Re: Dynamically loading openSSL dlls

2008-09-09 Thread Thomas J. Hruska
Raymond Zhou wrote: Hi there, My goal is to modify axis2/c so that I can load the openSSL dlls at runtime, this means that I will need the dlls to exist in the class path only if my web service calls require SSL communication. The AXIS2/c mainly calls the openSSL apis starting with SSL_, like SS

Dynamically loading openSSL dlls

2008-09-09 Thread Raymond Zhou
Hi there,   I am using axis2/c to build a web service client, and axis2/c depends on openSSL to support SSL. The way that axis2/c is currently built requires resolving all the symbols at load time, which means that the openSSL dlls have to present in the class path even if my web services does n

Dynamically loading openSSL dlls

2008-09-09 Thread Raymond Zhou
Hi there,   I

Re: openssl 0.9.8h on Solaris 10.3 amd64 blues

2008-09-09 Thread Andy Polyakov
> I compile using gcc32 with the following options: > > Configure solaris-x86-gcc threads no-krb5 > > I definitely need threads. Compilation goes through without problems but > when I do a make test I get: > > Doing certs > touch rehash.time > testing... > ../util/shlib_wrap.sh ./destest > make[

Re: how trust self signed certificate

2008-09-09 Thread Sergio
matteo mattau escribió: Dears, I'm in trouble with self signed certificate, when I try to verify via ocsp a certificate whose issuer is self signed. The error I receive is always openssl ocsp -issuer /usr/local/ssl/cert/issuerPEM.crt -cert ./certificatePEM.cer -url http://ocsp.foo.com -CApath

Re: How to use a hardware RNG with openssl?

2008-09-09 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 09/09/2008 10:20:48 AM: > Hello, > > we purchased a hrng for the generation of RSA keys for instance. > It is an USB device an shows up as /dev/qrandom. > > So, in order to generate rsa keys, is it sufficient to use it as a > replacement for /dev/urandom and t

how trust self signed certificate

2008-09-09 Thread matteo mattau
Dears, I'm in trouble with self signed certificate, when I try to verify via ocsp a certificate whose issuer is self signed. The error I receive is always openssl ocsp -issuer /usr/local/ssl/cert/issuerPEM.crt -cert ./certificatePEM.cer -url http://ocsp.foo.com -CApath /usr/local/ssl/certRespo

Re: The Authority Key ID extension

2008-09-09 Thread Kyle Hamilton
All certificates issued by a given signer must have different serial numbers. Having both be serial number 0 violates this constraint. (If you look at the serial number as being the 'primary key' into the database of issued certificates by a given authority, this constraint makes sense.) -Kyle H

OpenSSL key and data-to-encrypt from STDIN simultaneously?

2008-09-09 Thread Zack Payton
Hi there, I am attempting to use OpenSSL to encrypt some data in an extremely sensitive environment. For security reasons, I don't want to store my plain text data or my -pass data in either an environment variable or a file on disk. Is there a way to pass both the passphrase to encrypt with and

openssl 0.9.8h on Solaris 10.3 amd64 blues

2008-09-09 Thread nbalkanas
Hi, I've waisted most of my day today with openssl deployment on the aforementioned server. Any help would be greatly appreciated. I compile using gcc32 with the following options: Configure solaris-x86-gcc threads no-krb5 I definitely need threads. Compilation goes through without problems but

OCSP request to responder!

2008-09-09 Thread Shivakumar Balur
Hi All, I downloaded 0.9.8h version openssl & am trying this command: OCSP server on port using a standard ca configuration, and a separate responder certificate. All requests and responses are printed to a file. openssl ocsp -index demoCA/index.txt -port -rsigner rcert.pem -CA demo

Re: Multithreaded SSL server...!!!

2008-09-09 Thread vinni rathore
Hi all... I would like to thanx.. to all the users fot he openssl.. that i got success in multi-threaded server with SSL APIs... gr8 ... Once again thnx a lot.. On Wed, Sep 3, 2008 at 4:27 PM, Ger Hobbelt <[EMAIL PROTECTED]> wrote: > Please mind the single line where Darryl mentioned > renegotia

error as error:00000005:lib(0):func(0):DH lib

2008-09-09 Thread Goli Rajamahender
Hi When I am using system call SSL_connect(ssl) It is failing with error as error:0005:lib(0):func(0):DH lib Could you please support me to eliminate this error. Thanks Goli R mahender

Re: The Authority Key ID extension

2008-09-09 Thread Patrick Patterson
Hi Silviu: On September 8, 2008 11:38:22 am Silviu VLASCEANU wrote: > Thanks a lot for both answers, they were very helpful; however, it was > easier for me to use Pierre's method. > > Although I managed to add the AKID, the verification of the endhost > certificate's context with X509_verify_cert

Re: Can't seem to download the PGP signature

2008-09-09 Thread Tim Hudson
Bond, Ann Marie wrote: I’ve downloaded the latest version of the OpenSSL source code here http://www.openssl.org/source/ but I can’t seem to download the associated PGP signature to verify the download. It shows up as an empty file. When I click on the link, there’s nothing there. The files

Re: Unable to load certificate!!

2008-09-09 Thread Patrick Patterson
Kyle Hamilton wrote: > On Mon, Sep 8, 2008 at 10:31 PM, Shivakumar Balur > <[EMAIL PROTECTED]> wrote: >> openssl x509 -in req.der -noout -text >> >> got error: >> >> unable to load certificate >> >> 29221:error:0906D06C:PEM routines:PEM_read_bio:no start >> line:pedm_lib.c:647:Expecting: TRUSTED CE

How to use a hardware RNG with openssl?

2008-09-09 Thread Gerd Schering
Hello, we purchased a hrng for the generation of RSA keys for instance. It is an USB device an shows up as /dev/qrandom. So, in order to generate rsa keys, is it sufficient to use it as a replacement for /dev/urandom and to call genrsa as openssl genrsa -rand /dev/qrandom 2048 ? I am not sh

Can't seem to download the PGP signature

2008-09-09 Thread Bond, Ann Marie
I've downloaded the latest version of the OpenSSL source code here http://www.openssl.org/source/ but I can't seem to download the associated PGP signature to verify the download. It shows up as an empty file. When I click on the link, there's nothing there. I'd appreciate any tips on what I

Re: The Authority Key ID extension

2008-09-09 Thread Silviu VLASCEANU
Thanks a lot for both answers, they were very helpful; however, it was easier for me to use Pierre's method. Although I managed to add the AKID, the verification of the endhost certificate's context with X509_verify_cert() says the certificate it's not YET valid and: X509_verify_cert failed: erro

certificate verify failed

2008-09-09 Thread Gayathri Manoj
Hi all, I got an error while execuiting the test program of openssl using make test command. SSL2_SET_CERTIFICATE:certificate verify failed:s2_clnt.c:1049 Is any need to give the certificate by the user. Thanks, Gayathri