RE: CA for IIS-issued self-signed certificate?

2012-08-13 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Charles Mills > Sent: Saturday, 11 August, 2012 08:57 > I wondered if perhaps there were path or filename > specification problems > (need to escape backslashes? a problem with embedded spaces?) but I > eliminated all of those variables -- put

RE: s_server gethostbyname failure

2012-08-13 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Charles Mills > Sent: Monday, 13 August, 2012 11:32 > Found some things on the Web that led me to believe some > programs choke when > they get IPv6 addresses back from gethostbyname(), so I tried > disabling IPv6 > on Windows -- but no improv

RE: s_server gethostbyname failure

2012-08-13 Thread Charles Mills
Found some things on the Web that led me to believe some programs choke when they get IPv6 addresses back from gethostbyname(), so I tried disabling IPv6 on Windows -- but no improvement. I have tried coding a server program more or less following the example in the O'Reilly OpenSSL book and the f

s_server gethostbyname failure

2012-08-13 Thread CharlesTSR
I have exactly the same problem as http://old.nabble.com/s_server-and-gethostbyname-failure-error-td14675962.html http://old.nabble.com/s_server-and-gethostbyname-failure-error-td14675962.html . I have searched and don't find any replies. I run the following command: openssl s_server -accept 65

Re: Missing entries in index.txt database - Generating CRL

2012-08-13 Thread int0x80
Hi, [...] > > After that I generated a CRL (I own the CA) which then contained the > > certificate with the serial 0x06. > > > > My question now is, would that be a proper workaround or is there a better > > solution? Since the CRL > > only contains the serial numbers of the certificates, this s

X509_STORE_add_cert() wants modifiable X509*

2012-08-13 Thread Curt Sampson
The signature for X509_STORE_add_cert is: int X509_STORE_add_cert(X509_STORE*, X509*) I notice that the second argument is X509* rather than X509 const*; this makes life a bit difficult for me in certain places because I have only an X509 const* available. It seems, from looking at the sourc