Hi
I have put some(100+) root CA certificate files in a folder, and Use
x509_store_load_locations() to set to store load location.
Then Use X509_STORE_CTX_init(), X509_verify_cert() to verify a certificate,
When X509_verify_cert() return 1, I want to know which Root CA passed
verify the certific
On 10/11/14 15:48, Koehne Kai wrote:
>> -Original Message-
>> From: owner-openssl-us...@openssl.org [mailto:owner-openssl-
>> [...]
I'm trying to debug a handshake failure between clients using the system
>> openssl just released OpenSUSE 13.2 , and a server. The handshake always
>>
On Mon, Nov 10, 2014, Koehne Kai wrote:
>
> Thanks for replying.
>
> I'm able to reproduce it with a stock openssl 1.0.1j , configured with
>
> ./config threads shared no-rc5 no-idea no-ssl2 no-ec2m
>
> I've to admit though that the error appears in a (albeit minimal) Qt
> application ...
>
> -Original Message-
> From: owner-openssl-us...@openssl.org [mailto:owner-openssl-
> [...]
> >> I'm trying to debug a handshake failure between clients using the system
> openssl just released OpenSUSE 13.2 , and a server. The handshake always
> fails with a somewhat cryptic error message:
On 10/11/14 14:56, Matt Caswell wrote:
>
>
> On 10/11/14 11:47, Koehne Kai wrote:
>> Hi,
>>
>> I'm trying to debug a handshake failure between clients using the system
>> openssl just released OpenSUSE 13.2 , and a server. The handshake always
>> fails with a somewhat cryptic error message:
>
On 10/11/14 11:47, Koehne Kai wrote:
> Hi,
>
> I'm trying to debug a handshake failure between clients using the system
> openssl just released OpenSUSE 13.2 , and a server. The handshake always
> fails with a somewhat cryptic error message:
>
>
> error:1200AE081:elliptic curve routines:EC_G
> In openssl-1.0.1/fips-2.0 it is not possible to call the low-level APIs when
> in FIPS 140-2 mode. Is there another alternative that I can use? E.g. some
> API in the FIPS module?
Sorry, no.
--
Principal Security Engineer, Akamai Technologies
IM: rs...@jabber.me Twitter: RichSalz
Hi,
I'm trying to debug a handshake failure between clients using the system
openssl just released OpenSUSE 13.2 , and a server. The handshake always fails
with a somewhat cryptic error message:
error:1200AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown
group. error:1408D010:S
Hi,
I'm in the process of upgrading from openssl-0.9.8/fips-1.2 to
openssl-1.0.1/fips-2.0. Our system can be built both with and without the fips
module. Furthermore, it can be built in a limited feature set configuration (no
fips). The limited feature set config only calls low-level openssl AP
