EVP_CipherInit_ex because cipher->do_cipher is NULL

2008-08-06 Thread Ambarish Mitra
Hi all, I am using the EVP API for encryption and decryption (Code snippet below). The encrypion works fine, but the decryption fails in EVP_CipherInit_ex. Both the codes are identical except that the said function uses 1 as the last argument for encryption and 0 for decryption. I am on Redhat Li

Re: RFC 4130 checksum in SHA1

2008-08-06 Thread javierm
Thanks Marco: ...and thanks for every detailed comment. I just noticed that there were a couple of things where I was not clear: Sorry about the lengthy post, but it's worth to seem or be redundant. I give proofs 1.- On your first quote about canonicalization, . I mentioned that not only M

Re: problems with certificate chain

2008-08-06 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sergio wrote: | Hi people, Hello Sergio, | client.pem are signed by | server.pem, and server.pem are signed by ca.pem. It is a bad bad idea to sign a client certificate with a server certificate. Usually server certificates don't have the extensions

problems with certificate chain

2008-08-06 Thread Sergio
Hi people, i have a problem with certificate chain. I'm configuring freeradius and wpa_supplicant using eap-tls protocol. client.pem are signed by server.pem, and server.pem are signed by ca.pem. I've tried to install (using ln -s and hash value of cert) ca.pem and server.pem into /etc/ssl/ce

Re: check_ssl_cert w/ PKI / X.509 Chain Validation

2008-08-06 Thread Brian A. Seklecki
Two new notes: 1) Extracting the root CA cert DB from FF3 manually (GUI + Select all) to PEM works fine with c_rehas.pl $ openssl s_client -verify 4 -connect www.gmail.com:443 2>& 1 | egrep \ "Verify\ return\ code" Verify return code: 0 (ok) 2) I'm unable to find the fil

session->peer is null

2008-08-06 Thread Alen Puzic
I'm having some strange new problems with using OpenSSL 0.9.8 libs. I compiled the example source code from the O'Reillys "Network Security with OpenSLL" book and I'm still getting a failure on SSL_get_peer_certificate(ssl) returning NULL. When I do a trace i see that its failing because ssl->sessi