Makefile error for EFI port

2008-10-29 Thread Sourjo Basu
Hi all, I am trying to port OpenSSL into EFI and I created a EFI makefile based on the file information in ms/nt.mak However when I try to run my makefile using the "nmake -a openssl.mak" command I get the following error: makefile(20) : fatal error U1001: syntax error : illegal character '{' in

client crash or network issue?

2008-10-29 Thread Md Lazreg
Hi I have an ssl server where clients are connecting, requesting whatever they need then shutting down... The problem I have is that some clients will not shut down correctly, so my ssl server needs to handle the client disconnection. They are two types of disconnections: 1) The client crashed a

problem with STARTTLS

2008-10-29 Thread Steve West
When I do a starttls to my port 25 running tls, I get the following error "read bio not set":s3_pkt.c What des this mean? Steve

Re: Verifying chains

2008-10-29 Thread Sven Garly
2008/10/29 Chris Wilson <[EMAIL PROTECTED] <[EMAIL PROTECTED]> >: > Read the error message? OpenSSL doesn't know where to get 1's certificate > (the issuer of 2's certificate). It can't pull it out of thin air. Try > appending the contents of file 1 to file 2. (adding 1's certificate to 2's > bund

Re: Verifying chains

2008-10-29 Thread Chris Wilson
On Wed, 29 Oct 2008, Sven Garly wrote: > What I don't seem to be able to do is verify 3 with 2: openssl verify > -CAfile 2 3 > > I get: > 3: /C=GB/ST=Berkshire/L=Newbury/O=My Company Ltd/OU=2 > error 2 at 1 depth lookup:unable to get issuer certificate > > What am I doing wrong? Should I be abl

Verifying chains

2008-10-29 Thread Sven Garly
I'm trying to get to grips with verifying chains. I can create some keys: openssl genrsa -out key/1 512 openssl genrsa -out key/2 512 openssl genrsa -out key/3 512 I create a self-signed certificate for the first key: openssl req -new -x509 -nodes -sha1 -key key/1 -out 1 (with an OU of 1) And ce