Re: openssl function equivalent to "openssl x509 -in test.crt -text -noout"

2013-10-21 Thread anu engineer
X509 *pCert = {Your Cert Object} BUF_MEM *pBuffMem = NULL; char * pCertString = NULL; pBioCert = BIO_new(BIO_s_mem()); if ( pBioCert == NULL) { dwError = MEMORY_ERR; BAIL_ON_ERROR(dwError); } dwError = X509_print(pBioCert, pCert); BIO_get_mem_ptr(p

A couple usability questions:

2013-10-21 Thread Ted Byers
I have been working through the tutorial at http://pki-tutorial.readthedocs.org/en/latest/ There are a number of things that aren't clear. 1) Am I right in assuming that the various commands in that tutorial can be performed as an ordinary user in a working directory in that user's home directory

Re: How to retrieve the certificate from remote SMTPS/POP3S mail server and store them locally?

2013-10-21 Thread Michael Zintakis
Should I be worried? If this is indeed a genuine google certificate, why is it that there are (at least) 2 different certificates for the same domain (smtp.google.com)? Only if you believe that smtp.gmail.com and smtp.google.com are the same. Yeah, sorry, I meant "smtp.googlemail.com".

Re: Using FIPS 1.2 for new private certificate

2013-10-21 Thread Steve Marquess
On 10/20/2013 08:29 AM, Oz, Tal (Tal) wrote: > Hi, > > I can see there is an important note that FIPS 1.2 is no longer valid in its > current form past 2010 (http://www.openssl.org/docs/fips/fipsnotes.html) > There is also a reference to SP 800-131. > >>From reading it, it looks like it should b

RE: openssl function equivalent to "openssl x509 -in test.crt -text -noout"

2013-10-21 Thread Salz, Rich
Ø What is openssl function equivalent to "openssl x509 -in test.crt -text -noout" Look in apps/x509.c -- Principal Security Engineer Akamai Technology Cambridge, MA

RE: Disabling Secure Renegotiation in 0.9.8

2013-10-21 Thread Simner, John
Thanks Dave for the information. I can confirm the customer wants renegotiation turned off altogether. No secure renegotiation and no unsafe renegotiation either. >If what they actually want is to drop the secure renegotiation functionality >and go back to the old world >with traditional unsafe r

openssl function equivalent to "openssl x509 -in test.crt -text -noout"

2013-10-21 Thread Sanjay Kumar (sanjaku5)
Hi, I am looking for function to display the certificate in text format. What is openssl function equivalent to "openssl x509 -in test.crt -text -noout" Thanks, Sanjay

Re: smime sign and id-aa-signingCertificateV2

2013-10-21 Thread Ottavio Campana
Hello Umberto! I wrote a patch to openssl, you can find it here http://marc.info/?l=openssl-dev&m=138000831409222&w=2 unfortunately nobody ever gave me an answer, neither positive nor negative, and I pretty unhappy with that. I'll probably release a software on my own based on that, even though

Do SSL_shutdown() and SSL_get_error() mix?

2013-10-21 Thread Dave Mitchell
The man page for SSL_get_error() lists the SSL_* functions it can be used with, and it doesn't mention SSL_shutdown(). On the other hand, the man page for SSL_shutdown() says that for non-blocking I/O, you should call SSL_get_error(). So which is right? I ask, because in the following code:

Re: How to retrieve the certificate from remote SMTPS/POP3S mail server and store them locally?

2013-10-21 Thread Viktor Dukhovni
On Sun, Oct 20, 2013 at 02:00:27PM +0100, Michael Zintakis wrote: > Viktor Dukhovni wrote: You left out the first three lines of the command which starts with: $ (sleep 2; printf "QUIT\r\n") | 2>/dev/null \ openssl s_client -showcerts -starttls smtp -connect smtp.gmail.com:587 |