Re: X509* and Extract Public Key?

2013-02-11 Thread Jeffrey Walton
On Mon, Feb 11, 2013 at 5:15 PM, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Behalf Of Viktor Dukhovni >> Sent: Monday, 11 February, 2013 00:41 > >> On Mon, Feb 11, 2013 at 12:01:49AM -0500, Jeffrey Walton wrote: >> >> > >> I'm trying to extract a public key (subjectPublicKeyI

Re: intermediate state defined in SHA256_CTX

2013-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2013, Naveen Nathan wrote: > > When I specify intermediate values I only set the h[8], Nl, Nh values. > The num is set to 0, and md_len to SHA256_DIGEST_LENGTH. It is unclear > to me what the Nl and Nh values represent. Without them, I was unable > to compute the correct digests f

Re: BIO (memory mapped file)

2013-02-11 Thread Jeffrey Walton
On Mon, Feb 11, 2013 at 5:15 PM, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Behalf Of Jeffrey Walton >> Sent: Monday, 11 February, 2013 01:12 > >> I'm trying to memory map a file. Does OpenSSL BIO's allow this? >> >> I seem to be failing on BIO_read_filename with a `ret` of 0

Re: Assistance with zlib-dynamic build

2013-02-11 Thread Ryan Watkins
Thanks for the reply Steve, I had also wondered the same thing. My colleague who did the builds with previous versions of OpenSSL (like 0.9.8m) is no longer with the company so I am unable to ask him any questions. I did however notice the Makefile we have for our previous build of 0.9.8m sho

RE: BIO (memory mapped file)

2013-02-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Jeffrey Walton > Sent: Monday, 11 February, 2013 01:12 > I'm trying to memory map a file. Does OpenSSL BIO's allow this? > > I seem to be failing on BIO_read_filename with a `ret` of 0. The docs > state I should expect `ret` of 1. When I look f

RE: X509* and Extract Public Key?

2013-02-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Viktor Dukhovni > Sent: Monday, 11 February, 2013 00:41 > On Mon, Feb 11, 2013 at 12:01:49AM -0500, Jeffrey Walton wrote: > > > >> I'm trying to extract a public key (subjectPublicKeyInfo) > > >> form an X509 certificate. > > > > > > from apps

RE: Question regarding copy_extensions option in config file

2013-02-11 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Sreekanth Sukumaran >Sent: Monday, 11 February, 2013 07:04 >For usage on my server application, >1. I tried to create a CA certificate using the command >openssl req -new -x509 -days 730 -extensions v3_ca >-keyout cacert.key -out cacert.pem

Re: Assistance with zlib-dynamic build

2013-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2013, Ryan Watkins wrote: > Hello, > > I'm currently building OpenSSL 1.0.0c in an AIX 6.1 runtime > environment (Inside PASE on an IBM i system) and am running into > problems when trying to run the suite of tests that come with > OpenSSL. Here are the steps I am taking to do fo

Assistance with zlib-dynamic build

2013-02-11 Thread Ryan Watkins
Hello, I'm currently building OpenSSL 1.0.0c in an AIX 6.1 runtime environment (Inside PASE on an IBM i system) and am running into problems when trying to run the suite of tests that come with OpenSSL. Here are the steps I am taking to do for my build: Verify the following symlinks exist a

I need a little guidance on openssl.cnf contents

2013-02-11 Thread Ted Byers
I am afraid I have not found adequate documentation that I can use to guide me in editing the contents of openssl.cnf. The comments within the file do not tell me enough about good values to use for the different options that are available. Here are my objectives: 1) A single certificate authori

Re: release announcement issues

2013-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2013, Andrew Oakley wrote: > On 11/02/13 16:07, OpenSSL wrote: > > > >OpenSSL version 1.0.1e released > >=== > > > >OpenSSL - The Open Source toolkit for SSL/TLS > >http://www.openssl.org/ > > > >The OpenSSL project team is pleased

Re: release announcement issues

2013-02-11 Thread Andrew Oakley
On 11/02/13 16:07, OpenSSL wrote: > >OpenSSL version 1.0.1e released >=== > >OpenSSL - The Open Source toolkit for SSL/TLS >http://www.openssl.org/ > >The OpenSSL project team is pleased to announce the release of >version 1.0.1e of our open so

RE: OpenSSL version 1.0.1e released

2013-02-11 Thread Eisenacher, Patrick
> -Original Message- > From: OpenSSL > >The OpenSSL project team is pleased to announce the release of >version 1.0.1e of our open source toolkit for SSL/TLS. This new >OpenSSL version is a new feature release. For a complete >list of changes, please see > >http://

Re: NULL ptr deref when calling SSL_get_certificate with 1.0.0k

2013-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2013, Bogdan Harjoc wrote: > I updated to openssl 1.0.1k from 1.0.0d and I get a NULL pointer > dereference when I call SSL_get_certificate on a valid SSL object. > > Backtrace: > > ssl_set_cert_masks:1845 > ssl_get_server_send_pkey:2117 > ssl_get_server_send_cert:2175 > SSL_get_

OpenSSL version 1.0.1e released

2013-02-11 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1e released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1e of our open source

NULL ptr deref when calling SSL_get_certificate with 1.0.0k

2013-02-11 Thread Bogdan Harjoc
I updated to openssl 1.0.1k from 1.0.0d and I get a NULL pointer dereference when I call SSL_get_certificate on a valid SSL object. Backtrace: ssl_set_cert_masks:1845 ssl_get_server_send_pkey:2117 ssl_get_server_send_cert:2175 SSL_get_certificate:2605 ssl_get_server_send_pkey calls ssl_set_cert_

Re: [openssl-users] Open ssl 1.0.1c vs 0.9.8g

2013-02-11 Thread Erwann Abalea
Because this server is configured to send a self-signed certificate (VeriSign Class 3 PCA). This is useless, and openssl warns you. -- Erwann ABALEA Le 11/02/2013 08:47, Prasanth Madhavan a écrit : Hello Sir, Why does |wget https://www.asb.co.nz| give |Self-signed certificate encountered| er

Open ssl 1.0.1c vs 0.9.8g

2013-02-11 Thread Prasanth Madhavan
Hello Sir, Why does wget https://www.asb.co.nz give Self-signed certificate encountered error in a system running openssl 1.0.1c and goes fine in a system running 0.9.8g? Does It have anything to do with intermediate certificate? If so how to install the intermediate certificates? Else how to fix

intermediate state defined in SHA256_CTX

2013-02-11 Thread Naveen Nathan
Hi, In crypto/sha/sha.h the SHA256_CTX struct is defined as: typedef struct SHA256state_st { SHA_LONG h[8]; SHA_LONG Nl,Nh; SHA_LONG data[SHA_LBLOCK]; unsigned int num,md_len; } SHA256_CTX; I am trying to start a SHA256 computation defined by the intermediate stat

Re: X509* and Extract Public Key?

2013-02-11 Thread Jeffrey Walton
On Mon, Feb 11, 2013 at 12:41 AM, Viktor Dukhovni wrote: > On Mon, Feb 11, 2013 at 12:01:49AM -0500, Jeffrey Walton wrote: > >> >> I'm trying to extract a public key (subjectPublicKeyInfo) form an X509 >> >> certificate. >> > >> > from apps/x509.c in the openssl source: >> > >> > EVP_PKEY