Is dhparam only needed by server when using DHE-related cipher suites

2013-08-26 Thread Yijun Wu
Hi there, It seems that when DHE-related cipher suites are used connection can not be established if the dhparam is not set on the server side. However, when dhparam is set on the server side the connection can always be established regardless of whether it is set on the client side. Of course

Re: Using X509_verify with various chains.

2013-08-26 Thread Viktor Dukhovni
On Mon, Aug 26, 2013 at 12:29:21PM -0400, Salz, Rich wrote: > Suppose I have a three-length chain: rootCA, interCA, userCert. > If I call X509_verify with depth 1 and only interCA in the trusted > list, will that pass? Yes, with the as yet unreleased 1.0.2 development branch. No with 1.0.1e or e

Using X509_verify with various chains.

2013-08-26 Thread Salz, Rich
Suppose I have a three-length chain: rootCA, interCA, userCert. If I call X509_verify with depth 1 and only interCA in the trusted list, will that pass? Suppose it's a four-length chain: rootCA, parentCA, childCA, userCert. Again, I assume depth=1 and childCA in the trust list, it will oass.

Re: build openssl for android

2013-08-26 Thread tera
Dear Indu, I have the exact same problem/error of the libz. How did you solve it? Can anybody share your method? Thanks a ton, -Tera -- View this message in context: http://openssl.6102.n7.nabble.com/build-openssl-for-android-tp26315p46332.html Sent from the OpenSSL - User mailing list archi