Re: No passphrase question with PEM_X509_INFO_read_bio

2009-06-26 Thread Resul Cetin
On Friday 26 June 2009 23:13:24 you wrote: > Hi, > I am currently trying to load an encrypted certificate with > > PEM_X509_INFO_read_bio(in, sk, asdasd, NULL); > > This should read an file with encrypted private key (passphase: secret) and > not encrypted cert. It should start to read both and the

Re: Cam separate instances of apache http server use same Open SSL installation

2009-06-26 Thread Kyle Hamilton
Using the same version/copy of OpenSSL isn't going to be a problem. There is no application data kept on disk that must be locked against other processes accessing it. -Kyle H On Fri, Jun 26, 2009 at 7:47 AM, Srinivas Jonnalagadda wrote: > Hi, > > I currently have OpenSSL 0.9.8i with Apache HTTP

Re: How to get a string from an X509_NAME

2009-06-26 Thread Dr. Stephen Henson
On Fri, Jun 26, 2009, Natanael Mignon - michael-wessel.de wrote: > Dear list, > > as this is a case of *using* OpenSSL libraries from Apache's mod_ssl, I hope > I'm on the right list. ;) > > I am currently working on - dirty, please have mercy - customizations of > mod_ssl and especially OCSP-ha

Cam separate instances of apache http server use same Open SSL installation

2009-06-26 Thread Srinivas Jonnalagadda
Hi, I currently have OpenSSL 0.9.8i with Apache HTTP server 2.0.63 installed. this apache HTTP server is connected to TOmcat 5.5.0 where our application exists. My scenarion is like this I woul like to use the installed OPen SSL 0.9.8i with one more installations of Apache HTTP server 2.0.63 co

How to get a string from an X509_NAME

2009-06-26 Thread Natanael Mignon - michael-wessel . de
Dear list, as this is a case of *using* OpenSSL libraries from Apache's mod_ssl, I hope I'm on the right list. ;) I am currently working on - dirty, please have mercy - customizations of mod_ssl and especially OCSP-handling for a specific project (on basis of Apache 2.3 code). As I am neither

Re: illegal in FIPS while using req

2009-06-26 Thread Dr. Stephen Henson
On Fri, Jun 26, 2009, Peter Lin wrote: > Thanks Dr. Henson, yeah the 0.9.8k version works perfectly. > > sorry I made the mistake about the environment variable, should be > OPENSSL_FIPS rather than FIPS_MODE. > > But I am still stuck at problem 2, while in fips mode, the TlsServer will > exit w

Re: illegal in FIPS while using req

2009-06-26 Thread Peter Lin
Thanks Dr. Henson, yeah the 0.9.8k version works perfectly. sorry I made the mistake about the environment variable, should be OPENSSL_FIPS rather than FIPS_MODE. But I am still stuck at problem 2, while in fips mode, the TlsServer will exit with the error message as long as a client trying conne

Multiple entries in req_distinguished_name section.

2009-06-26 Thread emstol
Hello. In default openssl configuration (req_distinguished_name section) there is entry: # we can do this but it is not needed normally :-) #1.organizationName = Second Organization Name (eg, company) #1.organizationName_default = World Wide Web Pty Ltd So I want to ask which ano