Re: Fetch reference count for SSL_CTX?

2014-03-08 Thread Viktor Dukhovni
On Fri, Mar 07, 2014 at 06:16:33PM -0500, Jeffrey Walton wrote: > I'm have a cache of SSL_CTX's. When a SSL_CTX reference count drops to > 1, I'd like to remove it from the cache. (1 means the cache holds the > only copy, so I should be able to remove it and call SSL_CTX_free). > > Is it possible

Re: How to add intermediate certificate chain in SSL_CTX using OpenSSL API

2014-03-08 Thread Viktor Dukhovni
On Sat, Mar 08, 2014 at 08:26:54PM +0530, Harshal Talele wrote: > In my case cert.pem file contains private key too. > I wan to understand if I have to be use intermediate certificates in SSL > handshake is there any specific way in which we have to populate SSL_CTX > structure? > > I have tried

Re: Help: DecryptFinal error

2014-03-08 Thread Larry Bugbee
On Mar 8, 2014, at 11:23 AM, Larry Bugbee wrote: > On Mar 7, 2014, at 11:42 AM, "Li, David" wrote: > >> Hi, >> >> I am new to openssl C APIs. So I wrote a simple test to encrypt and decrypt >> a 15 byte ASCII string using AES128. The encryption seems OK and the >> encrypted length is 16. B

Help: DecryptFinal error

2014-03-08 Thread Li, David
Hi, I am new to openssl C APIs. So I wrote a simple test to encrypt and decrypt a 15 byte ASCII string using AES128. The encryption seems OK and the encrypted length is 16. But the decryption always failed at EVP_DecryptFinal_ex(). The error code is 0 and means padding error. I have been search

Re: Error Using FIPS compliant OpenSSL Library Files in VC++ in Visual Studio 2005

2014-03-08 Thread scott_thomas007
Bonjour, There are many posts that are still unanswered on this forum like some posts of Rajesh Kumar http://openssl.6102.n7.nabble.com/Adding-Hash-to-Application-Static-Build-OpenSSL-With-FIPS-td28035.html#a28036 http://openssl.6102.n7.nabble.com/FIPS-Open-SSL-Build-using-VC-on-Windows-td27990

Re: How to add intermediate certificate chain in SSL_CTX using OpenSSL API

2014-03-08 Thread Harshal Talele
Thank you for your reply Meer. In my case cert.pem file contains private key too. I wan to understand if I have to be use intermediate certificates in SSL handshake is there any specific way in which we have to populate SSL_CTX structure? I have tried using SSL_CTX_use_certificate_chain_file() AP