recompile applications when upgrade openssl?

On my linuxserver many application rely on openssl: from apache over cyrus-imap to sendmail and many others like named. Now I'd finally like to upgrade openssl from 0.9.6 to 0.9.8e to fix some security-issues. (I know its about time). My question now is: do I need to recompile all applications t

Re: Safe signed certificate generation during server installation ?

On Fri, Sep 28, 2007 at 08:37:12PM +0530, Urjit Gokhale wrote: > > > > considered as proposition to discussion. Real, secure programming > should > > > > be based on existing, well checked protocols (which is possible in > this > > > > case). > > > > > > The OP was going to embed his CA's private

Re: Safe signed certificate generation during server installation ?

> > > considered as proposition to discussion. Real, secure programming should > > > be based on existing, well checked protocols (which is possible in this > > > case). > > > > The OP was going to embed his CA's private key in his installer. > > The OP was not thinking clearly about key management

newbie question: sample s_server usage

Hi, I'm a newbie to openssl and openssl toolkit. i need to add support for tls to one java client including client authentication, and i've made the changes to the client and need to test it with server, so trying to use s_server. I have used keytool utility supplied with jdk1.4 to generate clien

Intermediate CA

Hi everybody, I've been get some problems with WebService Client on HTTPS. I have 1 certificate and 2 intermediate CA´s to access this server. Testing my Browser, if i remove any one of the intemediate CA's, i get this: "HTTP Error 403.7 - Forbidden: SSL client certificate is required." I Have t

Re: Openssl backward compatibility

Dr. Stephen Henson wrote: On Fri, Sep 28, 2007, jimmy bahuleyan wrote: Kaushalye Kapuruge wrote: Hi Listers, I'm having a problem shipping my (xml security)library, which is based on openssl crypto implementation. I have statically linked it with the ssl and crypto libraries (-lssl -lc

Re: Openssl backward compatibility

Kaushalye Kapuruge wrote: > jimmy bahuleyan wrote: >> Kaushalye Kapuruge wrote: >> >>> Hi Listers, >>> I'm having a problem shipping my (xml security)library, which is based >>> on openssl crypto implementation. >>> I have statically linked it with the ssl and crypto libraries (-lssl >>> -lcrypto

Re: Openssl backward compatibility

On Fri, Sep 28, 2007, jimmy bahuleyan wrote: > Kaushalye Kapuruge wrote: > > Hi Listers, > > I'm having a problem shipping my (xml security)library, which is based > > on openssl crypto implementation. > > I have statically linked it with the ssl and crypto libraries (-lssl > > -lcrypto). > > Are

Re: Openssl backward compatibility

jimmy bahuleyan wrote: Kaushalye Kapuruge wrote: Hi Listers, I'm having a problem shipping my (xml security)library, which is based on openssl crypto implementation. I have statically linked it with the ssl and crypto libraries (-lssl -lcrypto). Are you sure you have statically linked

Re: Openssl backward compatibility

Kaushalye Kapuruge wrote: > Hi Listers, > I'm having a problem shipping my (xml security)library, which is based > on openssl crypto implementation. > I have statically linked it with the ssl and crypto libraries (-lssl > -lcrypto). Are you sure you have statically linked in the Openssl libraries?

Re: What meams first byte '04' in EC public key?

Hello, > I created EC keypair via JAVA with secp160r2 template. When I looked at text > form of public key, I saw there this: > > "04666d59b1fb53c1c998c12c71731d3a36a37cd995cadeee96c156c8d7c7852b39b5fefd1fa3ce18c7" > > I know that last 40 bytes present x and y number of ec point but I don't > kn