Re: ITU X509/ RFC 3281 Attribute Certificates API Beta

2006-11-24 Thread Vincenzo Sciarra
I'm workingon AC, but there is very few implementation. Only the new API can help you for a little. It's not yet time for AC bye 2006/11/24, Richard Levitte - VMS Whacker <[EMAIL PROTECTED]>: In message <[EMAIL PROTECTED]> on Tue, 10 Oct 2006 11:35:30 +0200, "Daniel Diaz Sanchez" <[EMAIL PR

Re: WIN32 winsock vs winsock2 coexistence?

2006-11-24 Thread William A. Rowe, Jr.
Michael - just to rest your mind - you might want to examine both wsock32.dll and winsock2.dll using DEPENDS.EXE. You'll find the results are interesting :) __ OpenSSL Project http://www.openssl.org

[solved] but not really understood (was Re: error message)

2006-11-24 Thread Oliver Block
Hello again, instead of using SSL_set_fd(conn, sock); I added the following: BIO *sbio = NULL; sbio = BIO_new_socket(sock, BIO_NOCLOSE); SSL_set_bio(conn, sbio, sbio); I tried it and it worked (by chance). Could anyone tell me why the above did/does not work? Regards, Oliver

RE: ITU X509/ RFC 3281 Attribute Certificates API Beta

2006-11-24 Thread Daniel Diaz Sanchez
Hello, Te API in the web site is really old. I can provide a new one for your consideration. Please, have a look to the latest one: http://www.it.uc3m.es/dds/swRelease/pmi/ACv2.zip We can work all together in the same direction :) Regards, Daniel -- Daniel Diaz Sanchez Telecommunication En

Re: ITU X509/ RFC 3281 Attribute Certificates API Beta

2006-11-24 Thread Nils Larsch
Richard Levitte - VMS Whacker wrote: In message <[EMAIL PROTECTED]> on Tue, 10 Oct 2006 11:35:30 +0200, "Daniel Diaz Sanchez" <[EMAIL PROTECTED]> said: dds> Hello, dds> dds> Some source code to generate attribute certificates using OpenSSL can be dds> found at: dds> dds> http://www.it.uc3m.e

Re: ITU X509/ RFC 3281 Attribute Certificates API Beta

2006-11-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 10 Oct 2006 11:35:30 +0200, "Daniel Diaz Sanchez" <[EMAIL PROTECTED]> said: dds> Hello, dds> dds> Some source code to generate attribute certificates using OpenSSL can be dds> found at: dds> dds> http://www.it.uc3m.es/dds/swRelease/pmi/pmi.xml dds> dd

error message

2006-11-24 Thread Oliver Block
Hi list, I recently started using libssl and I don't find the cause of the following error message. I am not familiar with openssl, maybe someone can help me to find the problem. Here is the message: SSL_write: 6850:error:140D0114:SSL routines:SSL_write:uninitialized:ssl_lib.c:867: My functi

Re: OCSP url from X509 extension

2006-11-24 Thread Dr. Stephen Henson
On Fri, Nov 24, 2006, Michael Stephan wrote: > Hallo, > > is it possible (i know it is but not to me at the moment ): ), to > "easily" retrieve the OCSP URI from a X509 v3 certificate extension > list? > > X509v3 extensions: > .. > Authority Information Access: > OCSP: URI:http:http://

Loading of Certificates

2006-11-24 Thread Prabhu.S
Hello All: We had an SSL enabled client application which was working fine.Recently we ran our client application in a machine with Cavium Nitrox Cards to enable efficient operation during stress scenario. The NITROX SDK includes an evaluation board with modified OpenSSL using Cavium's TurboSSL

Re: PKI design question

2006-11-24 Thread Victor Duchovni
On Fri, Nov 24, 2006 at 12:10:27PM +0100, Michael Str?der wrote: > > Intra-organizational problems in this space > > are much better addressed by Kerberos, not PKI. > > I fail to see why. - Because the off-line (no on-line oracle, instead a CA issuing long-lived credentials) certificate model pr

OCSP url from X509 extension

2006-11-24 Thread Michael Stephan
Hallo, is it possible (i know it is but not to me at the moment ): ), to "easily" retrieve the OCSP URI from a X509 v3 certificate extension list? X509v3 extensions: .. Authority Information Access: OCSP: URI:http:http://ocsp.com .. Would be great if you can help me with a tiny cod

RE: Sporadic SSL_accept error: decryption failed

2006-11-24 Thread Cedric.Pillonel
I found the problem! My error was that another thread was already trying to read on the SSL connection with SSL_read() before the SSL handshake could be completed by SSL_accept(). Excuse me! Cédric Pillonel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beh

Re: Sporadic SSL_accept error: decryption failed

2006-11-24 Thread Chris Covington
On 11/24/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hello, I am using openssl 0.9.7a running on Linux RedHat 9.0. Maybe you should try using a recent version and seeing if the problem still persists? Chris __ OpenSSL Pro

Re: PKI design question

2006-11-24 Thread Michael Ströder
Victor Duchovni wrote: > On Thu, Nov 23, 2006 at 06:46:23PM -0300, Mart?n Coco wrote: > >>My main goal is to design a PKI for our server infrastructure (ldaps, >>https, mail, vpn, etc.) The problem is that, for example, when reading >>the mentioned book, all the examples are based on people, but n

RE: Seeking advice on document

2006-11-24 Thread Dmitrij Mironov
Hi Stephen, Maybe your question will be more succesful in Ubuntu newsgroup/forum? OpenSSL is not related neither to Ubuntu, neither Apache2 :o) It is not problem for me to answer offtopic question, but unfortunately I'm not using Ubuntu. Just trying to suggest better help source :o) Best regards,

Sporadic SSL_accept error: decryption failed

2006-11-24 Thread Cedric.Pillonel
Hello, I have written a little client/server C application establishing SSL connections. On the client's side I use 'SSLv23_client_method()' and on the server's side 'SSLv23_server_method()' to support all SSL versions. Sometimes I get the following errors on the server's side: 26782:error:140