Re: Installing a certificate chain

On Mon, Feb 27, 2006 at 07:36:16PM +, Brian Candler wrote: > Ah. I had just used -cert ../server.example.com-cert.pem (where this file > contains all the certificates). So now I've added -CAfile as well, pointing > to the same file: > > #!/bin/sh > cd content > openssl s_server -cert ../server

Re: Installing a certificate chain

On Mon, Feb 27, 2006 at 08:05:59PM +0100, Dr. Stephen Henson wrote: > On Mon, Feb 27, 2006, Brian Candler wrote: > > > On Mon, Feb 27, 2006 at 01:41:33PM +0100, Dr. Stephen Henson wrote: > > > Since you didn't include the root CA it isn't possible to say why it isn't > > > excluded. > > > > > > I

Re: Installing a certificate chain

On Mon, Feb 27, 2006, Brian Candler wrote: > On Mon, Feb 27, 2006 at 01:41:33PM +0100, Dr. Stephen Henson wrote: > > Since you didn't include the root CA it isn't possible to say why it isn't > > excluded. > > > > I notice the small serial numbers in the certificates and some invalid > > extensio

Re: ld.so.1

On Mon, Feb 27, 2006 at 07:24:56AM -0800, John Doe wrote: >ld.so.1: /usr/local/ssl/bin/openssl: fatal: libssl.so.0.9.7: open >failed: No such file or directory > > > >I don't understand 'cause openssl is correctly installed and my $PATH >and > >$LD-LIBRARY_PATH seem to be co

Re: Installing a certificate chain

On Mon, Feb 27, 2006 at 01:41:33PM +0100, Dr. Stephen Henson wrote: > Since you didn't include the root CA it isn't possible to say why it isn't > excluded. > > I notice the small serial numbers in the certificates and some invalid > extensions in there. I'd suggest using the CA.pl script (if you

Re: ld.so.1

Salut, i suppose you have installed an SMC package, have you done a pkgchk SMCosslxx ? do libso have execute bit set ? what Solaris is it ? John Doe a écrit : Hi, Does somebody has an idea about the following error message.   ld.so.1: /usr/local/ssl/bin/openssl: fatal: libssl.so.0

ld.so.1

Hi, Does somebody has an idea about the following error message.   ld.so.1: /usr/local/ssl/bin/openssl: fatal: libssl.so.0.9.7: open failed: No such file or directory   I don't understand 'cause openssl is correctly installed and my $PATH and $LD-LIBRARY_PATH seem to be correct.   HOST:user

Re: AES key length selection bug in OpenSSL 0.9.8a

Hi Michal, > OpenSSL 0.9.8a does not allow to properly select AES key length. > It selects both 128-bit and 256-bit AES no matter which one was specified: I reported this same bug in February 17th, and Dr. Steven Henson has confirmed it is a bug so hopefully it will be fixed soon. If you find an

Re: Installing a certificate chain

On Mon, Feb 27, 2006, Brian Candler wrote: > I'm trying to get a client to verify a server certificate signed by a sub-CA > when the client has only the root CA certificate. > > I'm using TinyCA (GUI wrapper around OpenSSL) as the CA. Here's what I've > done: > > 1. Created a root CA (CN=root.ca

Re: build non-bsafe version of Openssl

Hi Richard,Thanks a lot for that clarification. Actually i was a bit confused about this since in some places I read that there is a patch that can be installed to enable BSAFE. In some other place I read that BSAFE is now available as part of Openssl currently. coz of this, I thought I had to expl

Re: calling SSL_library_init multiple times

> Jagannadha Bhattu G <[EMAIL PROTECTED]>: > Hi, > > Can I call SSL_library_init multiple times in my code under different > threads? From the documented return values, I conclude that it should be > possible. Can some one confirm it? > > Thanks > JB > Yes it's possible. I'm doing like this f

Re: build non-bsafe version of Openssl

You are mistaken. OpenSSL does not use BSafe. /r$ -- SOA Appliance Group IBM Application Integration Middleware __ OpenSSL Project http://www.openssl.org User Support Mailing List

Installing a certificate chain

I'm trying to get a client to verify a server certificate signed by a sub-CA when the client has only the root CA certificate. I'm using TinyCA (GUI wrapper around OpenSSL) as the CA. Here's what I've done: 1. Created a root CA (CN=root.ca.linnet.org) 2. Created a sub CA under this (CN=sub.ca.lin

RE: First posting NEWBEE

> MySQL would have to implement this. I believe there is > some support > of SSL encrypted connections in MySQL. Try here first: > http://dev.mysql.com/doc/refman/5.0/en/secure-connections.html > and if > you still have questions, try the MySQL mailing lists. Otherwise I'm sure you ca

AES key length selection bug in OpenSSL 0.9.8a

Dear OpenSSL users, OpenSSL 0.9.8a does not allow to properly select AES key length. It selects both 128-bit and 256-bit AES no matter which one was specified: [EMAIL PROTECTED]:~$ /usr/local/ssl/bin/openssl version OpenSSL 0.9.8a 11 Oct 2005 [EMAIL PROTECTED]:~$ /usr/local/ssl/bin/openssl cipher

remove

- Original Message - From: Marco GRELLA <[EMAIL PROTECTED]> Date: Monday, February 27, 2006 2:29 pm Subject: Problems with OpenSSL Engine and hashing. > Hello everybody, > I have a problem in making our OpenSSL Engine that drives our HW > accelerator work fine for hash (SHA1 in particular

Re: calling SSL_library_init multiple times

Jagannadha Bhattu G wrote: Hi, Can I call SSL_library_init multiple times in my code under different threads? as SSL_library_init() initializes global tables it should only be called from one thread a time and of course no other thread should use the global data while SSL_library_init() is r

Problems with OpenSSL Engine and hashing.

Hello everybody, I have a problem in making our OpenSSL Engine that drives our HW accelerator work fine for hash (SHA1 in particular). The problem seems to be related to my "Digest_Copy" or (less likely) "Digest_Cleanup" implementation (I'll explain this further on). The Engine works fine for the C