Re: Problem with EVP_Decode and line breaks in a X509 certificate

2007-03-14 Thread Kaushalye Kapuruge
Hi Patrick, Thanks for the reply. Yes I took that approach but it didn't work. That's why I dig a bit further down and tried locate where exactly the error is. I figured that new lines in the base64 encoded string buffer are necessary to cast a certificate out of it. May be my observation is wr

Problem with TLS session resumption

2007-03-14 Thread Vladislav Marinov
Hi, Sorry for bothering for a second time on the same issue. I have a problem with session resumption in OpenSSL TLS. Initially, I set up a session between the TLS client and the TLS server. Then on the client side I save the session, close the SSL connection, close the TCP connection, establish

Re: Using OpenSSL to verify certificate chains

2007-03-14 Thread Tim Traver
Olaf Gellert wrote: Tim Traver wrote: openssl verify -purpose sslserver cert.crt where cert.crt is the cert and its CAcert and the root cert in pem format...this is done on the command line, and it always gives me this error : error 20 at 0 depth lookup:unable to get local issuer certifica

SSLFLAGS and SSLLIBS in Makefile?

2007-03-14 Thread Martin Jeppesen
Hi, In the thread http://forum.doom9.org/showthread.php?p=970105 have the attached source code been released, which extracts very close to all keys from BluRay and HD-DVD discs. It compiles on Linux with gcc -o aacskeys -lcrypto ioctl.c ecdsa.c mmc.c aes.c aacskeys.c So I would like to write a

Re: Exporting not-by-default functions in OpenSSL DLLs

2007-03-14 Thread Nils Larsch
Xiaoyu Ruan wrote: Greetings All, I have two questions on OpenSSL: 1. How to have the DLLs or SO’s export functions that are not exported by default, such as ECDSA etc? don't know a function ECDSA ;-) Seriously, there (normally) is a reason why certain functions are not part

Exporting not-by-default functions in OpenSSL DLLs

2007-03-14 Thread Xiaoyu Ruan
Greetings All, I have two questions on OpenSSL: 1. How to have the DLLs or SO's export functions that are not exported by default, such as ECDSA etc? What code changes need to be made? 2. What are the differences between 0.9.8 and 0.9.7? Thanks. -Xiaoyu

Re: Problem with EVP_Decode and line breaks in a X509 certificate

2007-03-14 Thread Patrick Patterson
On Wednesday 14 March 2007 04:05:45 you wrote: > Hi list, > > I need to get an X509 *cert using string buffer, which is a base64 > encoded representation of it. In other words, if I have the contents of > a ---BEGIN CERTIFICATE--- and --END CERTIFICATE--- of a .pem file, I > need to retrieve the c

SSL_clear() internal error

2007-03-14 Thread [EMAIL PROTECTED]
Hi, I wonder if anyone else has seen this ... I'm seeing the following error while receiving, i.e. SSL_read returns this error: error:140A4044:SSL routines:SSL_clear:internal error Does anybody know why SSL_clear would be called from SSL_read ? Perhaps its due to trying to reuse a stale session

Re: OpenSSL & P12 Client certificate

2007-03-14 Thread Bernhard Froehlich
Milan Kotaška schrieb: Hello, sorry for this post, but I'm a beginner in an OpenSSL. I would like to use OpenSSL functions to connect to WEB server via HTTPS protocol. I have received a certificate file with P12 extension from a WEB application provider. The goal is to send a HTTPS POST reques

Problem with EVP_Decode and line breaks in a X509 certificate

2007-03-14 Thread Kaushalye Kapuruge
Hi list, I need to get an X509 *cert using string buffer, which is a base64 encoded representation of it. In other words, if I have the contents of a ---BEGIN CERTIFICATE--- and --END CERTIFICATE--- of a .pem file, I need to retrieve the certificate. I used d2i_X509_bio() function for this.