Re: verifying cert against its CA

2009-09-27 Thread Nima Sharifimehr
There is a tiny bug in code above which causes some memory leak. To prevent that, the line below inside the do {...} while(0) loop: X509_STORE_CTX *pCertContext =                     X509_STORE_CTX_new(); needs to be changed to: pCertContext = X509_STORE_CTX_new();

Re: Geode on-chip AES 128-bit crypto accelerations but OpenSSL doesn't use it

2009-09-27 Thread Alan Buxey
Hi, > Hello everybody, > > The AMD Geode LX800 CPU has an on-chip AES 128-bit crypto accelerations > block and a true random number generator, but OpenSSL is not using it. > > Please see the below link for test reports and openssl outputs > http://debian.pastebin.com/faeff2a3 > > Is there anybody

Bad Decrypt - Password Correct

2009-09-27 Thread John Medearis
Using openssl on Windows Vista 64-bit. Would create a tar backup of data, and then use openssl to encrypt: openssl enc -aes-256-cbc -salt -pass file:backup_key < JMBkFile.tar > JMBkFile.ssl This has worked well on a RHEL 5 box, with a 1.2GB tar file. I have been able to encrypt and decrypt succ

Geode on-chip AES 128-bit crypto accelerations but OpenSSL doesn't use it

2009-09-27 Thread Jelle de Jong
Hello everybody, The AMD Geode LX800 CPU has an on-chip AES 128-bit crypto accelerations block and a true random number generator, but OpenSSL is not using it. Please see the below link for test reports and openssl outputs http://debian.pastebin.com/faeff2a3 Is there anybody that know what is

Verify include CRL

2009-09-27 Thread Arno Garrels
Hi, When I set the store verify flags to either X509_V_FLAG_CRL_CHECK or to "X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL" verification always fails with error X509_V_ERR_UNABLE_TO_GET_CRL for certs _not_ revoked. Revoked certs however are identified correctly with verify result X509_V_ERR_