Re: Failing to verify the certificate of one specific site

2011-10-23 Thread Jakob Bohm
On 10/22/2011 4:52 AM, Lucas Clemente Vella wrote: 2011/10/21 Jakob Bohm: According to the Digicert CPS , that DigiCert root is cross-certified by the Entrust root. Some trusted certificate bundles include only the Entrust root CA and will n

Support for Indirect CRL

2011-10-23 Thread Sligar, Benjamin
Hello, We have an application using openssl that acts as a server and receives an SSL connection. Based on the configuration, the server requests a client certificate and validates it by check to see that it is signed by a trusted CA + others checks (CN...) but it was not validating against

Re: openssl s_client -dtls1 and ECC key

2011-10-23 Thread Erwin Himawan
I would like to follow up on the path that Robin provided to fix bug associated with DTLS issue when using ECC keypair. In summary, I was able to apply the patch into openssl-1.0.0e. I verified that the patch fixed the issued associated with bad encryption error. I verified the dtls1 connection

Cannot decrypt file - maybe wrong key?

2011-10-23 Thread James Coldwell
Hello List, I'm trying to decrypt a backup file, using openssl enc -d -aes-256-cbc -in etc.bz2.aes256 -out etc.tar.bz2 -pass file:autobackup.aeskey It returns bad decrypt 34560:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:/usr/src/secure/lib/libc