RE: X509_get_serialNumber

2009-04-14 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of sarym binome > Sent: Monday, 13 April, 2009 15:19 > i want to extract the the serial number or the subject name from an X509 certificate > i used X509_get_serialNumber but i don't know how can i use it , > i can't print

RE: Resource temporarily unavailable error with SSL_connect

2009-04-14 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Dan Maartens > Sent: Monday, 13 April, 2009 20:31 > Thanks for your response Dave. With -state and -msg enabled, > [s_server] seems to be hanging after SSL_accept:SSLv3 flush data. > When I abort the client at this po

RE: Open SSL via dyndns.org

2009-04-14 Thread David Schwartz
> we tried to create a ssl certification via openssl. > Our problem is that we have in intern server called SVR02. This server > could be reached via name.dyndns.org:443. If we create a certification > with the CO SVR02 the server accept this and install the certification. > But if we try it from

Re: Query on OpenSSL for Certificate verification

2009-04-14 Thread Victor Duchovni
On Mon, Apr 06, 2009 at 11:56:15PM -0700, Kyle Hamilton wrote: > Third, the > entire point of X.509 is to allow for clients to have all the > information they need to verify certificates in the absence of an > online authority. This said, it is now widely understood that this particular "entire p

Re: Query on OpenSSL for Certificate verification

2009-04-14 Thread Kyle Hamilton
I'd be happy to, if you engage me as a contractor. -Kyle H On Tue, Apr 14, 2009 at 12:26 PM, Vijay Kothamasu (vikotham) wrote: > Hi Kyle, > > Thanks for your valuable inputs, find my response inline. > > > Then don't return from the original SSL_CTX_set_verify callback until you > either: > a) r

Open SSL via dyndns.org

2009-04-14 Thread Tobias . Semmet
Hi, we tried to create a ssl certification via openssl. Our problem is that we have in intern server called SVR02. This server could be reached via name.dyndns.org:443. If we create a certification with the CO SVR02 the server accept this and install the certification. But if we try it from ww

Re: RFC 4680 implementation

2009-04-14 Thread Emanuele Cesena
Hi, On Tue, 2009-04-14 at 02:16 -0700, nhack wrote: > I want to know if there is any library that provides support for the RFC > 4680, I have found this http://tlsext-general.blogspot.com/ but my problem > with this library is that the client can send the supplemental data only > after the server

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-14 Thread Atti
Sorry, I made a mistake when I wrote the first text, I'm using libeay32MDd.lib - /MDd for debug and libeay32MD.lib - /MD for release. I only made the mistake writing this, I'm linking against the correct .libs in my project. On Tue, Apr 14, 2009 at 2:03 PM, Atti wrote: > Hy, I'm using an older v

OpenSSL cryptography fails in release mode, but no in debug

2009-04-14 Thread Atti
Hy, I'm using an older version of OpenSSL (the new one has errors in X509.h), on a Win32 machine, installed as binaries. I'm using the EVP_Encrypt/Decrypt functions and a generated key to encrypt my data, and everything works fine in debug mode. When I try to run the release mode, it still runs fin

RFC 4680 implementation

2009-04-14 Thread nhack
Hy, I want to know if there is any library that provides support for the RFC 4680, I have found this http://tlsext-general.blogspot.com/ but my problem with this library is that the client can send the supplemental data only after the server done state, and i need that data after the server hello

Re: openssl smime problem: the output of smime -decrypt is not the same to the original one

2009-04-14 Thread xh
Kyle Hamilton wrote: S/MIME requires that all native line endings be converted to \r\n before signing. My understanding is that s/mime is only focused on email related, so I think it's ok using \r\n replace \r. thanks, -Derek

RE: Query on OpenSSL for Certificate verification

2009-04-14 Thread Vijay Kothamasu (vikotham)
Hi Kyle, Sorry for the delayed response, I am just back form my Vacation. Thank you so much for your response and the information provided. But even with the SSL_CTX_set_verify() callback invocation, the result of the certificate validation need to be returned in the context of the callback fu

Re: openssl smime problem: the output of smime -decrypt is not the same to the original one

2009-04-14 Thread Kyle Hamilton
S/MIME requires that all native line endings be converted to \r\n before signing. -Kyle H On Mon, Apr 13, 2009 at 8:32 PM, xh wrote: > Hi everyone, > > I find the output of the openssl smime -decrypt is not the same with the > original one. > My OS is Fedora 10 and the openssl version is 0.9.8g.

AES-256 - aes-586.pl - align 64?

2009-04-14 Thread Roi Kolan
Hi, We are trying to deploy AES-256 in assembly, and of course we ran into your code in aes-586.pl. In the code we saw that you use 64 byte alignment: &set_label("AES_Te",64);# Yes! I keep it in the code segment! Which is something that gives us a headache in other modules that use openssl