Re: smime verify bug???

2011-07-20 Thread Peter Sylvester
Many places including the DN comparision algorithm description of RFC3280. Sorry can you point me to the exact paragraph, I read 4.1.2.4 and 5.1.2.3 but the comparision seems to happen on the contents of the issuer field and not the order, thanks Nicola near the end of page 95 of rfc 52

Re: smime verify bug???

2011-07-20 Thread Mailing List SVR
Il 20/07/2011 19:09, Michael Ströder ha scritto: Mailing List SVR wrote: Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto: On Wed, Jul 20, 2011, Mailing List SVR wrote: Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem fi

Re: smime verify bug???

2011-07-20 Thread Michael Ströder
Mailing List SVR wrote: Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto: On Wed, Jul 20, 2011, Mailing List SVR wrote: Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the

Re: smime verify bug???

2011-07-20 Thread Mailing List SVR
Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto: On Wed, Jul 20, 2011, Mailing List SVR wrote: Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the one attached, attached is

Re: smime verify bug???

2011-07-20 Thread Dr. Stephen Henson
On Wed, Jul 20, 2011, Mailing List SVR wrote: > Il 20/07/2011 08:44, Mailing List SVR ha scritto: > >Hi, > > > >openssl seems unable to verify the attacched sod.pem, other pem > >file works fine there is something strange with the one attached, > >attached is also the binary cert from which I extr

Re: X509_Verify API always returns -1 . how to over come this

2011-07-20 Thread Dr. Stephen Henson
On Wed, Jul 20, 2011, brajan wrote: > > hi can any one tell me how to over that error i am validating the certificate > using > X509_verify_cert() > the out put of this is Signature verification error.. i go through the code > and found > ASN1_item_verify function is called where can i find thi

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
What a great amount of useful information. Thanks. -Original Message- From: Jeffrey Walton To: openssl-users Sent: Wed, Jul 20, 2011 9:57 am Subject: Re: Trying to Link Statically to Libcrypto On Wed, Jul 20, 2011 at 8:48 AM, wrote: It didn't fix it. In the end, I cannot link

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
He just isn't a Linux guy, and I didn't know enough to advise him. -Original Message- From: Andreas Mueller To: brandonshw Sent: Wed, Jul 20, 2011 9:32 am Subject: Re: Fwd: Trying to Link Statically to Libcrypto Brandon, Quoting brandon...@aol.com: Although my current orders are t

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
Wow, you guys are good! Thanks. -Original Message- From: Michael S. Zick To: openssl-users Sent: Wed, Jul 20, 2011 9:27 am Subject: Re: Fwd: Trying to Link Statically to Libcrypto On Wed July 20 2011, brandon...@aol.com wrote: It didn't fix it. In the end, I cannot link static

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread Jeffrey Walton
On Wed, Jul 20, 2011 at 8:48 AM, wrote: > It didn't fix it.  In the end, I cannot link statically without libsasl2.a, > which I am having difficulty obtaining, but which must be somehow > obtainable. http://asg.web.cmu.edu/sasl/sasl-library.html > In the meantime, I am including libraries for wh

Re: Fwd: Trying to Link Statically to Libcrypto

2011-07-20 Thread Michael S. Zick
On Wed July 20 2011, brandon...@aol.com wrote: > > It didn't fix it. In the end, I cannot link statically without libsasl2.a, > which I am having difficulty obtaining, but which must be somehow obtainable. > In the meantime, I am including libraries for which I have a static version > in my o

Fwd: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
It didn't fix it. In the end, I cannot link statically without libsasl2.a, which I am having difficulty obtaining, but which must be somehow obtainable. In the meantime, I am including libraries for which I have a static version in my objective files list, rather than as linker flags. I am

openssl 0.9.8g bug..?

2011-07-20 Thread brajan
hi i am using openssl 0.9.8g version .. ASN1_item_verify () in this function Void* asn is used as ASN1_VALUE* asn. my complier show error for that.. whether it is the reason for X509_verify(cert,cakey) function fails .? -- View this message in context: http://old.nabble.com/openssl-0.9.8g-bug..

X509_Verify API always returns -1 . how to over come this

2011-07-20 Thread brajan
hi can any one tell me how to over that error i am validating the certificate using X509_verify_cert() the out put of this is Signature verification error.. i go through the code and found ASN1_item_verify function is called where can i find this function c code and how to over come the Verifica

Re: Using PEM_read_X509 openSSL Api-Sample Certificate

2011-07-20 Thread brajan
Mayur Premi wrote: > > Hi , > I am using X509* ** pX = * PEM_read_X509*(FILE *fp, X509 **x, > pem_password_cb *cb, void *u); > > to get a X509 certificate structure from PEM format File. > > My File(fp) looks like below: > > -BEGIN CERTIFICATE- > MIIEQzCCAyugAwIBAgIPAMdMAQEALqZRDlT

Re: Please help: OpenSSL + OpenVPN Elliptic Curves (SHA512, ECDSA, ECDH, Linux, Debian)

2011-07-20 Thread Gaglia
On 07/16/2011 07:13 PM, y...@inbox.lv wrote: > ... So everybody here seems to agree that steps 1)...7) I listed in the first post are correct, and that the problem in EC management lies in OpenVPN, right? __ OpenSSL Project

Using PEM_read_X509 openSSL Api

2011-07-20 Thread Mayur Premi
Hi , I am using X509* ** pX = * PEM_read_X509*(FILE *fp, X509 **x, pem_password_cb *cb, void *u); to get a X509 certificate structure from PEM format File. My File(fp) looks like below: -BEGIN CERTIFICATE- MIIEQzCCAyugAwIBAgIPAMdMAQEALqZRDlTBXHdHMA0GCSqGSIb3DQEBCwUAMGAxCzAJBgNVBAYTAkd

Bug in OpenSSL 0.9.8e

2011-07-20 Thread Vinay Kumar
Hi All, I am using OpenSSL *OpenSSL 0.9.8e*. The OpenSSL function sometimes *sha1_block_host_order () *crashes on Linux. Is there any fix available for this issue or what are the modifications need to be done? Please guide me. _The core back trace is as follows:_ Program terminated

Re: smime verify bug???

2011-07-20 Thread Mailing List SVR
Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the one attached, attached is also the binary cert from which I extracted the pem, I have the following: openssl smime -verif

how to disable theCRL check and time check in X509_verify_cert() api..?

2011-07-20 Thread brajan
can any one tell me how to remove the crl revocation check and Expiry check. i want to validate the signature of the certificate alone no CRL or Expiry check. any flag i need to set -- View this message in context: http://old.nabble.com/how-to-disable-theCRL-check-and-time-check-in-X509_verify

Re: ECDSA public key token to/from binary

2011-07-20 Thread Billy Brumley
> Thanks for the response.  Are X and Y the public key? The tuple (X,Y), yep. But not in any kind of standard, portable form--just in OpenSSL BIGNUM structures. > I tried this and it seems to work.  Error checking omitted for > easier reading.  Comments? That looks sane to me. Billy ___