RE: your mail

I definitely get better results with the latest snapshot. However I still don't get my "0 depth lookup:certificate revoked" but instead get a "0 depth lookup:CRL path validation error" Looking at the differences between my application logic and verify.c, I see that the command line uses an X509

ASN1_get_object:too long

Hi, I'm trying to parse a DER cert that seems to be invalid. I can parse it but not load it or convert it into a PEM file. Is there a way to find out what's wrong with the file? Thanks in advance! openssl x509 -inform der -in ..\certs\cert1.crt -out ..\ certs\cert1.pem unable to load certificat

Re: SSL port 990 mainframe ???

if there are no security messages in the MVS syslog, here is one other place i might look: if the syslogd daemon is running, usually FTPD (depending on its own config file) will write messages concerning the connections it permits(or denys) into a file specified by /etc/syslog.conf. these are usua

RE: SSL port 990 mainframe ???

SSL on Port 21 usually is Explicit and on 990 Implicit. The difference between the two being that in Explicit the client gets to decide by sending the AUTH command when the SSL handshake happens. On Implicit the SSL handshake happens right after connect. You could use the command line openssl s_

Re: SSL port 990 mainframe ???

Hey thanks so much for the reply. Yes, the tcp/ip port definitions are the same for port 21 as for port 990. Port 21 is working, ftp over ssl/tls ... Port 990 is defined the same within tcp/ip ... I do make a connection after the ftp is initiated, then I get dropped perhaps that is in the omv

Segmentation Fault with using OpenSSL via JNI

I am getting a variety of stack traces that may all relate to one cause. The packages runs fine in many instances but one particular configuration gives problems: = = = = = = = = = = = = S:Red Hat Enterprise

RE: "Client Hello" from HP Insight Manager crashes application

> From: owner-openssl-us...@openssl.org On Behalf Of Josue Andrade Gomes > Sent: Tuesday, 03 November, 2009 07:13 > On Thu, Oct 29, 2009 at 11:42 PM, Dave Thompson >  wrote: > > I'd bet the traceback is wrong. > > Indeed a detailed analysis by the debugger show: > > ntdll!KiFastSystemCallRet >

Re: [FWD] SSL_write returned SSL_ERROR_SSL

Hi I use to write data to openssl the follow function int hb_inetSSLWrite(int com,SSL* pSSL, int timeout, char * msg, int length, int* iRet) { int ret; int sslerr; int r; fd_set fd_r, fd_w; struct timeval tv; do { ret = SSL_write(pSSL, msg, length); sslerr = SSL

Re: SSL port 990 mainframe ???

i may not have a clue; but here are a couple of things to check. lots of tcpip profiles run with port reservations. the ftp server has to be configured to listen on 990 which is probably is if the connection is sucessful. but if it is and the mainframe is running RACF(or equivilent) that defines

RE: [FWD] SSL_write returned SSL_ERROR_SSL

> From: owner-openssl-us...@openssl.org On Behalf Of Lutz Jaenicke > Sent: Tuesday, 03 November, 2009 14:13 > - Forwarded message from sandeep.kuma...@wipro.com - > Subject: SSL_write returned SSL_ERROR_SSL > Date: Tue, 3 Nov 2009 19:25:03 +0530 > Thread-Topic: SSL_write returned SSL_ERROR_

Re: Static libraries with fPIC on 32bit system

Thanks for the reply Mike. > dont link static libraries into shared libraries and it isnt a problem Ya that is true. But, I do want to link the static library to the shared library. > pic adds a lot of overhead with x86 due to register pressure Can you point me to link or something that discusse

[FWD] SSL_write returned SSL_ERROR_SSL

Forwarding to openssl-users for public discussion. Best regards, Lutz - Forwarded message from sandeep.kuma...@wipro.com - Subject: SSL_write returned SSL_ERROR_SSL Date: Tue, 3 Nov 2009 19:25:03 +0530 Thread-Topic: SSL_write returned SSL_ERROR_SSL Thread-Index: AcpcjT4Rk9sPCTZ0Q

Re: Static libraries with fPIC on 32bit system

On Tue, Nov 3, 2009 at 13:45, john blair wrote: >> dont link static libraries into shared libraries and it isnt a problem > > Ya that is true. But, I do want to link the static library to the shared > library. linking static libraries into a shared library is wrong. maybe someone else will help

Re: Enabling Session Caching

On Mon, Nov 02, 2009, Paul Suhler wrote: > Hi, everyone. > > I'm trying to enable session caching, but my server doesn't seem to send > a session ID. > OpenSSL supports stateless session resumption which doesn't use session IDs. Well all apart from the latest snapshots which do include session

Re: "Client Hello" from HP Insight Manager crashes application

On Thu, Oct 29, 2009 at 11:42 PM, Dave Thompson  wrote: Thanks for your help. > I'd bet the traceback is wrong. Indeed a detailed analysis by the debugger show: ntdll!KiFastSystemCallRet kernel32!UnhandledExceptionFilter+0x7c0 kernel32!BaseThreadStart+0x4a kernel32!_except_handler3+0x61 ntdll!E

Decrypting client certificate

Hi, I'm currently working on an EAP-TLS exchange. I have a private key file in this format: -BEGIN RSA PRIVATE KEY- Proc-Type: 4,ENCRYPTED My client certificate is encrypted. I also have a ca certificate that is not encrypted. I'd like to find out the openssl command to decrypt the clien

Re: Static libraries with fPIC on 32bit system

On Mon, Nov 2, 2009 at 21:37, john blair wrote: > I have built openssl-0.9.8k and am trying to link libcrypto.a statically with > my project. I think libcrypto.a contains contains non-relocatable functions > For example, consider the following: > #include > void foo(void) { >            DES_encry