under {2.25} to use. It's a UUID OID, so it's quite a long > > numerical string. > > > > I can create and sign c

Re: ASN1 OID values.

2005-11-11 Thread Dr. Stephen Henson
On Fri, Nov 11, 2005, Katie Lucas wrote: > > > We're creating custom extensions, so I went off and registered us an > OID under {2.25} to use. It's a UUID OID, so it's quite a long > numerical string. > > I can create and sign certificates with the extensions in, and load > the certificates and

Re: is it me or ...

2005-11-11 Thread Andreas Almroth
Jason wrote: >does openssl-0.9.7i not respect LDFLAGS?? >Im trying to set the rpath and cannot get it set for some reason.. > >[EMAIL PROTECTED] ldd /local/stuff/bin/openssl >libssl.so.0.9.7 => (file not found) >libcrypto.so.0.9.7 =>(file not found) >libsocket.so.

RE: is it me or ...

2005-11-11 Thread Chapman, Kyle
check out crle... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jason Sent: Friday, November 11, 2005 11:00 AM To: openssl-users@openssl.org Subject: is it me or ... does openssl-0.9.7i not respect LDFLAGS?? Im trying to set the rpath and cannot get it se

is it me or ...

2005-11-11 Thread Jason
does openssl-0.9.7i not respect LDFLAGS?? Im trying to set the rpath and cannot get it set for some reason.. [EMAIL PROTECTED] ldd /local/stuff/bin/openssl libssl.so.0.9.7 => (file not found) libcrypto.so.0.9.7 =>(file not found) libsocket.so.1 =>/usr/lib/

ASN1 OID values.

2005-11-11 Thread Katie Lucas
We're creating custom extensions, so I went off and registered us an OID under {2.25} to use. It's a UUID OID, so it's quite a long numerical string. I can create and sign certificates with the extensions in, and load the certificates and pull extensions out by OID and everything seems fine unti

Re: X509_verify_cert() and multiple threads

2005-11-11 Thread Steffen Fiksdal
On Fri, Nov 11, 2005, Steffen Fiksdal wrote: I serialized the whole BN_MONT_CTX_set_locked() function, but it still fails. THe BN_MONT_CTX_set_locked is not always called because sometimes the _method_mod_n is NOT NULL. OK, I've committed a fix. Please apply this patch: http://cvs.open

RE: PKCS7 standard : OpenSSL is following weather v1.5 OR v1.6 OR any other

2005-11-11 Thread Konark
Thanks Steve. I it seems to be correct But I need to check with my colleague who implemented PKCS#1 (crypto) . konark On Fri, Nov 11, 2005, Konark wrote: > > Actually we implemented PKCS#7 V1.5 ( we got the standards from RSA site ) > > -> We did as per standard including DigestInfo struct

Re: X509_verify_cert() and multiple threads

2005-11-11 Thread Dr. Stephen Henson
On Fri, Nov 11, 2005, Steffen Fiksdal wrote: > > > > I serialized the whole BN_MONT_CTX_set_locked() function, but it still > fails. > THe BN_MONT_CTX_set_locked is not always called because sometimes > the _method_mod_n is NOT NULL. > OK, I've committed a fix. Please apply this patch: http

Re: PKCS7 standard : OpenSSL is following weather v1.5 OR v1.6 OR any other

2005-11-11 Thread Dr. Stephen Henson
On Fri, Nov 11, 2005, Konark wrote: > > Actually we implemented PKCS#7 V1.5 ( we got the standards from RSA site ) > > -> We did as per standard including DigestInfo structure as part of > signature calculation . > > -> When I try to identify signature with OpenSSL I found this thing > t

RE: PKCS7 standard : OpenSSL is following weather v1.5 OR v1.6 OR any other

2005-11-11 Thread Konark
Actually we implemented PKCS#7 V1.5 ( we got the standards from RSA site ) -> We did as per standard including DigestInfo structure as part of signature calculation . -> When I try to identify signature with OpenSSL I found this thing then I tried with out this DigestInfo structure It's

Re: PKCS7 standard : OpenSSL is following weather v1.5 OR v1.6 OR any other

2005-11-11 Thread Dr. Stephen Henson
On Fri, Nov 11, 2005, Konark wrote: > > > Thanks for the reply . > > > > But my problem is .. > > > > PKCS#7 V1.5 sign implementation uses this structure in process of sign > calculation > > > > DigestInfo ::= SEQUENCE { > > digestAlgorithm DigestAlgorithmIdentifier, > >

RE: PKCS7 standard : OpenSSL is following weather v1.5 OR v1.6 OR any other

2005-11-11 Thread Konark
  Thanks for the reply .   But my problem is ..   PKCS#7 V1.5 sign implementation  uses this structure in process of sign calculation     DigestInfo ::= SEQUENCE {   digestAlgorithm DigestAlgorithmIdentifier,   digest Digest }   But I found that OpenSSL is not doing as specif

Re: PKCS7 standard : OpenSSL is following weather v1.5 OR v1.6 OR any other

2005-11-11 Thread Dr. Stephen Henson
On Fri, Nov 11, 2005, Konark wrote: > > > Hi All, > > > > I found that OpenSSL PKCS#7 module implementation is different from the both > the versions . > > > > Please tell me which version it is following (URGENT) > > PKCS#7 v1.5. Very few applications use 1.6. Steve. -- Dr Stephe

PKCS7 standard : OpenSSL is following weather v1.5 OR v1.6 OR any other

2005-11-11 Thread Konark
  Hi All,   I found that OpenSSL PKCS#7 module implementation is different from the both the versions .   Please tell me which version it is following (URGENT)   Regards, konark

what's the difference between copy and move?

2005-11-11 Thread Gerd Schering
Hi, in the template config file that came with 0.9.8, I found that subjectAltName=email:copy subjectAltName=email:move are both possible, but what is the difference? Gerd -- -- -- Gerd Schering, Email: [EMAIL PROTECTED] -- --

Re: X509_verify_cert() and multiple threads

2005-11-11 Thread Steffen Fiksdal
On Thu, Nov 10, 2005, Steffen Fiksdal wrote: I have tried to get this error on my other linux box, a uniprocessor non SMP Linux kernel, without luck. So I experience the error in a few occations on the SMP kernel, but not on the uniprocessor non SMP Linux kernel. When I mutex the MONT_HELP