RE: Unable to load CRL

2009-12-13 Thread Radha krishna Meduri -X (radmedur - HCL at Cisco)
Hi Patrick We are using following code snippet to load CRL's. X509_CRL *pCRL, *pTempCRL = 0; pCRL = d2i_X509_CRL_fp( pfCrlFile, &pTempCRL ); if( !pCRL ) { rewind(pfCrlFile); pCRL = PEM_read_X509_CRL(pfCrlFile, &pTempCRL, NULL, 0); } rewind(pfCrlFile); if( !pCRL ) { logEvent( MLOG_ERROR, RADIU

Re: Newbie question on EVP API

2009-12-13 Thread Bruce Stephens
Alexey Luchko writes: > I'm new to openssl. > I've got two questions on EVP API: > > 1. What do EVP_EncryptInit_ex and EVP_CipherInit_ex differ with? > When should I use encrypt/decrypt and when cipher? If you look at the source, EVP_EncryptInit_ex/EVP_DecryptInit_ex are just trivial wrapper

unable to load Private Key

2009-12-13 Thread Llenlleawg
Hi All, I'm hoping someone can help me, I'm a complete newb when it comes to this stuff so I hope someone can point me in the right direction. Here is a brief outline of what I'm trying to do. I'm trying to create a certificate signed by my own CA and private key. I followed the steps on the f

Re: Understanding SSL_read()/SSL_write()

2009-12-13 Thread Patrick Patterson
Sebastián Treu wrote: > Hi David, > > >>> Others things are to instantaneously put that client in a wait list >>> when SSL_write() could not succed, continue with the others, and try >>> with that client again later. But, sometimes we can get a WANT_WRITE >>> or WANT_READ when renegotiating so th

Newbie question on EVP API

2009-12-13 Thread Alexey Luchko
Hi! I'm new to openssl. I've got two questions on EVP API: 1. What do EVP_EncryptInit_ex and EVP_CipherInit_ex differ with? When should I use encrypt/decrypt and when cipher? 2. Where can I read about cipher modes? There are several modes for each cipher on http://openssl.org/docs/c