Re: Best way to append to trusted CA bundle (RHEL)

2013-01-02 Thread Ray Van Dolson
On Thu, Jan 03, 2013 at 06:09:28AM +0100, ml wrote: > this issue and tango fix it > are welcome > > please provide is issue Fantastic? > > Le 2013-01-01 16:32, Ray Van Dolson a écrit : > >I'm trying to extend the list of certifictaes (the default CA bundle) > >OpenSSL and OpenSSL-aware apps tru

Re: Best way to append to trusted CA bundle (RHEL)

2013-01-02 Thread ml
this issue and tango fix it are welcome please provide is issue Le 2013-01-01 16:32, Ray Van Dolson a écrit : I'm trying to extend the list of certifictaes (the default CA bundle) OpenSSL and OpenSSL-aware apps trust to include out Enterprise root cert. This is on a RHEL 5.x machine (0.9.8e p

RE: BasicConstraints - Re: problem with self-signed crt in Apache

2013-01-02 Thread Dave Thompson
> From: Robert Moskowitz [mailto:r...@htt-consult.com] > Sent: Wednesday, 02 January, 2013 12:12 > As I indicated, part of my problem is the default ssl.conf for apache > points to localhost.crt (built at firstboot) and I changed my hostname > which does not change the localhost cert. But the

RE: EVP_get_digestbyname and 'standard' signature algorithm names

2013-01-02 Thread Salz, Rich
There are a few places these things are specified -- in the names given to the OID arcs, which means looking in SSL, TLS, CMS, S/MIME, etc. OpenSSL has a pretty complete list of those. Another source is in the URI's for things like XMLDSig and XMLEncryption. Your approach of having an 'alias t

EVP_get_digestbyname and 'standard' signature algorithm names

2013-01-02 Thread Chris Dodd
I'm trying to develop an application with OpenSSL that needs to verify a variety of digital signatures from different places. Currently I use EVP_get_digestbyname to get an EVP_MD handle identifying the algorithm used, and this works well for things that originally came from OpenSSL, but less wel

BasicConstraints - Re: problem with self-signed crt in Apache

2013-01-02 Thread Robert Moskowitz
As I indicated, part of my problem is the default ssl.conf for apache points to localhost.crt (built at firstboot) and I changed my hostname which does not change the localhost cert. But the BasicConstraints problem is still needed to work out. On 12/31/2012 07:18 PM, Dave Thompson wrote: Fr

Re: Conditionally Patching output of Makefile from Configure?

2013-01-02 Thread Ben Laurie
On Wed, Jan 2, 2013 at 8:34 AM, Jeffrey Walton wrote: > On Mon, Dec 31, 2012 at 7:00 AM, Ben Laurie wrote: >> On Mon, Dec 31, 2012 at 11:39 AM, Jeffrey Walton wrote: >>> On Sun, Dec 30, 2012 at 3:20 PM, wrote: On 30-12-2012 21:01, Jeffrey Walton wrote: > > >>> >>> Configure s

Re: Conditionally Patching output of Makefile from Configure?

2013-01-02 Thread Jeffrey Walton
On Wed, Jan 2, 2013 at 5:07 AM, Jakob Bohm wrote: > On 1/2/2013 9:34 AM, Jeffrey Walton wrote: >> >> On Mon, Dec 31, 2012 at 7:00 AM, Ben Laurie wrote: >>> >>> On Mon, Dec 31, 2012 at 11:39 AM, Jeffrey Walton >>> wrote: On Sun, Dec 30, 2012 at 3:20 PM, wrote: > > On 30-12-201

Re: Conditionally Patching output of Makefile from Configure?

2013-01-02 Thread Jakob Bohm
On 1/2/2013 9:34 AM, Jeffrey Walton wrote: On Mon, Dec 31, 2012 at 7:00 AM, Ben Laurie wrote: On Mon, Dec 31, 2012 at 11:39 AM, Jeffrey Walton wrote: On Sun, Dec 30, 2012 at 3:20 PM, wrote: On 30-12-2012 21:01, Jeffrey Walton wrote: Configure should test `makeddepend`. If 'makedep

Re: Conditionally Patching output of Makefile from Configure?

2013-01-02 Thread Jeffrey Walton
On Mon, Dec 31, 2012 at 7:00 AM, Ben Laurie wrote: > On Mon, Dec 31, 2012 at 11:39 AM, Jeffrey Walton wrote: >> On Sun, Dec 30, 2012 at 3:20 PM, wrote: >>> On 30-12-2012 21:01, Jeffrey Walton wrote: >> >> Configure should test `makeddepend`. If 'makedepend' succeeds, do >> nothin

OpenSSL 1.0.1c and configuring without documentation?

2013-01-02 Thread Jeffrey Walton
Hi All, Is it possible to configure a build that does not include documentations? I'm working on Mac OSX, and I have three targets under /usr/local/ssl/ (iphoneos, iphonesimulator, and macosx). There's no reason to install the documentation over top itself multiple times. Jeff __