Adding OIDs

2010-06-29 Thread Mag
I'm interested in using custom OIDs for private application purposes. I've found the documentation to be deficient. For instance, in openssl.cnf it gives an example line of [ new_oids ] #testoid1=1.2.3.4 When I uncomment that line I can't even tell what the effect is; e.g., "openssl req ..." do

Re: Error with "dgst -sign"

2010-06-29 Thread Dr. Stephen Henson
On Tue, Jun 29, 2010, Nacho lvarez wrote: > Ok, with option disable-capieng (I didn't know it) OpenSSL compiles... but I > changed "e" for NULL in those calls (EVP_Digest... in dgst.c file) and the > same error occurs: > > Error setting context > 295228:error:260C0065:engine routines:ENGINE_get_p

Re: Error with "dgst -sign"

2010-06-29 Thread Nacho Álvarez
Ok, with option disable-capieng (I didn't know it) OpenSSL compiles... but I changed "e" for NULL in those calls (EVP_Digest... in dgst.c file) and the same error occurs: Error setting context 295228:error:260C0065:engine routines:ENGINE_get_pkey_meth:unimplemented public key method:tb_pkmeth.c:12

SSL3_GET_RECORD:decryption failed or bad record mac

2010-06-29 Thread Amit Ben Shahar
I am having issues with a server, i'm getting many of these errors especially while running a load (~80 users). here is the full error message: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac It seems to be occurring during the negotiation (accept) phase. Maybe some

RE: openssl execution failure: (Win Apache) configfile name?

2010-06-29 Thread David Schulberg
Hi, Taking out the quotes and all is good! David -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of David Schulberg Sent: Tuesday, 29 June 2010 9:59 AM To: openssl-users@openssl.org Subject: RE: openssl execution failure: (Win

Re: Error with "dgst -sign"

2010-06-29 Thread Dr. Stephen Henson
On Tue, Jun 29, 2010, Nacho lvarez wrote: > Hi again, > > Do you say me who change > > if (do_verify) > r = EVP_DigestVerifyInit(mctx, &pctx, md, e, sigkey); > else > r = EVP_DigestSignInit(mctx, &pctx, md, e, sigkey); > > for > > if (do_verify)

Re: defines set in build

2010-06-29 Thread Jakob Bohm
On 28-06-2010 15:26, Carter Browne wrote: On 6/28/2010 7:15 AM, Jakob Bohm wrote: >> ... If you are looking for a small, minimal-impact perl to use for this, try "Strawberry perl", 5.12 or later, run its MSI file and then remove its bogus setting of the TERM environment variable from the "My C

Re: Error with "dgst -sign"

2010-06-29 Thread Nacho Álvarez
Hi again, Do you say me who change if (do_verify) r = EVP_DigestVerifyInit(mctx, &pctx, md, e, sigkey); else r = EVP_DigestSignInit(mctx, &pctx, md, e, sigkey); for if (do_verify) r = EVP_DigestVerifyInit(mctx, &pctx, md, NULL, sigkey)