Re: How to add intermediate certificate chain in SSL_CTX using OpenSSL API

2014-03-12 Thread Viktor Dukhovni
On Thu, Mar 13, 2014 at 12:07:09PM +0530, Harshal Talele wrote: > I have now added server cert, private key and intermediate certificates > in one file and reading them using SSL_CTX_use_certificate_chain_file() > API. > > But one thing I want to understand. My server certificate is self-signed.

Re: How to add intermediate certificate chain in SSL_CTX using OpenSSL API

2014-03-12 Thread Harshal Talele
Thanks Victor. I believe this was the problem. I have now added server cert, private key and intermediate certificates in one file and reading them using SSL_CTX_use_certificate_chain_file() API. But one thing I want to understand. My server certificate is self-signed. And intermediate certificat

Re: Regarding openssl-devel

2014-03-12 Thread Wim Lewis
On 12 Mar 2014, at 4:44 AM, banupriya wrote: > Hi All, > > I would like to know how different is openssl-devel from openssl098 version. > > Thanks in Advance, > Banupriya K There is a detailed changelog here: http://www.openssl.org/news/changelog.html In terms of API, they are not much d

Anyone implementing RFC 7030: Enrollment over Secure Transport (EST)?

2014-03-12 Thread David von Oheimb
Hi, is anyone out there developing or planning an implementation of EST (Enrollment over Secure Transport) in C/C++, making use of OpenSSL? Best, David __ OpenSSL Project http://www.openss

Re: Questions on fips object module for openssl

2014-03-12 Thread Steve Marquess
On 03/12/2014 01:19 AM, T, Satyanarayana (GE Healthcare) wrote: > Hi, > > First thanks for the reply... > > Just some clarification needed, The difference between two processors I see is > > TI (AM37xx)Freescale(imx6) > 1)ARMv7-A cortex A8Armv7-A cortex A9

Regarding openssl-devel

2014-03-12 Thread banupriya
Hi All, I would like to know how different is openssl-devel from openssl098 version. Thanks in Advance, Banupriya K On 05-03-2014 12:23, scott_thomas007 wrote: Bonjour Dr Stephen N. Henson, Your reply was very helpful to me. I got FIPS compliant OpenSSL exe lib and dll files. Thanks :) I am

X509_STORE_add_crl with updated CRL

2014-03-12 Thread Fredrik Jansson
I have two CRL, one empty and one with a revoked certificate. I create a X509_STORE and use X509_STORE_add_crl to add the empty CRL. When verifying the certificate using the store, it verifies alright. Then I add the CRL with the revoked cert to the same store, again using X509_STORE_add_crl. W

Re: How to build shared library of openssl FIPS 2.0

2014-03-12 Thread Jeffrey Walton
On Tue, Mar 11, 2014 at 6:24 AM, ajay.sonawane wrote: > I have downloaded FIPs 2.0 source code and openssl 1.0.1f source code. I m > trying to build FIPS on Windows/MAC but not sure if I could build shared > library of FIPS. If shared library is possible, what is the command line to > build it ? T

Re: cross compiling OpenSSL with fips 2.0

2014-03-12 Thread vicki2014
Thanks, Steve We trace the creation of fingerprint from incore script and found that the addresses of FIPS_text_start(), FIPS_text_end() are different from the ones on the target device. Compared the content, we found that incore calculates from an odd address while the target device calculate fro

How to build shared library of openssl FIPS 2.0

2014-03-12 Thread ajay.sonawane
I have downloaded FIPs 2.0 source code and openssl 1.0.1f source code. I m trying to build FIPS on Windows/MAC but not sure if I could build shared library of FIPS. If shared library is possible, what is the command line to build it ? Thanks, -- View this message in context: http://openssl.610

using openssl to serve for multiple domains in one box

2014-03-12 Thread M. V.
hi, I'm using OpenSSL 0.9.8q in FreeBSD-8.2. I have 3 virtual hosts on my system and want to implement SNI to serve for all 3 of them in one server. I have 3 separate certificates one for each, and in my ssl-server code I have to somehow findout what is the domain-name of client's request, and u