Re:cipher list

2011-02-14 Thread lzyzizi
I would like to know how cipher list negociation works ( see scheme below ). See a book that talk about SSL handshake. is it transparent for users ( developpers ) ? Almost. must they write it ? You do not need to write it,but you can chose it. if yes, what are the functions ? You can chose you ciph

Re: Adding non-root certificates to the list of trusted certificates?

2011-02-14 Thread Victor Duchovni
On Mon, Feb 14, 2011 at 04:36:07PM +, Martin Nicholes wrote: > I am also interested in the ability to allow non-root certs, but my > company is not planning on distributing OpenSSL. Callbacks are implemented in the application, not in the OpenSSL library. > Therefore a custom verification ca

Re: looking for openssl doc outline

2011-02-14 Thread John R Pierce
On 02/14/11 9:49 AM, Aro RANAIVONDRAMBOLA wrote: Hello, I am lookking for an outline API documentation about ssl ( in pdf format for example ). I did not find it on the website. have someone got it ? other than the MAN pages, about the only decent doc is the "Sea Lion" book from O'Reilly, ht

looking for openssl doc outline

2011-02-14 Thread Aro RANAIVONDRAMBOLA
Hello, I am lookking for an outline API documentation about ssl ( in pdf format for example ). I did not find it on the website. have someone got it ? thanks. razuki

RE: Adding non-root certificates to the list of trusted certificates?

2011-02-14 Thread Martin Nicholes
I am also interested in the ability to allow non-root certs, but my company is not planning on distributing OpenSSL. Therefore a custom verification callback would not be an option; we would need a compile option to allow this feature. We work in an embedded environment (firmware), and need to

cipher list

2011-02-14 Thread Aro RANAIVONDRAMBOLA
Hello, I would like to know how cipher list negociation works ( see scheme below ). I suppose it happens in handshake level. is it transparent for users ( developpers ) ? must they write it ? if yes, what are the functions ? client server TLS_RSA_WITH_AES_256_CBC_SHA

ASN.1 encoding a private structure

2011-02-14 Thread Eisenacher, Patrick
I want to encode a private asn1 structure, say something like the following: SEQUENCE true_false BOOLEAN certificate Certificate I checked the asn1parse command and was able to specify my outer sequence and the inner boolean in the genconf file, but failed to specify my certificate. I had

Re: File CER into File PFX

2011-02-14 Thread Ramaswamy BM
Try this openssl pkcs12 -inkey cert.key -in cert.cer -export -out output.pfx Thanks, Ram yann458 wrote: Hello, I need to convert a file .CER into file PFX knowing that I do not have to file KEY (.PVK) Help me because I know little in certificate. I absolutely need. Thank you very help .

File CER into File PFX

2011-02-14 Thread yann458
Hello, I need to convert a file .CER into file PFX knowing that I do not have to file KEY (.PVK) Help me because I know little in certificate. I absolutely need. Thank you very help . -- View this message in context: http://old.nabble.com/File-CER-into-File-PFX-tp30915480p30915480.html Sent