Re: unable to get local issuer certificate

2006-08-29 Thread Bernhard Froehlich
On 8/28/06, Milan Tomic <[EMAIL PROTECTED]> wrote: While atempting to establish SSL connection I got this OpenSSL error: Certificate Verification: Error (20): unable to get local issuer certificate [...] One of the possible reasons for this error is that the server cert is signed by an inter

Re: unable to get local issuer certificate

2006-08-29 Thread Krishna M Singh
Hi I am not sure about the kind of cert u are having problem with. Is this some standard cert of some site (than pass on the URL) or if some internal site, than please check that complete chain is present in the IE CA list. Also, the CA cert should be installed in the Trusted root certs lists in

Re: Validating Cert Chain

2006-08-29 Thread k b
Thanks for all the reponse, i have a question about this following method int X509_STORE_CTX_init(X509_STORE_CTX *ctx, X509_STORE *store, X509 *x509, STACK_OF(X509) *chain); if i understand this correctly the argument 'x509' is the cert that u want to be verified & the

Re: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Robert . Zander
Nils, The basic succession of calls are as follows. I think the program waits for an ssl_read or ssl_write to implicitly trigger the handshake process. meth = TLSv1_client_method() SSL_load_error_strings(); SSLeay_add_ssl_algorithms(); SSL_CTX_new(meth); ssl = SSL_new( ctx ); sbio = BIO_new_s

SMIME_read_PKCS7 fails with memory BIO but works with file BIO

2006-08-29 Thread Heikki Toivonen
I am trying to use SMIME_read_PKCS7 to read a signed and encrypted MIME message from memory BIO, but I can't get it to work. It works fine if I construct a file BIO to read from. Am I doing something wrong, or is this a bug? See the test application below that shows the problem. Please note that y

Re: license question

2006-08-29 Thread William A. Rowe, Jr.
Ryan Shon wrote: > > I work for nFocal, a company in > Rochester, New York. We want to develop a variant of OpenSSL > in which we optimize the cryptography library to run on > a particular DSP. The other components of OpenSSL would remain > unchanged except where needed to utilize our custom lib

RE: license question

2006-08-29 Thread David Schwartz
> What is actually going on when the end-user runs OpenSSL and it > dynamically links in your restricted library, or the end user compiles > the unrestricted OpenSSL into your restricted library, is that they > are committing a license violation of the OpenSSL license when > they start using the r

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Marek Marcola
Hello, > >Do you have libssl library dependency like: > > $ ldd libssl.so.0.9.8 > >libcrypto.so.0.9.8 => ./libcrypto.so.0.9.8 > >libdl.so.1 => /usr/lib/hpux32/libdl.so.1 > >in your build directory. > > Are you suggesting looking into the Makefile? Well ... I can > see that building a

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread urjit_gokhale
Original message >Date: Tue, 29 Aug 2006 19:02:32 +0200 >From: Marek Marcola <[EMAIL PROTECTED]> >Subject: Re: Build problem on HP Itanium 64 bit machine >To: openssl-users@openssl.org > >Hello, >> >> I am having problem building openssl on HP Itanium 64 bit box. >> Attached are th

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread urjit_gokhale
Original message >Date: Tue, 29 Aug 2006 20:05:51 +0200 >From: Leif Thuresson <[EMAIL PROTECTED]> >Subject: Re: Build problem on HP Itanium 64 bit machine >To: openssl-users@openssl.org > >Hi, >I have also had problems building shared version of openssl-0.9.8b > on hpux-11.00 parisc

Re: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Nils Larsch
[EMAIL PROTECTED] wrote: Nils, Yes. I read the entire e-mail. I can't find ANYWHERE where it's being fed to the application, (including the source code). As far as I can see, it's definitely not being used in an ssl_ library call nor is he which ssl api calls are used to initialize the ssl

Re: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Nils Larsch
[EMAIL PROTECTED] wrote: Excellent, excellent idea. Is ssldump an API call? it's an application to analyze a ssl connection (see http://www.rtfm.com/ssldump/ ) Cheers, Nils __ OpenSSL Project

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Leif Thuresson
Hi, I have also had problems building shared version of openssl-0.9.8b on hpux-11.00 parisc using the hp ansi-c compiler. It looks like the openssl shared-library building part is completely re-implemented in 0.9.8 (compared to 0.9.7 which worked out of the box) In 0.9.7 shared libraries where lin

RE: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Marek Marcola
On Tue, 2006-08-29 at 13:52 -0400, [EMAIL PROTECTED] wrote: > > Excellent, excellent idea. Is ssldump an API call? If so, I haven't > seen that. Let me go out to the site and look. I wish there were a > more organized and informative source for information on the openssl > API. This is very usef

RE: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Robert . Zander
Excellent, excellent idea. Is ssldump an API call? If so, I haven't seen that. Let  me go out to the site and look. I wish there were a more organized and informative source for information on the openssl API. That should definitely make the problem expose itself. Thanks! Marek Marcola <[EMA

RE: related license question

2006-08-29 Thread John L. Ries
On Mon, 28 Aug 2006, David Schwartz wrote: Certainly. Nothing in the OpenSSL licenses requires you to allow redistribution of any derivative works you create. Wrong. See the following: "...The licence and distribution terms for any publically available version or derivative of this code

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Marek Marcola
Hello, > > I am having problem building openssl on HP Itanium 64 bit box. > Attached are the files that show the output of Configure and make. The > output of make is stripped to show the last section where error is > reported. > > The error is > ld: Unknown input file type: "./libcrypto.so" >

Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Urjit Gokhale
Hi everyone,   I am having problem building openssl on HP Itanium 64 bit box. Attached are the files that show the output of Configure and make. The output of make is stripped to show the last section where error is reported.   The error is ld: Unknown input file type: "./libcrypto.so"Fatal err

BIO and DTLS

2006-08-29 Thread Jeremy Goddard
Hi All, Can anyone tell me if the behavior of the BIO_new_accept, BIO_do_accept, and BIO_read functions changes in any way while using DTLS? Thanks, Jeremy __ OpenSSL Project http://www.opens