[Openssl Verify issue in MAC OS]errcode = 20 : unable get the local issuer certificate

2009-04-27 Thread loubot
http://www.nabble.com/file/p23269594/CA_AAA.pem CA_AAA.pem http://www.nabble.com/file/p23269594/Test.pem Test.pem http://www.nabble.com/file/p23269594/Test_CA_AAA.pem Test_CA_AAA.pem http://www.nabble.com/file/p23269594/AAACertificateServices.pem AAACertificateServices.pem I attach the two cer

Re: SSL_Accept() failing with error SSL_ERROR_SSL

2009-04-27 Thread Kyle Hamilton
Are you appropriately calling SSL_clear() after your connection is shut down? -Kyle H On Mon, Apr 27, 2009 at 3:08 PM, Dave Thompson wrote: >>       From: owner-openssl-us...@openssl.org On Behalf Of Prokash Sinha >>       Sent: Friday, 24 April, 2009 16:45 > >>       I'm trying to understand wh

RE: Openssl 0.9.8j Client Hello

2009-04-27 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Amit Singh > Sent: Saturday, 25 April, 2009 01:49 > I upgraded from Openssl 0.9.8g to 0.9.8j. Our client > interfaces to a picky SSL server implementation in JAVA, > version currently unknown. > > With openssl 0.9.8j the connection does not

RE: SSL_Accept() failing with error SSL_ERROR_SSL

2009-04-27 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Prokash Sinha > Sent: Friday, 24 April, 2009 16:45 > I'm trying to understand why this following code is failing > the second or third time... Is it a good way ( meaning first accept() > without ssl, then do those association

Re: Basic functions, again...

2009-04-27 Thread Victor Duchovni
On Mon, Apr 27, 2009 at 12:07:57PM +0200, Steffen DETTMER wrote: > The more secure way is to use existing > crypto schemes (like TLS) and the safer way is to base on > existing implementations (like stunnel), I think. It should be noted that stunnel in client-mode does not verify the server peern

Generate certificate for custom dn

2009-04-27 Thread comer merryl
Hi, Is it possible to create a certificate with a dn, "uid=user3,ou=People,dc=org,dc=com" When I run openssl to create a certificate, it doens't ask me for uid or dc. I can't generate a certificate with any other dn apart from the one specified above. Can someone help with this? Thanks a lot f

Re: Issue with importing pkfs12 cert into ie

2009-04-27 Thread Dr. Stephen Henson
On Mon, Apr 27, 2009, rjustinwilli...@gmail.com wrote: > Hi All > This may have been covered previously, and if so, please point me to that, > but, here's where I'm running into a wall. > My goal is to be able to use a client certificate, without having to type > in a password every time I visit

Re: Re: Basic functions, again...

2009-04-27 Thread carlyoung
>On Mon 27/04/09 3:07 PM , Sever P A gnu.se...@gmail.com sent: > >but, I search just a library functions that allows me to implement the >steps presented in an earlier message. Does it really exist ? > >If so, > >a) Which function(s) for generate the keys, >b) Which function(s) to obtain them, >c)

Issue with importing pkfs12 cert into ie

2009-04-27 Thread rjustinwilliams
Hi All This may have been covered previously, and if so, please point me to that, but, here's where I'm running into a wall. My goal is to be able to use a client certificate, without having to type in a password every time I visit my site. Currently, I'm just in a test lab, so, nothing prod

Re: Basic functions, again...

2009-04-27 Thread Sever P A
Hello, (Steffen said:) > Generally it is strongly disencouradged to invent and implement > own security schemes. The more secure way is to use existing > crypto schemes (like TLS) and the safer way is to base on > existing implementations (like stunnel), I think. There are so > many things to cons

Re: BF-cfb64-encrypt() encrypts data partially.

2009-04-27 Thread AngelWarrior
Got it.Thank you .Sometimes being in programming world we forget the rules of maths. On Mon, Apr 27, 2009 at 2:08 AM, Michael S. Zick wrote: > On Mon April 27 2009, Michael S. Zick wrote: > > > I put my comment on the wrong line of code - but you get the idea. ;) > > > On Mon April 27 2009, Angel

how to use ecdsa-with-sha2 algorithm with ecdsa signature algorithm

2009-04-27 Thread rajanchittil
Hi all, I tried to generate certificate with ecdsa algorithm . but whenever i displayed the certificate, i can see the following signtaure algorithm X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:AD:AF:E4:4D:AF:E8:37:E8:81:DC:49:C8:B0:6F:2D:CD:A4:18

Re: Basic functions, again...

2009-04-27 Thread Steffen DETTMER
* Sever P A wrote on Mon, Apr 27, 2009 at 10:49 +0200: > > (Steffen said:) I think stunnel could be suited well here. > > Maybe... but my idea was to implentent this functions in the > C/C++ programm while the users has no computer expertise > skills. > > I suddenly thought to integrate this in a

Re: Basic functions, again...

2009-04-27 Thread Sever P A
Hello, > (Steffen said:) I think stunnel could be suited well here. Maybe... but my idea was to implentent this functions in the C/C++ programm while the users has no computer expertise skills. I suddenly thought to integrate this in a batch file but... I don't really like this because complicat

Re: Basic functions, again...

2009-04-27 Thread Steffen DETTMER
* Sever P A wrote on Sat, Apr 25, 2009 at 13:35 +0200: > I don't reach to understand how to implement all this steps. So: I think stunnel could be suited well here. oki, Steffen About Ingenico: Ingenico is the world’s leading provider of payment solutions, with

Re: BF-cfb64-encrypt() encrypts data partially.

2009-04-27 Thread Michael S. Zick
On Mon April 27 2009, Michael S. Zick wrote: > I put my comment on the wrong line of code - but you get the idea. ;) > On Mon April 27 2009, AngelWarrior wrote: > > I have a file containing 549 bytes of data. When I try to encrypt the data,I > > get only a partial encrypted data in the range of 1