Many places including the DN comparision algorithm description of RFC3280.
Sorry can you point me to the exact paragraph, I read 4.1.2.4 and 5.1.2.3 but the comparision
seems to happen on the contents of the issuer field and not the order,
thanks
Nicola
near the end of page 95 of rfc 52
Il 20/07/2011 19:09, Michael Ströder ha scritto:
Mailing List SVR wrote:
Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto:
On Wed, Jul 20, 2011, Mailing List SVR wrote:
Il 20/07/2011 08:44, Mailing List SVR ha scritto:
Hi,
openssl seems unable to verify the attacched sod.pem, other pem
fi
Mailing List SVR wrote:
Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto:
On Wed, Jul 20, 2011, Mailing List SVR wrote:
Il 20/07/2011 08:44, Mailing List SVR ha scritto:
Hi,
openssl seems unable to verify the attacched sod.pem, other pem
file works fine there is something strange with the
Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto:
On Wed, Jul 20, 2011, Mailing List SVR wrote:
Il 20/07/2011 08:44, Mailing List SVR ha scritto:
Hi,
openssl seems unable to verify the attacched sod.pem, other pem
file works fine there is something strange with the one attached,
attached is
On Wed, Jul 20, 2011, Mailing List SVR wrote:
> Il 20/07/2011 08:44, Mailing List SVR ha scritto:
> >Hi,
> >
> >openssl seems unable to verify the attacched sod.pem, other pem
> >file works fine there is something strange with the one attached,
> >attached is also the binary cert from which I extr
On Wed, Jul 20, 2011, brajan wrote:
>
> hi can any one tell me how to over that error i am validating the certificate
> using
> X509_verify_cert()
> the out put of this is Signature verification error.. i go through the code
> and found
> ASN1_item_verify function is called where can i find thi
What a great amount of useful information. Thanks.
-Original Message-
From: Jeffrey Walton
To: openssl-users
Sent: Wed, Jul 20, 2011 9:57 am
Subject: Re: Trying to Link Statically to Libcrypto
On Wed, Jul 20, 2011 at 8:48 AM, wrote:
It didn't fix it. In the end, I cannot link
He just isn't a Linux guy, and I didn't know enough to advise him.
-Original Message-
From: Andreas Mueller
To: brandonshw
Sent: Wed, Jul 20, 2011 9:32 am
Subject: Re: Fwd: Trying to Link Statically to Libcrypto
Brandon,
Quoting brandon...@aol.com:
Although my current orders are t
Wow, you guys are good! Thanks.
-Original Message-
From: Michael S. Zick
To: openssl-users
Sent: Wed, Jul 20, 2011 9:27 am
Subject: Re: Fwd: Trying to Link Statically to Libcrypto
On Wed July 20 2011, brandon...@aol.com wrote:
It didn't fix it. In the end, I cannot link static
On Wed, Jul 20, 2011 at 8:48 AM, wrote:
> It didn't fix it. In the end, I cannot link statically without libsasl2.a,
> which I am having difficulty obtaining, but which must be somehow
> obtainable.
http://asg.web.cmu.edu/sasl/sasl-library.html
> In the meantime, I am including libraries for wh
On Wed July 20 2011, brandon...@aol.com wrote:
>
> It didn't fix it. In the end, I cannot link statically without libsasl2.a,
> which I am having difficulty obtaining, but which must be somehow obtainable.
> In the meantime, I am including libraries for which I have a static version
> in my o
It didn't fix it. In the end, I cannot link statically without libsasl2.a,
which I am having difficulty obtaining, but which must be somehow obtainable.
In the meantime, I am including libraries for which I have a static version in
my objective files list, rather than as linker flags. I am
hi i am using openssl 0.9.8g version ..
ASN1_item_verify ()
in this function Void* asn is used as ASN1_VALUE* asn. my complier show
error for that.. whether it is the reason for X509_verify(cert,cakey)
function fails .?
--
View this message in context:
http://old.nabble.com/openssl-0.9.8g-bug..
hi can any one tell me how to over that error i am validating the certificate
using
X509_verify_cert()
the out put of this is Signature verification error.. i go through the code
and found
ASN1_item_verify function is called where can i find this function c code
and how to over come the Verifica
Mayur Premi wrote:
>
> Hi ,
> I am using X509* ** pX = * PEM_read_X509*(FILE *fp, X509 **x,
> pem_password_cb *cb, void *u);
>
> to get a X509 certificate structure from PEM format File.
>
> My File(fp) looks like below:
>
> -BEGIN CERTIFICATE-
> MIIEQzCCAyugAwIBAgIPAMdMAQEALqZRDlT
On 07/16/2011 07:13 PM, y...@inbox.lv wrote:
> ...
So everybody here seems to agree that steps 1)...7) I listed in the
first post are correct, and that the problem in EC management lies in
OpenVPN, right?
__
OpenSSL Project
Hi ,
I am using X509* ** pX = * PEM_read_X509*(FILE *fp, X509 **x,
pem_password_cb *cb, void *u);
to get a X509 certificate structure from PEM format File.
My File(fp) looks like below:
-BEGIN CERTIFICATE-
MIIEQzCCAyugAwIBAgIPAMdMAQEALqZRDlTBXHdHMA0GCSqGSIb3DQEBCwUAMGAxCzAJBgNVBAYTAkd
Hi All,
I am using OpenSSL *OpenSSL 0.9.8e*. The OpenSSL function sometimes
*sha1_block_host_order () *crashes on Linux. Is there any fix available
for this issue or what are the modifications need to be done? Please
guide me.
_The core back trace is as follows:_
Program terminated
Il 20/07/2011 08:44, Mailing List SVR ha scritto:
Hi,
openssl seems unable to verify the attacched sod.pem, other pem file
works fine there is something strange with the one attached, attached
is also the binary cert from which I extracted the pem, I have the
following:
openssl smime -verif
can any one tell me how to remove the crl revocation check and Expiry check.
i want to validate the signature of the certificate alone no CRL or Expiry
check.
any flag i need to set
--
View this message in context:
http://old.nabble.com/how-to-disable-theCRL-check-and-time-check-in-X509_verify
> Thanks for the response. Are X and Y the public key?
The tuple (X,Y), yep. But not in any kind of standard, portable
form--just in OpenSSL BIGNUM structures.
> I tried this and it seems to work. Error checking omitted for
> easier reading. Comments?
That looks sane to me.
Billy
___
21 matches
Mail list logo