RE: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

2010-01-26 Thread Ujwal Chinthala
Hi, Thanks for all the help. I modified the code based on your comments. Basically, I am trying to verify a CMS data signed by a C# program. So I have the base 64 decoded CSM data stored as nBytes a BYTE array. I have to verify the data(nBytes) using the DSA params and public key which is hard

Re: utf8string vs printablestring mismatch in certificate checking

2010-01-26 Thread sandeep kiran p
>1.0.0 uses a different algorithm for computing hashes which relies on a form of canonical encoding. Does that mean we need to recompute the hashes for existing CA certs and CRLs if we are to work with 1.0.0 since it seems to generate a different hash value for the same cert? -Sandeep On Tue, Ja

Re: Re-negotiation handshake failed: Not accepted byclientwithOpenSSL 0.98m-beta1

2010-01-26 Thread Dr. Stephen Henson
On Tue, Jan 26, 2010, Shotton, Fred wrote: > Hi Steve, > > I have verified the new change solves the problem. > > Excellent, thanks for running the tests. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ___

RE: Re-negotiation handshake failed: Not accepted byclientwithOpenSSL 0.98m-beta1

2010-01-26 Thread Shotton, Fred
Hi Steve, I have verified the new change solves the problem. Thank you, fred -Original Message- From: Dr. Stephen Henson [mailto:st...@openssl.org] Sent: Tuesday, January 26, 2010 11:56 AM To: openssl-users@openssl.org Subject: Re: Re-negotiation handshake failed: Not accepted byclien

Re: Re-negotiation handshake failed: Not accepted by clientwithOpenSSL 0.98m-beta1

2010-01-26 Thread Dr. Stephen Henson
On Tue, Jan 26, 2010, Shotton, Fred wrote: > > I double checked that swapping BIO_CTRL_PENDING and BIO_CTRL_WPENDING in > modules/ssl/ssl_engine_io.c does NOT fix this. It results in a fatal alert, > without it the s_client hangs. My test is a little unusual in that I > copy/paste an HTTP GET req

RE: Re-negotiation handshake failed: Not accepted by clientwithOpenSSL 0.98m-beta1

2010-01-26 Thread Shotton, Fred
Hi Steve, I double checked that swapping BIO_CTRL_PENDING and BIO_CTRL_WPENDING in modules/ssl/ssl_engine_io.c does NOT fix this. It results in a fatal alert, without it the s_client hangs. My test is a little unusual in that I copy/paste an HTTP GET request into the s_client session in a termi

Re: can TLS be used securely or it is flawed by design not allowing to use it securely

2010-01-26 Thread Steffen DETTMER
* Kyle Hamilton wrote on Tue, Jan 19, 2010 at 16:00 -0800: > On Tue, Jan 19, 2010 at 6:19 AM, Steffen wrote: > > * Kyle Hamilton wrote on Thu, Jan 14, 2010 at 15:50 -0800: > > (assuming, that a peers identity should not change within a > > session - but as discussed later in this mail this could be

Re: OpenSSL 1.0.0 beta5 release (Build Broblem)

2010-01-26 Thread Dr. Stephen Henson
On Tue, Jan 26, 2010, So Gerald wrote: > perl Configure VC-WIN32 -DOPENSSL_SSL_CLIENT_ENGINE_AUTO=capi > -DOPENSSL_CAPIENG_DIALOG > ms\do_ms > nmake -f ms\ntdll.mak > > .\engines\e_capi.c(466) : error C2220: warning treated as error - no object > fil > generated > .\engines\e_capi.c(466) : w

Re: OpenSSL 0.9.8m-beta1 release (Build Broblem)

2010-01-26 Thread Dr. Stephen Henson
On Tue, Jan 26, 2010, So Gerald wrote: > I built it with VC-Win32 and got a problem: > perl Configure VC-WIN32 no-hw enable-capieng -DOPENSSL_ > SSL_CLIENT_ENGINE_AUTO=capi -DOPENSSL_CAPIENG_DIALOG > ms\do_masm > nmake -f ms\ntdll.mak > > .\ssl\d1_both.c(992) : warning C4761: integral size mi

Re: OpenSSL 1.0.0 beta5 release (Build Broblem)

2010-01-26 Thread So Gerald
perl Configure VC-WIN32 -DOPENSSL_SSL_CLIENT_ENGINE_AUTO=capi -DOPENSSL_CAPIENG_DIALOG ms\do_ms nmake -f ms\ntdll.mak .\engines\e_capi.c(466) : error C2220: warning treated as error - no object fil generated .\engines\e_capi.c(466) : warning C4013: 'OPENSSL_isservice' undefined; assumin exte