Re: [openssl-users] Re: X509 V1 version info

2008-09-11 Thread Madhusudhan reddy
Hi David, Thanks for the reply. I will try to explain my best the main problem i am facing. I ported OpenSSL 0.9.8g version on Symbian, and using OpenSSL to verify certificates. Following is the scenario to verify root certificates. 1. Load root certificate fro

questions about CRL Distribution Points extension in a certificate

2008-09-11 Thread JeanYiYi
Dear all: I am new in openssl. I have some questions regarding to 'CRL Distribution Points extension'. I did read the RFC. but it makes me more confused. :-(. a) a certificate has one and only one 'CRL Distribution Points extension'. What's configured in this extension is one CRL or multiple CR

Re: Reg SSL Problem

2008-09-11 Thread Tim Hudson
parvathy wrote: I am working with openssl 0.9.8g. I can able to communicate with all https servers except one server. Try openssl s_client -bugs -state -debug -connect hostname:port on an unchanged OpenSSL build and send that output. If you are required to provide a client certificate for t

Re: Problem generating csr

2008-09-11 Thread Dr. Stephen Henson
affects certificate request generation. This will be fixed in the next releae which will be real soon now... Alternatively try a recent snapshot such as: ftp://ftp.openssl.org/snapshot/openssl-0.9.8-stable-SNAP-20080911.tar.gz Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage

Problem generating csr

2008-09-11 Thread Fink, David
I am running Red Hat Enterprise 5.2 with OpenSSL 0.9.8h. The version of OpenSSL available for download from Red Hat Network was out of date so I downloaded OpenSSL 0.9.8h from openssl.org and did a ./configure, make, make install. Now, if I do a openssl version, it displays the correct version, 0

question about dtls server with multiple client

2008-09-11 Thread bikcupid
Hi all, I am trying to implement simple client-server application over UDP/DTLS with one server handling multiple clients. I found the simple server-client sample code for dtls, but haven't been able to figure out how can a single server listening on a specific port can handle multiple client req

RE: Problems making certificate request

2008-09-11 Thread V H
Thank you Steve - Do you know where I can get the latest 0.9.8 snapshot? Also opensll was installed as part of the latest apache win 32 binary? I suppose I would have compile apache with this latest snapshot if I wanted to work? Is there anyone else outsther who have installed the latest apache

RE: Problems making certificate request

2008-09-11 Thread V H
It's a pre-built binary that I downloaded directly from the apache site @ http://httpd.apache.org/download.cgi. I'm using the Win32 Binary including OpenSSL 0.9.8h (MSI Installer). Apache site indicates this is the latest recomended version for 32 bit with openssl. Should I be using something d

Reg SSL Problem

2008-09-11 Thread parvathy
Hi All, I am working with openssl 0.9.8g. I can able to communicate with all https servers except one server. I have certificate to communicate with that server. After SSL/TLS handshake, it is not receiving the application data. So that, I have modified the condition avail

Re: The Authority Key ID extension

2008-09-11 Thread Silviu VLASCEANU
2008/9/11 Kyle Hamilton <[EMAIL PROTECTED]> > If you're getting pronounced jitter on your client machines, I'd > suggest two things: > > 1) install ntp clients on them, and > 2) create your client certificates with a notBefore date of (now - 10m). > That's exactly what I did. In fact, I synchroni

RE: problem with ocsp and self signed CA

2008-09-11 Thread matteo mattau
> > Can you include the certificates involved in your problem report?> Thanks for reply & attention, below the CA -BEGIN CERTIFICATE-MIIDwTCCAqmgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBgTELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEuMSIwIAYDVQQLExlTZXJ2aXppIGRpIGNlcnRpZmljYXppb25lMTUwMwYDV

Re: build error vsc++express 2008 win32 openssl

2008-09-11 Thread James Owen
That did it... Though the file was in /crypto/perlasm Thanks a lot! James James Owen -Original Message- From: Thomas Jansen <[EMAIL PROTECTED]> Date: Thu, 11 Sep 2008 13:21:02 To: Subject: Re: build error vsc++express 2008 win32 openssl James Owen wrote: > > > > > now I get a new fa

Re: build error vsc++express 2008 win32 openssl

2008-09-11 Thread James Owen
Duh. I see now you were showing your path... Thanks again. James --Original Message-- From: James Owen To: openssl-users@openssl.org ReplyTo: [EMAIL PROTECTED] Subject: Re: build error vsc++express 2008 win32 openssl Sent: Sep 11, 2008 09:56 That did it... Though the file was in /crypto

Re: problem with ocsp and self signed CA

2008-09-11 Thread Patrick Patterson
On September 11, 2008 09:24:46 am matteo mattau wrote: > Dears,I'm in trouble with self signed certificate, when I try to verify via > ocsp a certificate whose issuer is self signed.The error I receive is > always openssl ocsp -issuer /usr/local/ssl/cert/issuerPEM.crt -cert > ./certificatePEM.cer -

problem with ocsp and self signed CA

2008-09-11 Thread matteo mattau
Dears,I'm in trouble with self signed certificate, when I try to verify via ocsp a certificate whose issuer is self signed.The error I receive is always openssl ocsp -issuer /usr/local/ssl/cert/issuerPEM.crt -cert ./certificatePEM.cer -url http://ocsp.foo.com -CApath /usr/local/ssl/certRespons

Error: unable to get local issuer certificate!!!

2008-09-11 Thread Shivakumar Balur
Hi, Mail is quite big with description. please read through and help me. Below are the configuration and execution done for OCSP request and response. *what is the reason for error? * what is the solution for error? Any reply is appreciated. :) I have provided even folder structure because, e

Re: build error vsc++express 2008 win32 openssl

2008-09-11 Thread Thomas Jansen
James Owen wrote: now I get a new failure only with openssl-0.9.8h: Assembling: .\crypto\sha\asm\s1_win32.asm .\crypto\sha\asm\s1_win32.asm(13) : error A2008:syntax error : integer NMAKE : fatal error U1077: '"C:\Program Files\Microsoft Visual Studio 9.0\VC\BIN \ml.EXE"' : return code '0