Re: Apache OCSP verification fails

2010-07-30 Thread Patrick Patterson
Hi Ulf: My guess is that this isn't an OpenSSL issue, but rather an issue with how the Apache devels have implemented OCSP, so the best mailing list to ask about these kinds of questions is probably the Apache-devel list. Have fun. Patrick. On July 30, 2010 09:49:10 am Ulf Wahlqvist wrote: >

Apache OCSP verification fails

2010-07-30 Thread Ulf Wahlqvist
I'm trying to get Apache to do Client certificate verification with OCSP-validation. It works without OCSP, but OCSP-validation fails when I turn it on. The error is "OCSP_check_validity:status too old", but that doesn't make sense because the clocks are within 2 seconds. I have verified that if

Error in SSL accept

2010-07-30 Thread Raj
Hi All I am getting the following error when I call the function SSL_accept 1364:error:2006F079:BIO routines:BIO_read:unsupported method:.\crypto\bio\bio_lib.c:197: Can anybody please tell me the reasons for the failure I am new to this technology so I am not sure

Re: building openssh with openssl-fips: cygwin can't find libcrypto

2010-07-30 Thread Bryan
On Thu, Jul 29, 2010 at 13:08, Steve Marquess wrote: > Bryan wrote: >> >> I am almost done here... I was able to symlink the headers to get past >> the opensslv header files, but the build process fails because openssl >> didn't build libcypto.  The problem is that when building openssl with >> fi

Openssl certificate and key management

2010-07-30 Thread tushar ganguli
Hi, I wanted to understand whether openssl supports certificate and key storage and management? Is there any way in openssl which would help me to store private/ encrypted private keys in openssl store? I was able to find methods for storing and accessing certificate store in the SSL protocol. Also

Re: building openssh with openssl-fips: cygwin can't find libcrypto

2010-07-30 Thread Steve Marquess
Bryan wrote: I am almost done here... I was able to symlink the headers to get past the opensslv header files, but the build process fails because openssl didn't build libcypto. The problem is that when building openssl with fips, it doesn't not appear to build libcrypto, and changing anything i