RE: Question on how to use AES-128-CTR

2006-12-26 Thread Edward Chan
Nevermind, I think I figured out my problem. Seems like the other crypto libs I'm using assumes the counter is in the lower 64 bits of the initialization vector. But OpenSSL looks like it was built with L_ENDIAN defined which assumes the counter is in the upper 64 bits. Does this sound right? Af

Re: SSL_use_certificate_chain_file error

2006-12-26 Thread Dr. Stephen Henson
On Tue, Dec 26, 2006, Sendil kumar wrote: > > When I connect a SSL client from windows to SSL server in unix, the > SSL_use_certificate_chain_file errors out and returns zero and when I see > the error stack there were no errors in it but at that same time when I use > SSL_use_certificate_file it

SSL_use_certificate_chain_file error

2006-12-26 Thread Sendil kumar
Hi, When I connect a SSL client from windows to SSL server in unix, the SSL_use_certificate_chain_file errors out and returns zero and when I see the error stack there were no errors in it but at that same time when I use SSL_use_certificate_file it runs fine. I was unable to trace the error. C

Re: unable to get local issuer certificate

2006-12-26 Thread Dr. Stephen Henson
On Tue, Dec 26, 2006, Randy Schuster wrote: > Openssl-users@openssl.org, > > Been trying to get this working for a long time and don't seem to be making > progress. > > > banana >openssl s_client -connect iguscert.globalpay.com:443 > CONNECTED(0003) > depth=1 /O=VeriSign Trust Network/OU=V

Re: verify, issuer checks question

2006-12-26 Thread Dr. Stephen Henson
On Tue, Dec 26, 2006, Dmitry A. Yanko wrote: > I'm trying to test openssl's sertificate checks. > cacert.pem - self signed CA cert. > b_DEV/cert.pem - user's cert, signed by cacert.pem > ./aa - an empty dir. > > # openssl verify -CApath ./aa -CAfile cacert.pem -verbose -issuer_checks > b_DEV/cert

verify, issuer checks question

2006-12-26 Thread Dmitry A. Yanko
I'm trying to test openssl's sertificate checks. cacert.pem - self signed CA cert. b_DEV/cert.pem - user's cert, signed by cacert.pem ./aa - an empty dir. # openssl verify -CApath ./aa -CAfile cacert.pem -verbose -issuer_checks b_DEV/cert.pem b_DEV/cert.pem: /C=UA/ST=MD/L=Baltimore/O=TEST/OU=Testi

unable to get local issuer certificate

2006-12-26 Thread Randy Schuster
Openssl-users@openssl.org, Been trying to get this working for a long time and don't seem to be making progress. banana >openssl s_client -connect iguscert.globalpay.com:443 CONNECTED(0003) depth=1 /O=VeriSign Trust Network/OU=VeriSign, Inc./OU=VeriSign International Se rver CA - Class 3/OU