Re: [openssl-users] OpenSSL mail outage tomorrow 1200-1400UTC

2014-12-22 Thread Matt Caswell
On 22/12/14 23:57, Philip Prindeville wrote: > And that's back up and working, right? I've not seen any messages > today, but then again it's the holidays... As far as I am aware all mail has been working today. I've seen emails on openssl-dev and openssl-commits, and they are both run from the

Re: [openssl-users] OpenSSL mail outage tomorrow 1200-1400UTC

2014-12-22 Thread Philip Prindeville
And that's back up and working, right? I've not seen any messages today, but then again it's the holidays... On 12/22/2014 08:56 AM, Steve Marquess wrote: We've been experiencing some issues with the system that handles @openssl.org E-mail and the mailing lists. The hardware vendor will be sw

[openssl-users] OpenSSL mail outage tomorrow 1200-1400UTC

2014-12-22 Thread Steve Marquess
We've been experiencing some issues with the system that handles @openssl.org E-mail and the mailing lists. The hardware vendor will be swapping the system board Tuesday Dec. 23 beginning at 1200UTC. The outage is expected to take approximately two hours. -Steve M. -- Steve Marquess OpenSSL Soft

Re: [openssl-users] How to display root certificate in command line

2014-12-22 Thread Salz, Rich
> But in certificate chain, I only get 2 certificates information (I think this > two > are return by website.) That's right. The server returns up to, but not including, the root. The client is supposed to have the root stored somewhere as an out-of-band trust anchor. This is the way TLS/

Re: [openssl-users] Differences in openssl 0.9.8 and 1.0.1x for private pem key file

2014-12-22 Thread Jakob Bohm
On 22/12/2014 13:57, Dave Thompson wrote: At least for now; there is another thread started just a few days ago about all PEM formats used by OpenSSL suggesting the traditional privatekey forms are obsolete and maybe should be deleted! Please don't do that until 5+ years after 0.9.8 end-of-life

Re: [openssl-users] How to display root certificate in command line

2014-12-22 Thread Jakob Bohm
On 22/12/2014 11:52, Jerry OELoo wrote: Hi All: I have used openssl command line to get some website's certificate chain. Now, I want to show root certificate information. but I do not find any command argument to do it. openssl s_client -showcerts -CApath /etc/ssl/certs -connect studentexclusiv

[openssl-users] pkcs11 engine client side authentication

2014-12-22 Thread Orc Erc
Hi All, I need to authenticate my client with a smartcard in ssl connection. So i am using pkcs11 engine. I have called the functions below, i have successfully read the certificate from smart card. But while connecting to server client does not send any certificate. It happens one side ssl conne

Re: [openssl-users] Differences in openssl 0.9.8 and 1.0.1x for private pem key file

2014-12-22 Thread Dave Thompson
> From: openssl-users On Behalf Of Jaya Nageswar > Sent: Monday, December 22, 2014 05:51 > In our application, we have been using openssl 0.9.8 and trying to move to > openssl 1.0.1x as 0.9.8 is going to be EOS by December 2015. We have a > sample application where we try to read a sample pem k

[openssl-users] Differences in openssl 0.9.8 and 1.0.1x for private pem key file

2014-12-22 Thread Jaya Nageswar
Dear openssl community, In our application, we have been using openssl 0.9.8 and trying to move to openssl 1.0.1x as 0.9.8 is going to be EOS by December 2015. We have a sample application where we try to read a sample pem key file, create an EVP_PKEY indirectly using PEM_read_bio_PrivateKey(B

[openssl-users] How to display root certificate in command line

2014-12-22 Thread Jerry OELoo
Hi All: I have used openssl command line to get some website's certificate chain. Now, I want to show root certificate information. but I do not find any command argument to do it. openssl s_client -showcerts -CApath /etc/ssl/certs -connect studentexclusives.hsbc.co.uk:443 I use -CApath to set ro