RE: Extra character from X509_get_subject_name

> Hi, > > > Do you know why an extra charater "/" is attached in front of the > subject name? > > X509_NAME_oneline(X509_get_subject_name(cert), data, 256); > > fprintf(stderr, " Subject = %s\n", data); > > The output is like "/CN=XXX.hp.com". > > Carol X509_NAME_online is known to be buggy and

Creating a CA cert with explicit start/end date

Hello, I'm trying to create a CA cert with explicit notBefore and notAfter dates. I've tried to follow the advice given in an old mailing list post [1], but haven't been successful so far. The commands I'm using are these: openssl req -nodes -config ca/openssl.cnf -days 1825 -x509 -newkey \ rsa:

Re: FIPS Server

Default OpenSSL can understand and speak the cryptographic algorithms that FIPS can validate. This does not mean that it is FIPS validated. (For example, if it can accept MD5 for anything other than establishing the premaster secret, it's not FIPS validated or even FIPS validatable.) This is an

Extra character from X509_get_subject_name

Hi, Do you know why an extra charater "/" is attached in front of the subject name? X509_NAME_oneline(X509_get_subject_name(cert), data, 256); fprintf(stderr, " Subject = %s\n", data); The output is like "/CN=XXX.hp.com". Carol ___

Re: question about generating keys/certs to go with Rescorla's book examples

A few months ago I asked: > I am having some trouble with the examples in Rescorla's _SSL and TLS: > Designing and Building Secure Systems_ book. I feel like I am making > a minor mistake somewhere, but I'm just overlooking where. I would > appreciate another set of eyes to tell me where I am g

request certificate

hi,there I'm trying to create a request certificate, but i don't know how to create req.cnf (wich information I've to put in this file ,I'm new and i've no idea) i tried this command openssl req -config req.cnf -new -key macle.pem mareq.pem and i've these errors : req [options] outfil

RE: FIPS Server

> Hello all, > I have a general query regarding FIPS mode. I am running an simple openssl > https server based on openssl that services https requests from window > clients. I have the following setting in my windows XP "Use FIPS comliant > algorithms for encryption, hashing and signing set to 1"

Re: Install openssl

Hi Victor, Thank you so much for your valuable information. I will as our admin about the openSSL with our Linux. Lisa --- On Fri, 2/20/09, Victor B. Wagner wrote: > From: Victor B. Wagner > Subject: Re: Install openssl > To: openssl-users@openssl.org > Date: Friday, February 20, 2009, 2:52

Re: static openssl on mingw (undefined reference on bss_sock.c)

Dnia piątek 20 luty 2009 o 12:28:59 napisałeś: > >>On Fri 20/02/09 10:17 AM , Tomasz Kolaj m...@abp.pl sent: > >>Hello, > >> > >>Unfortunetly I need still compile shared version also and make fails with > >>that: > >> > >>C:/msys/1.0/local/ssl/lib/libssleay32.a(ssl_lib.o)(.text+0x4ab):ssl_lib.c > >

Re: static openssl on mingw (undefined reference on bss_sock.c)

>>On Fri 20/02/09 10:17 AM , Tomasz Kolaj m...@abp.pl sent: >>Hello, >> >>Unfortunetly I need still compile shared version also and make fails with >>that: >> >>C:/msys/1.0/local/ssl/lib/libssleay32.a(ssl_lib.o)(.text+0x4ab):ssl_lib.c: >>undefined reference to `BIO_s_socket' That's part of opens

RE: Install openssl

> There is also O'Reilly book "Securing applications with OpenSSL". > But I haven't read it so don't know if it suites you. If you mean "Network Security with OpenSSL" then this is a good basic starter to OpenSSL, but it does not contain everything you need to know. AFAIK there is no single sourc

Re: static openssl on mingw (undefined reference on bss_sock.c)

Hello, Dnia czwartek 19 luty 2009 o 14:57:56 napisałeś: > > Those functions are in secur32.lib Unfortunetly I need still compile shared version also and make fails with that: - cut -- gcc -O2 -Wall -Wmissing-prototypes -Wpointer-arith -Winline -Wdeclaration- after-statement -Wendif-labels -fno-

Re: Install openssl

On 2009.02.19 at 12:38:27 -0800, Database System wrote: > > Hi, > > I'm new to openSSL/SSL. I downloaded the file. It is If you are new to openSSL, it is better to use version which is provided by your Linux distribution. Every linux distribution out there already includes OpenSSL, and applic

Problems with sending RSA public keys.

Hi All! I wanted to write an application wherein I had to "send" a server's public key (RSA) to a client. So I generated the RSA keys with RSA_generate_key and checked it with RSA_check_key. I then tried copying the "entire" RSA structure pointer returned by RSA_generate_key to a send buffer