Re: Verify X.509 certificate, openssl verify returns bad signature

Hi, The problem you are encountering is partly caused by the way OpenSSL handles integers whose DER encoded value starts with one or more zeros : in this case, OpenSSL removes the leading zero when creating the corresponding ASN1_INTEGER structure thus leading to the fact that computed DER o

Verify X.509 certificate, openssl verify returns bad signature

Hi all, I have two X.509 certificates MUPCAGradjani.crt and MUPCARoot.crt downloaded from http://ca.mup.gov.rs/sertifikati-lat.html Certificate path is MUPCARoot > MUPCAGradjani and I would like to validate MUPCAGradjani against the other. What I did is to convert both to PEM format and rename th

Tls max fragment length problem

Hi everyone, I have three questions: 1. Is there any API to limit the TLS fragment length (record size) to a smaller value than default (2^14)? 2. How to set TLS extension max_fragment_length as suggested in RFC4366? From the source code of 0.9.8l and mailing achieve it seems that thi