Is it proper for OCSP calls to be in SSL_CTX_set_verify callback?

2006-06-19 Thread Charlie Lenahan
I am looking at adding OCSP to a TLS handshake, and trying to figure out the intended use of the callback function in SSL_CTX_set_verify(). >From what I gather for each certificate in a chain it will call the verify_callback func() . In that function that I provide, I can make my OCSP or SCVP call

64 bit build problems

2006-06-19 Thread Lawrence Rose
Dear OpenSSL: I previously made successful 32-bit build/installs of OpenSSL on four different OS's (linux/sunos/hpux/irix) without problem.  Now I'm trying to do 64-bit builds - successful on hpux and linux but make test fails (for different reasons) on both sunos and irix after non-erroneous

building own engine dll file using engine api

2006-06-19 Thread Torsha Banerjee
Hi, I have built my own dll file for engine pkcs11 and have tried including that. But I get the error: 2140:error:2507606A:DSO support routines:WIN32_BIND_FUNC:could not bind to the requested symbol name:.\crypto\dso\dso_win32.c:288:symname(bind_engine) 2140:error:2506C06A:DSO support routin

Re: asn1parse error

2006-06-19 Thread Saurabh Arora
hello Marek thanks.. it works now tanish On 6/19/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > > Hello, > > > i am not able to use asn1parse on my certificate. > > > > > > i generated the certificate by : > > > - generating request > > > - signing requ

Re: asn1parse error

2006-06-19 Thread Marek Marcola
Hello, > > Hello, > > > i am not able to use asn1parse on my certificate. > > > > > > i generated the certificate by : > > > - generating request > > > - signing request by ca > > > > > > also i used CA.pl to do the same task. > > > > > > but in both cases, when i use asn1parse, it gives me the fol

Re: asn1parse error

2006-06-19 Thread Saurabh Arora
On 6/19/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > i am not able to use asn1parse on my certificate. > > i generated the certificate by : > - generating request > - signing request by ca > > also i used CA.pl to do the same task. > > but in both cases, when i use asn1parse, it gives me

Root certificates usage and distibution

2006-06-19 Thread Oleksandr Darchuk
Hello. Sorry for possible off topic, but may be openssl users and gurus will be able to help me in SSL related issue. I want to receive as much root certificates as possible for internal application (SSL gateway). For me the simples way to do it: export all of them from Internet Explorer. But as f

Re: asn1parse error

2006-06-19 Thread Marek Marcola
Hello, > i am not able to use asn1parse on my certificate. > > i generated the certificate by : > - generating request > - signing request by ca > > also i used CA.pl to do the same task. > > but in both cases, when i use asn1parse, it gives me the following error : > ---

asn1parse error

2006-06-19 Thread Saurabh Arora
hi all i am not able to use asn1parse on my certificate. i generated the certificate by : - generating request - signing request by ca also i used CA.pl to do the same task. but in both cases, when i use asn1parse, it gives me the following error : # ./open

Re: Change usage

2006-06-19 Thread Marek Marcola
Hello, > i have a pfx-cert by my costumer. If i use it to sign my pdf-documents (with > java-class itext), the acrobat dont accept the sign. The problem is the > usage of the cert. I have the personal password, but not the chance to > create a new cert. How can i change the usage of the existing c