[openssl-users] CVE-2015-1793 only on cert-based client auth?

2015-07-13 Thread Colin Edwards
I've been reading/hearing different opinions on the recent vulnerability for cert chain forging that was patched (CVE-2015-1793). Some people are saying the vulnerability only exists if a system is using certificate-based client authentication (mutual auth, where both server and client are authent

[openssl-users] openssl-.0.9.8zg issue while compiling with fips library

2015-07-13 Thread Gayathri Manoj
Hi, I am getting the below error while compliling openssl-0.9.8zg with fips canister library. make[2]: Entering directory `open_source/openssl/0_9_8zg_new1/fips' ../libcrypto.a(err_def.o): In function `ERR_get_state': err_def.c:(.text+0x710): multiple definition of `ERR_get_state' ../libcrypto

Re: [openssl-users] Not Before and Not After Date format for openssl API X509_gmtime_adj

2015-07-13 Thread Victor Wagner
On Mon, 13 Jul 2015 12:25:40 +0530 Nayna Jain wrote: > > Hi all, > > I am programmatically generating the self signed certificate and need > to specify the "Not Before" and "Not After" date, > > Wanted to understand what all formats are acceptable by this API ? X509_set_notAfter and X509_set_