Re: where is the memory being held

Does it mean that it is hard to change the behavior? -- qun-ying --- On Fri, 9/24/10, David Schwartz wrote: > > Sounds like OpenSSL wasn't what you wanted. OpenSSL is > intended for use on general-purpose computers with virtual > memory. It is not designed to return virtual memory to the > syst

Re: SHA1 Message Digest Getting Generated less than 160 Bits i.e. 152 bits.

Would you perhaps like to explain how you implemented it (i.e., did you include OpenSSL in your own application, or are you trying to use it via a script?)? 152 bits is 8 bits -- one byte -- less than 160 bits. Are you using a library or framework that overwrites the last byte of the buffer with

RE: Creating Extended Validation SSL Certificates

Hi, I apologize to all for not looking into this more, before asking. It isn't just a matter of adding the proper extensions. The various browser software actually has the corporate policy OID hard coded into the browser code. At first glance I would never of thought this, as the delay to gettin

How to verify a client certificate?

My server wants to check that the client's certificate is signed by the correct CA. The client returns a certificate chain ending in a self-signed certificate, and I want to verify that it's the right self-signed certificate (call it A) and not some imposter. I've been reading the online docum