Re: Re: Re: hello everyone

2008-07-29 Thread abc_123_ok
Dear All, my problem can't still be sloved. abc_123_ok 2008-07-30 发件人: abc_123_ok 发送时间: 2008-07-29 14:52:06 收件人: openssl-users@openssl.org 抄送: 主题: Re: Re: Re: hello everyone Dear Ger Hobbelt and All, I should introduce a situation to you. I use openssl server and client to test with

Re: Re: Re: hello everyone

2008-07-29 Thread abc_123_ok
Dear Ger Hobbelt, yes , you are correct , my client does not use Openssl code. abc_123_ok 2008-07-30 发件人: Ger Hobbelt 发送时间: 2008-07-28 18:10:31 收件人: openssl-users@openssl.org 抄送: 主题: Re: Re: Re: hello everyone > I use openssl as a server to test SSL client of our comany. the SSL client

openssl-snap-20080729 mingw/msys compilation problem

2008-07-29 Thread Amadeu A. Barbosa Jr
Hello, I´m trying to compile openssl-snap-20080729 under MinGW/MSYS environment but I have problems with some defines from wincrypt.h. I saw that in past [1] you get similar problems but for now the ¨undef¨ fix seems no sense to me. OBS: I´m using ActivePerl for symlink compatibility, when using

Re: SSL_connect failure when switching from 0.9.7 to 0.9.8

2008-07-29 Thread Alen Puzic
SSL_get_error() returns 1 and ERR_error_string( ERR_get_error() ) returns "error::lib(0):func(0):reason(0)". __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: SSL_connect failure when switching from 0.9.7 to 0.9.8

2008-07-29 Thread Kyle Hamilton
I'm curious: what does SSL_get_last_error give? What stack does ERR_get_error give? -Kyle H On Tue, Jul 29, 2008 at 11:36 AM, Alen Puzic <[EMAIL PROTECTED]> wrote: > We are using dynamic linking - using dlopen to open the shared objects > and then load the function symbols we are using. All the

Re: SSL_connect failure when switching from 0.9.7 to 0.9.8

2008-07-29 Thread Alen Puzic
We are using dynamic linking - using dlopen to open the shared objects and then load the function symbols we are using. All the symbols load correctly and I haven't seen any function calls causing any crashes yet. I just get an SSL_connect() error on the client end which results in error SSL_ERROR_

Re: SSL certificate signing request

2008-07-29 Thread Phibo
O.K. That's what I expected. Thanks ! Cheers, Phibo On Tue, 29 Jul 2008 11:47:02 +0200 "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Mon, Jul 28, 2008, Phibo wrote: > > > > > Is it possible for a certificate authority (CA) signing my SSL certificate > > signing request (csr) to decrypt

Re: SSL_get_peer_certificate() failing

2008-07-29 Thread M
I know that s isn't null because I check its value before I call SSL_get_peer_certificate(). I've also verified that s->session is infact NULL before the call to SSL_get_peer_certificate(). I can still send data across the link - I've tested using BIO_read() and BIO_write() to see if the machi

Re: Help required on Openssl Certificate isssue

2008-07-29 Thread Patrick Patterson
Hi Sachin: On July 29, 2008 09:53:47 am Sachin Puttur wrote: > Hi, > The Self signed Certificate is created in Windows server 2008 as given > below.We have created the certificate file hpcpb.cer. > > Then we will follow below steps in linux machine . > > 1) openssl x509 -in test.cer -i

Help required on Openssl Certificate isssue

2008-07-29 Thread Sachin Puttur
Hi, The Self signed Certificate is created in Windows server 2008 as given below.We have created the certificate file hpcpb.cer. Then we will follow below steps in linux machine . 1) openssl x509 -in test.cer -inform d -out hpcbp.pem 2) cp hpcbp.pem /usr/share/ssl/certs/

Re: SSL_connect failure when switching from 0.9.7 to 0.9.8

2008-07-29 Thread Victor Duchovni
On Mon, Jul 28, 2008 at 09:39:04AM -0400, Kenneth Goldman wrote: > In my experience, openssl releases routinely break compatibility. > This occurs for letter as well as number changes. > > Compiling against the new version is not enough. You must > link with the same version. Dynamic linking of

RE: SSL certificate signing request

2008-07-29 Thread Tim . Metzinger
The only way (other than brute force or perhaps some highly-classified, non public attack on the RSA algorithm) for a man-in-the-middle to compromise an SSL session without notifying the client is for the MITM to either: Have the private key of one of the two parties. Be considered a trusted CA by

Re: SSL certificate signing request

2008-07-29 Thread Sergio
Dr. Stephen Henson escribió: On Mon, Jul 28, 2008, Phibo wrote: Is it possible for a certificate authority (CA) signing my SSL certificate signing request (csr) to decrypt my own SSL sessions ? Or, in other words, in a csr are there enough infos about my private key to be able to intercept S

Re: SSL certificate signing request

2008-07-29 Thread Dr. Stephen Henson
On Mon, Jul 28, 2008, Phibo wrote: > > Is it possible for a certificate authority (CA) signing my SSL certificate > signing request (csr) to decrypt my own SSL sessions ? Or, in other words, > in a csr are there enough infos about my private key to be able to intercept > SSL sessions encrypted by

Re: SSL_connect failure when switching from 0.9.7 to 0.9.8

2008-07-29 Thread Kenneth Goldman
In my experience, openssl releases routinely break compatibility. This occurs for letter as well as number changes. Compiling against the new version is not enough. You must link with the same version. Dynamic linking offers a third possibility for inconsistency. The symptom I typically see is