RE: Man in the middle proxy - Not working

2010-08-06 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Raj > Sent: Friday, 06 August, 2010 10:14 >I was able to read the content data from the server > using SSL_read > and put back to the browser by using SSL_write. I don't know > whether is a > right approach or not. If you are doing

Support of SHA-2

2010-08-06 Thread Alex Chen
Is SHA-2 supported in OpenSSL 1.0 or the latest version? From my search in Google, I found the following entry in openssl-dev mailing list: > List: openssl-dev > Subject:Re: SHA-2 support in openssl? > From: smitha daggubati > Date: 2009-11-18 9:56:55 > Message-ID: 40a23ffd0

Re: Question about extensions

2010-08-06 Thread Bram Cymet
On 08/06/2010 01:18 PM, Dr. Stephen Henson wrote: > On Fri, Aug 06, 2010, Bram Cymet wrote: > > >> On 08/06/2010 08:49 AM, Dr. Stephen Henson wrote: >> >>> On Wed, Aug 04, 2010, Bram Cymet wrote: >>> >>> >>> HI, Give a configuration like the following: sub

Re: Question about extensions

2010-08-06 Thread Dr. Stephen Henson
On Fri, Aug 06, 2010, Bram Cymet wrote: > On 08/06/2010 08:49 AM, Dr. Stephen Henson wrote: > > On Wed, Aug 04, 2010, Bram Cymet wrote: > > > > > >> HI, > >> > >> Give a configuration like the following: > >> > >> subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:princ_name > >> > >> > >> # Copy

Re: Verifying X509 Certificates Using The OpenSSL API

2010-08-06 Thread Dr. Stephen Henson
On Fri, Aug 06, 2010, Sam Jantz wrote: > To whomever may have an answer, > > I am writing a SSL/TLS proxy server for my work that is multi-threaded. > I recently replaced my OpenSSL version with 1.0.0a from 0.9.8g. In this > application I need to verify the server certificate otherwise al

Verifying X509 Certificates Using The OpenSSL API

2010-08-06 Thread Sam Jantz
To whomever may have an answer, I am writing a SSL/TLS proxy server for my work that is multi-threaded. I recently replaced my OpenSSL version with 1.0.0a from 0.9.8g. In this application I need to verify the server certificate otherwise all the security will be bypassed. However, when I

Re: Man in the middle proxy - Not working

2010-08-06 Thread Raj
Hi I was able to read the content data from the server using SSL_read and put back to the browser by using SSL_write. I don't know whether is a right approach or not. I have done the experiment in these two urls 1. https://s-static.ak.facebook.com/rsrc.php/z9Q0Q/hash/8yhim1ep.ico 2. htt

Re: Question about extensions

2010-08-06 Thread Bram Cymet
On 08/06/2010 08:49 AM, Dr. Stephen Henson wrote: > On Wed, Aug 04, 2010, Bram Cymet wrote: > > >> HI, >> >> Give a configuration like the following: >> >> subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:princ_name >> >> >> # Copy subject details >> >> issuerAltName=issuer:copy >> >> [princ_name

Re: Question about extensions

2010-08-06 Thread Dr. Stephen Henson
On Wed, Aug 04, 2010, Bram Cymet wrote: > HI, > > Give a configuration like the following: > > subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:princ_name > > > # Copy subject details > > issuerAltName=issuer:copy > > [princ_name] > realm = EXP:0, GeneralString:${ENV::REALM} > principal_name

Re: SSL_CTX_set_verify issue

2010-08-06 Thread Peter Sylvester
On 08/06/2010 10:54 AM, Manjunath1847 wrote: I am using SSL_CTX_set_verify() function to set my static C callback verify function. During HTTPS transaction, my callback is also getting called with first parameter 0 or 1 (depending upon of the certificate verification is success or failure). But e

SSL_CTX_set_verify issue

2010-08-06 Thread Manjunath1847
I am using SSL_CTX_set_verify() function to set my static C callback verify function. During HTTPS transaction, my callback is also getting called with first parameter 0 or 1 (depending upon of the certificate verification is success or failure). But even if my certification verification is failur