Question on des.h and des_old.h in FIPS-1.0

There are two des header files under  /include/openssl directory, and the Makefile in fips-1.0 include both des.h and des_old.h.  The same functions defined twice in des.h and des_old.h. Why?   Thanks. Love cheap thrills? Enjoy PC-to-Phone calls to 30+ countries for just 2¢/min with Yahoo! Mes

Intermediate CA extension problems.

OpenSSL folks, I'm having an issue when making an intermediate CA. As I understand the specs (and please, correct me if I'm wrong), a root (i.e. self-signed) CA can be a v1 certificate, but intermediate CAs must: (a) be v3 (b) have SubjectKeyIdentifier (c) have AuthorityKeyIdentifier

RE: SSL_connect ( ) hangs

> I have a peculiar problem. When my SSL client (in blocking mode) > makes a connection with NonSSL server , the client hangs . I need > the client to terminate the connection with the server if the server > is not ssl enabled one. I tried a lot of options but all failed . > Please give any soluti

Re: HP-UX build diagnostic

Hello, > I'm trying a new OpenSSL build on an HP-UX Itanium (B.11.23 U ia64) > and at the end, just before doing the Certs some unresolved refs are > found: > > ./Configure hpux-ia64-gcc --openssldir=$OPENSSL_DIR threads shared > make > ... > make -f ../Makefile.shared -e \ >

HP-UX build diagnostic

Hello: I'm trying a new OpenSSL build on an HP-UX Itanium (B.11.23 U ia64) and at the end, just before doing the Certs some unresolved refs are found:     ./Configure hpux-ia64-gcc --openssldir=$OPENSSL_DIR threads shared     make     ... make -f ../Makefile.shared -e \     A

Re: Analysis Tools!

sorry GNU license not opengl  :)On 5/16/06, amr kamel <[EMAIL PROTECTED]> wrote: hey, There is a piece of software called socketbench "but unfortunately it is commercial", also there is Ethereal which is free "under opengl license" :) I hope that i ve helped.  On 5/12/06, sun yingming <[EMAIL PROTE

RE: 0.9.8b windows binaries

Thanks Chris, I appreciate you taking time to respond & help. Parind. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hunter Sent: Friday, May 12, 2006 8:35 PM To: openssl-users@openssl.org Subject: Re: 0.9.8b windows binaries On 5/12/06, Parind Sha

Re: SSL_connect ( ) hangs

On Tue, May 16, 2006 at 09:40:52AM +, Sendil kumar wrote: > I have a peculiar problem. When my SSL client (in blocking mode) > makes a connection with NonSSL server , the client hangs . I need the > client to terminate the connection with the server if the server is not > ssl enabled one. I tr

Re: Multiple commonNames or using subjectAltName problems.

This is not surprising, since the inventors of these fields have only thought about a format but not about an associated service implementable via an API so that you can ask: "Is this cert good for domain/host xyz". Instead of that the implementations extract sometimes the first or the last oc

Re: Analysis Tools!

hey, There is a piece of software called socketbench "but unfortunately it is commercial", also there is Ethereal which is free "under opengl license" :) I hope that i ve helped.  On 5/12/06, sun yingming <[EMAIL PROTECTED]> wrote: Hi, I've wrote a pair of SSL client/server program on my PC.It's

SSL_connect ( ) hangs

Hi, I have a peculiar problem. When my SSL client (in blocking mode) makes a connection with NonSSL server , the client hangs . I need the client to terminate the connection with the server if the server is not ssl enabled one. I tried a lot of options but all failed . Please give any solutions to

RE: Multiple commonNames or using subjectAltName problems.

Hi, Goetz and Peter, thanks for all your help on this. Goetz, I have implemented the corrections you gave me and it all makes much more sense now - my certificates come out looking like you said they should when viewed using openssl x509 -text -noout -in name-cert.pem. However, it still doesn't