Displaying Serial Number of Cert via s_client ?

2012-01-06 Thread Ken Adler
I use echo GET | openssl s_client -connect www.google.com:443 -state to troubleshoot https handshakes. Is there a way to get it to return the Serial number (or thumbprint) of the server certificate? Currently, I have to cut and past the returned Base64-encoded certificate into another file an

Re: Question on EC_KEY_generate_key

2012-01-06 Thread Matt Caswell (fr...@baggins.org)
The semantics of EC_KEY_generate_key are to generate a new private and public key pair. It does this regardless of whether or not a private or public key was previously set in the EC_KEY structure. It *will* reuse the existing BIGNUM/EC_POINT structures if they were previously set - but it just

Looking for information on creating an openssl engine

2012-01-06 Thread Jim Segrave
Is there any sort of a guide as to what is needed to create an openssl engine? It's not clear to me what interface needs to be provided nor exactly what functionality can be moved to an engine. I have an idea I'd like to experiment with for an approach to parallelising encryption/decryption (usin

Question on EC_KEY_generate_key

2012-01-06 Thread Bobby Beckmann
Hi, I'm implementing a library that requires me to generate a public key given a pre-determined private key. I'm creating an EC_KEY structure, and setting the private key. At first, I thought I could use EC_KEY_generate_key, since it doesn't overwrite an existing private key From just glancin

Re: Having problem using SSL

2012-01-06 Thread Dr. Stephen Henson
On Thu, Jan 05, 2012, Dave Thompson wrote: > > From: owner-openssl-us...@openssl.org On Behalf Of Dr. Stephen Henson > > Sent: Thursday, 05 January, 2012 11:34 > > > On Wed, Jan 04, 2012, vhow...@currenex.com wrote: > > > error:05067068:Diffie-Hellman routines:GENERATE_KEY:key size too small >

function from ssl_locl.h needed

2012-01-06 Thread Sebastian Freundt
Hi, is it safe to call functions declared in ssl_locl.h? I'm talking about SSL_verify_cert_chain() in particular. Is there any policy what should and should not be assumed to exist in the final lib? Cheers Sebastian __ OpenSSL P