Connection Resetting

2010-08-27 Thread Sam Jantz
Hello all, I have a question concerning Keep-Alives. I'm writing a SSL proxy (which is working great except for this issue) and every time I got to attach a file in an email the connection resets, and it gets caught in an infinite retransmit loop. I've tested it with Gmail, and also with the

Fallback certs

2010-08-27 Thread Devin Ceartas
Is it possible to have a preferred certificate (say, one I created myself and signed with my own root) and have connections to a web browser fall back on a secondary cert (say one from a commercial provider) if negotiation on the preferred certificate fails? -- devin __

Re: Signing the certificate

2010-08-27 Thread Sam Jantz
Raj, That's not exactly how certificates work. To get a certificate signed by a CA you have to create a request, and send it to the CA. The CA will then sign it with it's private key. The function that you are looking for is int X509_sign(X509* cert, EVP_PKEY * private_key, EVP_sha1()). This f