Reading CA Certificate using memory instead of File to verify the peer..

2008-11-09 Thread Ajeet kumar.S
Hi All, I want to read CA certificate from certificate bundle to verify the peer. So I dumped the CA certificate bundle in memory instead of reading from file. BIO *in; STACK_OF(X509_INFO) *inf; in = BIO_new_mem_buf(file, -1); if(!in) { X509err(X509_F_X509_LOAD_CERT_CRL_FI

Need help....Building libcrypto.a (FIPS) into a shared library on Windows.

2008-11-09 Thread Justin A
I am getting this error on windows. 2564:error:2D06906E:FIPS routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does  not match:.\fips\fips.c:238: I am using the fiplink.pl and it is also  generating the signature for the shared library using fips_premain_dso , followed by inserting the gene

Re: FIPS and new releases of openssl

2008-11-09 Thread Justin A
Hi Steve Marquess, What's the equivalent file for  fipscanister.o on windows..? Thanks, Justin --- On Tue, 11/4/08, Steve Marquess <[EMAIL PROTECTED]> wrote: From: Steve Marquess <[EMAIL PROTECTED]> Subject: Re: FIPS and new releases of openssl To: openssl-users@openssl.org Date: Tuesday, Novem

Re: RAND_egd() blocking -- despite contract that states otherwise?

2008-11-09 Thread Ben Sandee
On Sun, Nov 9, 2008 at 4:06 PM, David Schwartz <[EMAIL PROTECTED]> wrote: > > >> So what do you want to do if you run out of entropy? > > > Fail with an error condition stating that, rather than > > the indeterminate hang in read() that was experienced. > > I believe you need to compile with EGD s

Strange compile problems

2008-11-09 Thread Evgeniy Ivanov
Hi list, I use the latest stable openssl version and try to compile my application and get a lot of such errors: In file included from /usr/local/include/openssl/x509.h:572, from /usr/local/include/openssl/ssl.h:183, from ../../sslsockimpl.cpp:64: /usr/local/includ

Re: RAND_egd() blocking -- despite contract that states otherwise?

2008-11-09 Thread Kyle Hamilton
An alternative might be to install a handler for SIGALARM, and then call alarm() to ensure that the blocked read returns with an EINTR? -Kyle H On Sun, Nov 9, 2008 at 2:06 PM, David Schwartz <[EMAIL PROTECTED]> wrote: > >>> So what do you want to do if you run out of entropy? > >> Fail with an er

RE: RAND_egd() blocking -- despite contract that states otherwise?

2008-11-09 Thread David Schwartz
>> So what do you want to do if you run out of entropy? > Fail with an error condition stating that, rather than > the indeterminate hang in read() that was experienced. I believe you need to compile with EGD support then. This will get you the behavior you want. EGD provides no way to tell whet