Re: CA cert installed/imported but they are not trusted

Did you check with openssll s_client ? Just try openssl s_client -connect hostname:port -showcerts -CAfile < CAceritificate> Regards Arava On Thu, Apr 8, 2010 at 7:25 PM, Götz Reinicke - IT Koordinator < goetz.reini...@filmakademie.de> wrote: > Hallo and one more thing, > > recently I started t

Re: problem with signing with DSA private keys using EVP_SignFina

Hi, On Fri, Apr 09, 2010 at 12:53:35AM +0800, ?? wrote: > Hi guys, I have a problem with signing with *DSA* private keys using > *EVP_SignFina > function.* > ** > There is some fragment of my code following: > > /* Do the signature */ > EVP_MD_CTX_init(&md_ctx); > err = EVP_SignInit (&md_ctx

Re: openssl-0.9.8n and openssl-fips-1.2 ERR_peek_last_error failure

On Thu, Apr 08, 2010, Gatewood (Woody) Green wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: RIPEMD160 > > Setup: > > Built openssl-fips-1.2 per the Security Policy. > Built openssl-0.9.8n with the fips option > > Notes: > > Successfully built "FIPS-ified" version of wget, curl/libcurl, li

ssh_key_verify problem with 0.9.8n + FIPS

Hello, Some background -- I've had good luck in the past creating a functional FIPs-enabled OpenSSL and OpenSSH using these components: fipscanister build from openssl-fips-1.2.tar.gz openssl 0.9.8l openssh (5.2p1 or 5.3p1) ssh patch for FIPS: http://cvs.fedoraproject.org/viewvc/devel/openssh

ssh_key_verify problem with 0.9.8n + FIPS

Hello, Some background -- I've had good luck in the past creating a functional FIPs-enabled OpenSSL and OpenSSH using these components: fipscanister build from openssl-fips-1.2.tar.gz openssl 0.9.8l openssh (5.2p1 or 5.3p1) ssh patch for FIPS: http://cvs.fedoraproject.org/viewvc/devel/openssh

openssl-0.9.8n and openssl-fips-1.2 ERR_peek_last_error failure

-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Setup: Built openssl-fips-1.2 per the Security Policy. Built openssl-0.9.8n with the fips option Notes: Successfully built "FIPS-ified" version of wget, curl/libcurl, libssh2 and mod_ssl. Successfully means the work as advertised within the re

RE: does bio_get_mem_data handle unicode?

Ryan Pfeifle Sr. Programmer Voice Print International, Inc. Immediate Results. Unmatched Value. Tel: 1.805.389.5200 x5297 Fax: N/A Email: r...@vpi-corp.com Web: www.VPI-corp.com Experience the VPI Value Advantage at http://www.VPI-corp.com/Value The information transmitted in this message

problem with signing with DSA private keys using EVP_SignFina

Hi guys, I have a problem with signing with *DSA* private keys using *EVP_SignFina function.* ** There is some fragment of my code following: /* Do the signature */ EVP_MD_CTX_init(&md_ctx); err = EVP_SignInit (&md_ctx, EVP_sha1()); err = EVP_SignUpdate (&md_ctx, data, strlen(data)); sig_len = si

Re: CA cert installed/imported but they are not trusted

On Apr 8, 2010, at 6:55 AM, Götz Reinicke - IT Koordinator wrote: > So dose my local ldap client (Apache Directory Studio (ADS) on mac OS X > 10.6.x ). > > Nearly, because the servers and the ADS client both alert me, that I use > invalide certificates and the cerificate can't be validated. > >

CA cert installed/imported but they are not trusted

Hallo and one more thing, recently I started to set up a master/slave OpenLDAP system with tls/certs. (Red Hat 5.x, openssl-0.9.8e-12, openldap-2.3.43-3 ) For that pourpose I set up a CA, generated certs, requests and keys, installed tham on the corresponding servers and my OS X client and my lda

Cipher suits

Greetings, I'm trying to develop a simple SSL module for a web server. I don't have much experience with cryptography and OpenSSL, so I am bit confused about various combinations of cipher suits when performing key exchange and authentication. 1. I assume RSA key exchange and authentication is th

Re: locate key for p12 certificate

On Thu, 2010-04-08 at 08:10 -0400, Patrick Patterson wrote: > > So, the short answer is - until you can convince the administrators of > the server that you are proxying for to hand over their private keys, > what you want to do is not possible. Well, what he wants to do is just see the traffic

Re: locate key for p12 certificate

Hello Peter: On 08/04/10 3:45 AM, peter23452345 wrote: > > hi, i have been trying to create a certificate for use on my webscarab proxy. > essentially what i want to do is this: run a php curl script which redirects > certain https traffic though the webscarab proxy so that i can see the > outpu

Re: does bio_get_mem_data handle unicode?

On 4/7/2010 12:33 PM, Ryan Pfeifle wrote: > While we are on the subject of Unicode, there are other areas of OpenSSL > that need Unicode support added, in particular handling of paths and > filenames on UTF16-based filesystems that require wchar_t* parameters. > For instance, on Windows, OpenSSL c

locate key for p12 certificate

hi, i have been trying to create a certificate for use on my webscarab proxy. essentially what i want to do is this: run a php curl script which redirects certain https traffic though the webscarab proxy so that i can see the output from the curl script (php curl doesnt provide visibility into the

SSL error: parse tlsext

Hi, I am using openssl from within neon, itself used from within Subversion. During an svnsync, I receive the following error message: svnsync: PROPFIND of '/svn/xxx': SSL negotiation failed: SSL error: parse tlsext (https://xxx.org) If I am right, this message comes from openssl.

Re: Strange SSL_shutdown() error return (SSL_ERROR_SYSCALL but errno == 0)

Antoine Pitrou wrote: These issues are tracked together at http://bugs.python.org/issue8108 , because they both appeared when someone tried OpenSSL 0.9.8m. I have read through the discussion first I'd like to confirm the scenario for the errno==0 situation through particular sequence of events