Re: certificate validation issues with openssl 1.0.0 and expired certificates in cafile

2012-09-19 Thread Ashok C
Gentle reminder .. Just want to know if this is a bug or intended behaviour. -- Ashok On Fri, Sep 14, 2012 at 3:12 PM, Ashok C wrote: > Hi Etkal, > > >>s_client app or the OpenSSL cert store functionality that changed this. > The problem is with the openSSL store itself, as I had tested this wi

RE: Memory issues with ssl handshake

2012-09-19 Thread Charles Mills
Try plugging your code to exit after the first OpenSSL function, then after the second, and so forth, and see if you can get down to the simplest case. Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Thomas Sent: Monda

RE: Digital certificate with more than 1 year validity

2012-09-19 Thread Charles Mills
Looking at my bat files, yes, I say –days 3650 on an openssl x509 –req Charles From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Charles Mills Sent: Tuesday, September 18, 2012 8:08 PM To: openssl-users@openssl.org; openssl-users@openssl.org Subject:

Re: "openssl s_client": "SSL handshake has read 0 bytes and written" and "no peer certificate available"

2012-09-19 Thread Jochen Hayek
> On Wed, 19 Sep 2012 12:39:33 +0200, "Dr. Stephen Henson" <...> said: > This is a problem with the server. OpenSSL 1.0.1 is the first release to > support TLS version 1.2 and some servers "hang" when connecting. The option > -no_tls1_2 or -tls1 should allow you to connect again. > This is di

Re: "openssl s_client": "SSL handshake has read 0 bytes and written" and "no peer certificate available"

2012-09-19 Thread Dr. Stephen Henson
On Wed, Sep 19, 2012, Jochen Hayek wrote: > > Until "recently" this worked for me > (and it still does on a different platform with *older* versions of > "everything"), > but now it breaks: > > $ curl --verbose --insecure 'https://banking.postbank.de/rai/login' > * About t

"openssl s_client": "SSL handshake has read 0 bytes and written" and "no peer certificate available"

2012-09-19 Thread Jochen Hayek
Hi, there! My problem started recently with a migration from openSUSE-12.1 to openSUSE-12.2. openSUSE-12.2 comes with curl-7.25.0 resp. libcurl/7.25.0, and they in turn use OpenSSL/1.0.1c Until "recently" this worked for me (and it still does on a different platform with *older