HOWTO cross certify two self-signed CAs using OpenSSL

2006-11-03 Thread John Mok
Hi, There are two self-signed root CAs (e.g. rootCA1 and rootCA2) in the organization I work for, and both have sub-CAs. For instance, The sub-CAs of rootCA1 are :- 1. subCA1 2. subCA2 The sub-CAs of rootCA2 are :- 1. subCA3 2. subCA4 As the number of PCs are many, it is too difficult, if no

Building minimal size OpenSSL libraries for client-side application

2006-11-03 Thread Scott Baker
Hello, I'm working on a client application under Borland C++ Builder for Windows. Right now, when I compile the OpenSSL libraries into my application, it's increasing the size of the executable by approximately 800 KB. All I need is client-side support for the SSL protocol (for example, to open

Re: Adding CA cert to firefox results in 'SSL alert number 42: bad certificate' from httpd?

2006-11-03 Thread Dr. Stephen Henson
On Fri, Nov 03, 2006, Clem Taylor wrote: > Hi, > > I am trying to add a self signed root certificate to Firefox (1.5.0.7) > that was generated with openssl and is connecting to an openssl 0.9.7e > based httpd (acme mini_httpd). The certificate was created with > openssl 0.9.8a. > > I can connect

Adding CA cert to firefox results in 'SSL alert number 42: bad certificate' from httpd?

2006-11-03 Thread Clem Taylor
Hi, I am trying to add a self signed root certificate to Firefox (1.5.0.7) that was generated with openssl and is connecting to an openssl 0.9.7e based httpd (acme mini_httpd). The certificate was created with openssl 0.9.8a. I can connect to the httpd just fine with firefox, but when I add the

Re: d2i/i2d_EC_PUBKEY_bio and d2i/i2d_EC_PUBKEY_fp functions

2006-11-03 Thread Nils Larsch
Jordi Jaen Pallares wrote: Dear list, I used the "ecdhtest.c" file as starting point to write a small test application to do ECDH key exchange over a network. In order to encode the peer's public keys in a TCP message I used the i2d_EC_PUBKEY_bio functions to write the public keys to memory

Re: Use of X509_NAME_oneline

2006-11-03 Thread Nils Larsch
Kaushalye Kapuruge wrote: Hi list, Here is my code to get the issuer of an X509 certificate in PEM format. I'm using X509_NAME_oneline() to convert the X509_NAME to a string. But the man page discourage the use of it. Is there any other function serves for the same purpose. X509_NAME_pri

Re: Understanding the Engine-Hardware support

2006-11-03 Thread Geoff Thorpe
Hi John, > I have a question around the area of the Hardware device support that is > used by the various Engines in OpenSSL. In the 0.9.8.a tree there are > files for engines like Attala, uBSec, CryptoSwift etc. This is the area > in OpenSSL is what I am currently interested in understanding. >

RE: Error accepting connections

2006-11-03 Thread Dinh, Thao V CIV B32-Branch
Hi Marek Thank You very much. Suppose I store the method below in the SslServerSocket.cc, then all I need to Do is: locking_function(int mode, int n, &SslServerSocket.cc, 8); id_function(void);// return Thread ID dyn_create_function(const &SslServerSocket.cc, 8); dyn_l

RE: Error accepting connections

2006-11-03 Thread Dinh, Thao V CIV B32-Branch
Marek Thank You very, very much. Could you please check given Website again. I can not get there from my company. Maybe the firewall. I need these examples badly. Openssll do not have many materials on Multithread. Thank You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL P

RE: Error accepting connections

2006-11-03 Thread Marek Marcola
Hello, > Suppose I have a "Singleton" class below. This method is shared by > multithreads. This class returns a one and only one ctx ( One Context > which shares by multithreads). For me, the only Mutex Lock I need is > around line 8 because of verify_callback method. The remain methods are > rea

RE: Error accepting connections

2006-11-03 Thread Dinh, Thao V CIV B32-Branch
Prabbu/Marek/Chong Thank for your help. I am very newbie for openssl too. Suppose I have a "Singleton" class below. This method is shared by multithreads. This class returns a one and only one ctx ( One Context which shares by multithreads). For me, the only Mutex Lock I need is around line 8

Use of X509_NAME_oneline

2006-11-03 Thread Kaushalye Kapuruge
Hi list, Here is my code to get the issuer of an X509 certificate in PEM format. I'm using X509_NAME_oneline() to convert the X509_NAME to a string. But the man page discourage the use of it. Is there any other function serves for the same purpose. All I need is to extract meta data like is