Re: Root certificate not trusted?

On Thu, Nov 30, 2006, Dan Ellis wrote: > Hello, > > I'm having trouble verifying peer certificates. > > I add my root certificate to the context's store using > X509_STORE_add_cert (and also give it to SSL_CTX_add_client_CA). My > server certificate chain is in a file, and I load the server ce

stunnel 4.20 released

Dear Users, I have just released a new version of stunnel. Here is the ChangeLog entry: Version 4.20, 2006.11.30, urgency: MEDIUM: * Release notes - The new transfer() function has been well tested. I recommend upgrading any previous version with this one. * Bugfixes - Fixed support for

Re: Cannot create custom OIDs: a2d_ASN1_OBJECT:first num too large

Patrick Patterson wrote: Hi Ken: On Thursday 30 November 2006 14:13, Ken Johanson wrote: With the following in my config file, and trying to create a new OID (the example below being some from the new EV-SSL draft): ..snip problem creating object 1.3.6.1.4.1.311.60.2.1.1=jurisdictionOfIncorp

Re: Cannot create custom OIDs: a2d_ASN1_OBJECT:first num too large

Hi Ken: On Thursday 30 November 2006 14:13, Ken Johanson wrote: > With the following in my config file, and trying to create a new OID > (the example below being some from the new EV-SSL draft): > > HOME= . > oid_section = new_oids > > [ new_oids ] > 1.3.6.1.4.1.311.6

Cannot create custom OIDs: a2d_ASN1_OBJECT:first num too large

With the following in my config file, and trying to create a new OID (the example below being some from the new EV-SSL draft): HOME= . oid_section = new_oids [ new_oids ] 1.3.6.1.4.1.311.60.2.1.1= jurisdictionOfIncorporationLocalityName 1.3.6.1.4.1.311.60

Root certificate not trusted?

Hello, I'm having trouble verifying peer certificates. I add my root certificate to the context's store using X509_STORE_add_cert (and also give it to SSL_CTX_add_client_CA). My server certificate chain is in a file, and I load the server certificate from the file and build a temporary stack

SSL_shutdown or SSL_pending hang or crash on windows XP client

I use openssl 0.9.7d on both multithreaded windows XP client and linux server. The windows client will hang or crash (at SSL_shutdown or SSL_pending) after running from several minutes to several hours. The linux server is still up and running. The windows client can be restarted without any pro

Re: Create PKCS5V2 Key

Thanks Marek. That's exactly what I needed. Regards, Somnath. On 11/30/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > Given a password,salt and iteration count how can I generate a PKCS5V2 > key using SHA1? > > It would be helpful if somebody can give a pointer to an example using > o

Re: Access violation when stopping a handshake in progress

Does anyone have anything to offer on this problem? On 11/23/06, Andrew Dennison <[EMAIL PROTECTED]> wrote: I have an application with a timeout feature on the connection handshake. Recently, the timeout was exercised and it generated an access violation in SSLEAY32.DLL. First, a bit of backgr

Re: question about encryption

Hello, > Dear All: > I key in the n,e,d p,q, dmp1, dmq1 and iqmp in rsa_test.c to encrypt and > decrypt a chosen text. And I use RSA_check_key to double check whether the > keys are ok or not and it return the pass signal. RSA_check does not verify Montgomery contexts. This function checks that n=p

question about encryption

Dear All: I key in the n,e,d p,q, dmp1, dmq1 and iqmp in rsa_test.c to encrypt and decrypt a chosen text. And I use RSA_check_key to double check whether the keys are ok or not and it return the pass signal. But after padding, RSA_padding_add_PKCS1_OAEP or RSA_padding_add_PKCS1_type_2, I cannot pas

Re: Create PKCS5V2 Key

Hello, > Given a password,salt and iteration count how can I generate a PKCS5V2 > key using SHA1? > > It would be helpful if somebody can give a pointer to an example using > openssl . Use PKCS5_PBKDF2_HMAC_SHA1(), example attached. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> #include

RE: get CA name from user certificate

Hello friends, Does openssl supports PKCS#1 v2.1 ?? Does it provide the API's?? Thanks in advance Santosh -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kaushalye Kapuruge Sent: Thursday, November 30, 2006 5:34 PM To: openssl-users@openssl.org Subject: Re:

Re: get CA name from user certificate

Have you tried to use the code without modifications using the same certificate? If you need to load the X509 certificate use following code. Moreover you may find useful information to call these PEM routines in the manual page(%man PEM). Cheers, Kaushalye BIO *in; if ((in=BIO_new_file