Re: Server trust evaluation in openssl

2014-08-18 Thread dhanesh ov
Hi Jeff, Thanks for your inputs. I am basically looking for below. I am using openssl in iOS device for an SSL server along with self signed certificate. Problem is that if i install a self signed CA certificate manually into the iOS device, SSL handshake with client works, otherwise it is alway

Re: Server trust evaluation in openssl

2014-08-18 Thread Jeffrey Walton
On Mon, Aug 18, 2014 at 5:47 PM, dhanesh ov wrote: > Hi, > > Can anyone tell how the server trust evaluation can be customized in > openssl? We are using openssl in iOS and need to customize the server trust > evaluation in openssl using self signed certificate. I believe you are interested in SSL

Server trust evaluation in openssl

2014-08-18 Thread dhanesh ov
Hi, Can anyone tell how the server trust evaluation can be customized in openssl? We are using openssl in iOS and need to customize the server trust evaluation in openssl using self signed certificate. Thanks.

Re: Test errors compiling FIPS-capable OpenSSL package on Ubuntu 12.04

2014-08-18 Thread Dr. Stephen Henson
On Fri, Aug 15, 2014, Kevin Pease wrote: > Hi all, > > I'm trying to compile a FIPS-capable version of OpenSSL on Ubuntu 12.04, > based on the latest debian package from Ubuntu (1.0.1-4ubuntu5.16). > Please use the standard version of OpenSSL downloaded from www.openssl.org, distro specificy ve

SSL APIs which does not need certificates/keys stored in filesystem

2014-08-18 Thread zakkir hussain Kharim
Currently we are storing certificates/keys in filesystem and using the SSL apis like SSL_CTX_use_certificate_chain_file and SSL_CTX_load_verify_locations to load the certificate chain from file system for server and client purpose. We want to avoid storing in filesystem, but read the certificates