Re: Using an SSL object across processes

2006-11-12 Thread Urjit Gokhale
Hello Harshad,   We have had many discussions on this news group about this. The outcome of all the discussions is *it 'might' be possible to share SSL object between two processes using shared memory* but I am quite sure no one here has tried that successfully.   It is better advised that you r

size of SHA1 output

2006-11-12 Thread Alexander A
Hi, I'm currently working on my masterthesis and encounter the next problem with openssl. I want to generate a bitstring of a given size, constructed on a given word using SHA1 hash functions. Just by performing SHA1 on the word and concat to that with the SHA1 of the previous SHA1 result. for e

Re: ocsp signed requests - bug ?

2006-11-12 Thread Simon McMahon
Hi Steve, Your prompt assistance is much appreciated! > Well it is more a test utility than a responder. No worries, that's exactly how we use it too and it is excellent for that purpose. That is why we are getting into all these corner cases and obscure features. I personally can't see much p

Re: ocsp signed requests - bug ?

2006-11-12 Thread Simon McMahon
I just found -no_certs works with the OpenSSL OCSP client also. But I dont know how the OCSP server is validating the signature! In this case the OpenSSL generated request (attached) has an empty sequence for the 'certs'. In the failing request (previous post) the 'certs' is not present. Reg

Re: ocsp signed requests - bug ?

2006-11-12 Thread Dr. Stephen Henson
On Mon, Nov 13, 2006, Simon McMahon wrote: > Hi, > > Not sure if this belongs on users or dev because it might just be me not > using openssl properly. > > I have an OCSP client that signs requests but does not send the > certificate with the request. It also leaves out the requestorName > (o

ocsp signed requests - bug ?

2006-11-12 Thread Simon McMahon
Hi, Not sure if this belongs on users or dev because it might just be me not using openssl properly. I have an OCSP client that signs requests but does not send the certificate with the request. It also leaves out the requestorName (optional). Note that the OpenSSL ocsp requester always adds t