Re: OpenSSL CA and MySQL

2009-10-19 Thread Victor B. Wagner
On 2009.10.19 at 21:55:09 +0200, Matthias G?ntert wrote: > hello guys > > is anyone working on a replacement for the text based ca database? It There are such projects as XPKI, which use openssl library to generate certificates and database backend to store them. These projects also provide nice

Re: OpenSSL CA and MySQL

2009-10-19 Thread Victor B. Wagner
On 2009.10.19 at 13:35:32 -0700, John R Pierce wrote: > Matthias G?ntert wrote: >> hello guys >> >> is anyone working on a replacement for the text based ca database? It >> seems the database functions are defined in apps/ca.c and apps/apps.h, >> at least for version 0.9.8k. wouldn't it be nice if

Re: Getting hostname with openssl library

2009-10-19 Thread Victor B. Wagner
On 2009.10.19 at 17:40:11 -0400, Victor Duchovni wrote: > On Mon, Oct 19, 2009 at 01:34:38PM -0500, William wrote: > > > I am looking for the way to read a certificate from disk in C code and > > get the hostname (CN) inside that certificate in the C code using the > > openssl library. > > Sadly

Re: Getting hostname with openssl library

2009-10-19 Thread Victor Duchovni
On Mon, Oct 19, 2009 at 01:34:38PM -0500, William wrote: > I am looking for the way to read a certificate from disk in C code and > get the hostname (CN) inside that certificate in the C code using the > openssl library. Sadly, a rather complex task in general: - The subject DN could contain

Outlook couldn't open encrypted emails Optionen

2009-10-19 Thread kug1977
Hi, I really need some help. I've used openssl to generate 1024bit 3DES keys (AES isn't supported in this Outlook version) and X.509 certifcates, to securing emails. Decrypt the msg get the error "Your key set cannot be found by the underling security system." which lead me to the MS KBase 19567

Getting hostname with openssl library

2009-10-19 Thread William
I am looking for the way to read a certificate from disk in C code and get the hostname (CN) inside that certificate in the C code using the openssl library. __ OpenSSL Project http://www.openssl.org

Re: OpenSSL CA and MySQL

2009-10-19 Thread John R Pierce
Matthias Güntert wrote: hello guys is anyone working on a replacement for the text based ca database? It seems the database functions are defined in apps/ca.c and apps/apps.h, at least for version 0.9.8k. wouldn't it be nice if we had something to store the data in a relational db? why? ther

OpenSSL CA and MySQL

2009-10-19 Thread Matthias Güntert
hello guys is anyone working on a replacement for the text based ca database? It seems the database functions are defined in apps/ca.c and apps/apps.h, at least for version 0.9.8k. wouldn't it be nice if we had something to store the data in a relational db? is there something already out google c

Re: Verify fails if two certs with same subject are in the trustedCA lookup file

2009-10-19 Thread Wayne Feick
Take a look at subject key identifiers... On Mon, 2009-10-19 at 14:35 +0200, Steffen DETTMER wrote: > * Arno Garrels wrote on Sun, Oct 11, 2009 at 16:10 +0200: > > > > Why are issuers looked up by subject at all? > > > > > > > > > > Because that's what the standards (X.509, RFC3280 et al) requir

Re: RE: Location of OpenSSL libraries

2009-10-19 Thread Victor B. Wagner
On 2009.10.19 at 17:13:19 +0100, Steve Hay wrote: > > > > Note that if you are trying to build 64-bit application on solaris, it > > should link with /lib/amd64/libcrypto.so rather than /lib/libcrypto.so > > (on Solaris 64-bit libraries are stored in the ${prefix}/lib/`isainfo > > -k` rather than

RE: Location of OpenSSL libraries

2009-10-19 Thread Steve Hay
Victor B. Wagner wrote on 2009-10-19: > On 2009.10.19 at 16:30:14 +0100, Steve Hay wrote: > >> I have a build script for some software that needs to locate the >> OpenSSL headers and libraries, and I have reports that it is failing to >> locate the libraries on some OSes. >> >> One example identi

Re: Location of OpenSSL libraries

2009-10-19 Thread Victor B. Wagner
On 2009.10.19 at 16:30:14 +0100, Steve Hay wrote: > I have a build script for some software that needs to locate the OpenSSL > headers and libraries, and I have reports that it is failing to locate > the libraries on some OSes. > > One example identifies itself (via 'uname') as: > > sunos open-s

Location of OpenSSL libraries

2009-10-19 Thread Steve Hay
I have a build script for some software that needs to locate the OpenSSL headers and libraries, and I have reports that it is failing to locate the libraries on some OSes. One example identifies itself (via 'uname') as: sunos open-solaris-noc 5.11 snv_95 i86pc i386 i86pc What is the default inst

Re: Verify fails if two certs with same subject are in the trustedCA lookup file

2009-10-19 Thread Arno Garrels
Steffen DETTMER wrote: > * Arno Garrels wrote on Sun, Oct 11, 2009 at 16:10 +0200: Why are issuers looked up by subject at all? >>> >>> Because that's what the standards (X.509, RFC3280 et al) require. >> >> Ah ok, but shouldn't name duplicates be taken into account when >> issuers are

Re: The infamous win32 X509_NAME #define problem

2009-10-19 Thread Domingo Kiser
I think that fix is fine for the x509.h include chain, but the problem also exists for the rand.h include chain depending on include order. --Domingo On 10/18/09, sandeep kiran p wrote: > Same here. I too faced the same issue when I was trying to build the 'req' > utility using Visual Studio. A

Re: Verify fails if two certs with same subject are in the trustedCA lookup file

2009-10-19 Thread Steffen DETTMER
* Arno Garrels wrote on Sun, Oct 11, 2009 at 16:10 +0200: > > > Why are issuers looked up by subject at all? > > > > > > > Because that's what the standards (X.509, RFC3280 et al) require. > > Ah ok, but shouldn't name duplicates be taken into account when > issuers are looked up, even though th