OCSP response nonce extension encoding not DER

2007-01-09 Thread Simon McMahon
Hi, Just saw some weirdness in OCSP response encodings with a nonce extension. The OCSP response has this for the extensions: A1 1E 30 1C 30 1A 06 09 2B 06 01 05 05 07 30 01 02 01 01 00 <--- 04 0A 04 08 A5 10 18 67 E5 A4 8B 2C The sencond last item is the 'false' (00) for th

RE: Compiling on Unisys SVR4

2007-01-09 Thread Kelly Price
Even removing it doesn't solve the issue. -- Kelly A Price IT Application Development Maryland Transit Administration -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marek Marcola Sent: Tuesday, January 09, 2007 11:36 AM To: openssl-users@openssl.org S

RE: a question about "SSL_CTX_free"

2007-01-09 Thread David Schwartz
> Guys: > I have a listening socket, waiting for connections from clients. When a > client connects to my server, I put SSL on socket and spin up a thread > to handle it. One client is one thread. All of these connections are > shared by same SSL_CTX ctx. This is the way I handle at the end of thi

RE: a question about "SSL_CTX_free"

2007-01-09 Thread David Schwartz
> > or i should close all ssl connections based on a ctx before i > call SSL_CTX_free? > Yes, you should. Huh? Why? What would be the point of having a reference count if you had to get rid of all other references before you could release your own? A chunk of code should call SSL_CTX_free as so

Re: Compiling on Unisys SVR4

2007-01-09 Thread Marek Marcola
Hello, > This is what I get for trying to get OpenSSH running on an old Unisys > SVR4 box. This after a: ./Configure cc -DNO_STRINGS_H > -DOPENSSL_NO_SSH512 I think that this should be: OPENSSL_NO_SHA512 Best regards, -- Marek Marcola <[EMAIL PROTECTED]>

Compiling on Unisys SVR4

2007-01-09 Thread Kelly Price
This is what I get for trying to get OpenSSH running on an old Unisys SVR4 box. This after a: ./Configure cc -DNO_STRINGS_H -DOPENSSL_NO_SSH512 making all in crypto/sha... cc -I.. -I../.. -I../../include -DNO_STRINGS_H -DOPENSSL_NO_SSH512 -O -c sha_dgst.c "../../include/openssl/sha.h", l

RE: a question about "SSL_CTX_free"

2007-01-09 Thread Dinh, Thao V CIV NSWCDD, K72
Guys: I have a listening socket, waiting for connections from clients. When a client connects to my server, I put SSL on socket and spin up a thread to handle it. One client is one thread. All of these connections are shared by same SSL_CTX ctx. This is the way I handle at the end of this connectio

Re: Openssl Configuration file

2007-01-09 Thread Victor B. Wagner
On 2007.01.09 at 13:52:53 +0530, Ramya Ram wrote: >Thanks Marek...but I want the location in Windows ...WindowsXP. Do you >have any idea? >- Ramya >$ openssl version -d >OPENSSLDIR: "/etc/pki/tls" >and config file is: /etc/pki/tls/openssl.cnf > Try the same command. There

isocketstream functions

2007-01-09 Thread Fernandes Gabardo
Hello everyone, I'm adding OpenSSL to a C++ application that is highly dependent on isocketstream functions (e.g. in_avail() to tell if there are bytes left on the buffer). Does anyone have experience on doing this? Is there a way for me to preserve this dependency (i.e. still use such functions)

isocketstream functions

2007-01-09 Thread Spam Sucks
Hello everyone, I'm adding OpenSSL to a C++ application that is highly dependent on isocketstream functions (e.g. in_avail() to tell if there are bytes left on the buffer). Does anyone have experience on doing this? Is there a way for me to preserve this dependency (i.e. still use such functions)

openssl version 0.9.8b : cannot read the private key

2007-01-09 Thread Kaushalye Kapuruge
Hi folks, I was trying to read a private key (EVP_PKEY)using following test program. But I found that function PEM_read_bio_PrivateKey() gives a NULL value for the EVP_PKEY *key. This happened for openssl version 0.9.8b. I tested with few other versions of openssl (e.g. 0.9.8c and 0.9.7e) and

Re: Openssl Configuration file

2007-01-09 Thread Marek Marcola
Hello, > Thanks Marek...but I want the location in Windows ...WindowsXP. Do you > have any idea? When I execute "openssl ca" on windows in first line I have: Using configuration from C:\OpenSSL\bin\openssl.cnf When you use openssl binary some subcommands (such ca) has -config option and you m

Re: Openssl Configuration file

2007-01-09 Thread Ramya Ram
Thanks Marek...but I want the location in Windows ...WindowsXP. Do you have any idea? - Ramya Marek Marcola <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 01/09/2007 01:40 PM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject Re: Openssl Configuration fil

Re: Openssl Configuration file

2007-01-09 Thread Marek Marcola
Hello, > I am trying to locate the openssl.cnf file for a long time...Iam using > Windows XP client and openssl is installed in it. > > Can anyone please help me find it? On UNIX: $ openssl version -d OPENSSLDIR: "/etc/pki/tls" and config file is: /etc/pki/tls/openssl.cnf Best regards, -- Ma