Re: OpenSSL linking question; handling 1.0.0 vs 0.9.8

2012-06-20 Thread Christian Hohnstaedt
Hi Jason, some general things about linking: - The symbolic link(s) libcrypto.so pointing to libcrypto.so.0.9.8 are only needed during BUILD time. On a host where no compiling happens the symbolic links are not required. - While linking the application, the linker opens the library libcryp

Re: Win32OpenSSL.html

2012-06-20 Thread Thomas J. Hruska
On 6/20/2012 11:12 AM, John wrote: "John A. Wallace" wrote in message news:<00a701cd4f01$2b569ab0$8203d010$@net>... Hello. In this instance I am using 64-bit Win7 on a laptop in a home network. When I downloaded this version of OpenSSL http://slproweb.com/download/Win64OpenSSL_Light-1_0_1c.exe

simply connection sslv2 to v3 in c

2012-06-20 Thread ml
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dear honorable doctor member and all Fu C when using ssl V2 it is possible to run code in a few lines I quote #define CHK_NULL(x) do { if ((x)==NULL) exit (1); } while(0) #define CHK_ERR(err,s) if ((err)==-1) { perror(s); exit(

RE: Win32OpenSSL.html

2012-06-20 Thread Jeremy Farrell
You'd be best raising this with whomever produced that installer. The OpenSSL project distributes OpenSSL in source form. Some third party built OpenSSL and packaged it into that installer, that's who decided and controls which versions of OS libraries it depends on. Regards,

Re: How to use ocsp in openssl

2012-06-20 Thread jb-openssl
Of cause you shouldn't write your own OCSP code. OCSP is already part of the OpenSSL library and the file apps/ocsp.c shows how to use it. Alexander Konyagin's patch from 12 days ago doesn't seem to have been reviewed or commented by anybody else, so I am not sure if it is because he also posted

Re: Win32OpenSSL.html

2012-06-20 Thread jb-openssl
On 20-06-2012 22:06, Gerald L Collins wrote: John, Your Openssl package should have a manifest file with the same name as the executable with a .manifest extension. I.E. openssl.exe would have openssl.exe.manifest . In that manifest file it tells you what version of libraries it is looki

Re: Win32OpenSSL.html

2012-06-20 Thread Gerald L Collins
John, Your Openssl package should have a manifest file with the same name as the executable with a .manifest extension. I.E. openssl.exe would have openssl.exe.manifest . In that manifest file it tells you what version of libraries it is looking for. For example part of a manifest file one

Re: How to use CAPI engine in OpenSSL 1.0.0a

2012-06-20 Thread Ken Montagna
openssl engine -t -post store_flags:1 -post list_certs capi Ken Montagna wrote: > > > This is good, how do I specify the "Local Computer" store and specify a > certificate I want to use, for example an ssl certificate in apache > Ken >

Re: Successfully building openssl-1.0.1 with Microsoft Visual Studio.

2012-06-20 Thread Ken Montagna
Why are you using VC2005? I use VC10, just do the following: install MS sdk install active perl run configure per openssl INSTALL.W32 or 64 or readme open the sdk cmd window setenv /x86 /debug /2008 nmake ms\ntddl.mak nmake ms\nt.mak note: I use /2008 switch because I use it on a 2008 server, b

non-interactive password for ocsp responder

2012-06-20 Thread Dan B.
How can the ocsp responder be run non-interactively (e.g., run from a script so that the person running the script does not have to type in the OCSP signing key password)? (Yes, I know that that generally isn't secure, but in this case it doesn't need to be. (It's for an example/test setup scrip

Problems with OpenSSL and GoDaddy Cert

2012-06-20 Thread Fishboy
I used OpenSSL on my local computer to create a CSR for an IIS6 server which was sent to GoDaddy for certificate creation. I'm working with a third party, so I don't have access to the GoDaddy account, but they sent me the .crt and .p7b files. I installed the p7b file using mmc but I don't know wh

Re: Win32OpenSSL.html

2012-06-20 Thread John
"John A. Wallace" wrote in message news:<00a701cd4f01$2b569ab0$8203d010$@net>... Hello. In this instance I am using 64-bit Win7 on a laptop in a home network. When I downloaded this version of OpenSSL http://slproweb.com/download/Win64OpenSSL_Light-1_0_1c.exe, during installation it alerted m

OpenSSL linking question; handling 1.0.0 vs 0.9.8

2012-06-20 Thread Jason Schultz
I'm building and running an application that uses OpenSSL on SUSE Linux. I don't know a lot about linking in general, just very basic stuff, so my question might be better posed to a Linux forum, but it might be specific to OpenSSL. Let me describe the scenario. I have built installed Op

Win32OpenSSL.html

2012-06-20 Thread John A. Wallace
Hello. In this instance I am using 64-bit Win7 on a laptop in a home network. When I downloaded this version of OpenSSL http://slproweb.com/download/Win64OpenSSL_Light-1_0_1c.exe, during installation it alerted me about not finding but needing the Visual C++ 2008 Redistributable. I was a bit

Re: How to use ocsp in openssl

2012-06-20 Thread JT Rosin
hi, Jakob! Though it may work, i personally don't think that it's a good idea to implement ocsp code myself! Not only because I'm a lazy guy, but mainly for practical reasons :-) In google I found that some guy had already made a patch that brings some kind of ocsp client functionality to openssl

Re: Issue when verifying an expired certificate

2012-06-20 Thread Francis GASCHET
For the ones who it can help : In 0.9.8, the the various fields in the 'ctx' structure passed to the call-back function were documented with relevant values. I used to access directly to them. With 1.0 this became false. As a consequence, the use of the "access primitives"to these values, lik

Re: How to use ocsp in openssl

2012-06-20 Thread Jakob Bohm
Look in the openssl source code in the "apps" directory. There you will find the source code for each of the openssl command line subcommands (including "openssl ocsp"). Use this as inspiration for how to do the ocsp directly in your code. For most of the openssl command line subcommands, the c

Core dump in RSA_check_key

2012-06-20 Thread Tayade, Nilesh
Hi, I am seeing a core dump in RSA_check_key() function. The backtrace is as below. I am unable to understand what is causing the issue. The core dump is intermittent (not always reproduced). Could someone please provide any pointers if I am missing any check? -- Thanks, Nilesh P.S. The code g

Re: How to use ocsp in openssl

2012-06-20 Thread JT Rosin
Any help on this?? On Mon, 2012-06-18 at 15:32 +0400, JT Rosin wrote: > Hello to everybody!! > > I'm writing a client/server app with communication over SSL. Every setup > can be a server or a client so I think I could benefit from using ocsp > for validation purposes! > > I'm very new to openss

How can I use OpenSSL to store symmetric encryption keys in PKCS#12 file?

2012-06-20 Thread MauMau
Hello, Please let me ask you for information and ideas about how to use OpenSSL effectively to implement encryption for data storage. I'm designing an encryption feature for a certain kind of data management system. I want to implement the following features, which I think are common to dis