Re: how to set flags in X509_NAME_ENTRY in OpenSSL 1.1.1

2019-06-17 Thread Viktor Dukhovni
On Mon, Jun 17, 2019 at 09:19:41PM -0700, Lisa Matias wrote: > X509_NAME_ENTRY *nameEntry; > nameEntry = X509_NAME_ENTRY_create_by_NID (&nameEntry, nid, > derTagToVType (tag), buffer, bufferLength); > *nameEntry->value->flags = specifiedFlags;* Can you be a bit more explic

Re: Make file removed in openssl 1.1.1

2019-06-17 Thread shiva kumar
Actually I wanted to change the library dependencies from shared to archive libraries as follows *SHLIBDEPS='libcrypto.a'* In Makefile which I was doing in 1.0.2 version, How can I do this? in 1.1.1 version.

how to set flags in X509_NAME_ENTRY in OpenSSL 1.1.1

2019-06-17 Thread Lisa Matias
With OpenSSL version 1.1.1, my previously working code is now failing with this error: *error: dereferencing pointer to incomplete type ‘X509_NAME_ENTRY {aka struct X509_name_entry_st}’* Basically, I am trying to do the following... X509_NAME_ENTRY *nameEntry; nameEntry = X509_NAME_ENTRY_create

Re: PkiPath with openssl

2019-06-17 Thread Wim Lewis
On Jun 17, 2019, at 8:09 AM, Tobias Wolf wrote: > there already a function available? In fact I´d like to provide a > STACK(X509)* as a parameter and get the pem or der encoded asn1 structure > back. Assuming you've already assembled the list of certificates you want to encode, I think you c

Issues establising SSL connection after a wget command

2019-06-17 Thread Eric Ntonfo
Hello, I am running an Ubuntu 12.04 TLS server and can't use wget to download software packages The command wget http://curl.haxx.se/download/curl-7.63.0.tar.bz2 fails with the following error --2019-06-17 22:10:11-- http://curl.haxx.se/download/curl-7.63.0.tar.bz2 Resolving curl.haxx.se (curl.

Re: Calling EVP_DigestFinal_ex multiple times

2019-06-17 Thread Sam Roberts
On Mon, Jun 17, 2019 at 2:07 AM Matt Caswell wrote: > On 15/06/2019 15:08, Tobias Nießen wrote: > > I am wondering whether it is permitted to call EVP_DigestFinal_ex multiple > > times on the same context in order to retrieve the same digest twice. I > > expected OpenSSL to fail with an error code

PkiPath with openssl

2019-06-17 Thread Tobias Wolf
I`m looking for a function within openssl to do the following:   an ASN.1 DER encoded sequence of certificates, defined as follows: PkiPath ::= SEQUENCE OF Certificate Within the sequence, the order of certificates is such that the subject of the first certificate is the issuer of the sec

Re: Make file removed in openssl 1.1.1

2019-06-17 Thread Salz, Rich via openssl-users
>It depends on what you want to achieve. The top level template Makefile is > in Configureations/unix-Makefile.tmpl. Each individual directory contains a build.info file which allows you to make per-directory changes to things like the sources to be compiled, etc. And also impo

Requesting information regarding OpenSSL upgrade

2019-06-17 Thread Nagalakshmi V J
Hi All, We are currently using OpenSSL version 1.0.2j. Since OpenSSL 1.0.2 support is going to be stopped by end of this year, we are planning to upgrade to 1.1.1c version. We are using Compiler GCC 3.4.3 in Linux and vc6 in Windows. Can we go ahead with these compiler versions while upgra

Re: Make file removed in openssl 1.1.1

2019-06-17 Thread Matt Caswell
On 17/06/2019 08:24, shiva kumar wrote: > Hi, > In the OpenSSL 1.1.1 Make file is generated on top directory after when config > is executed. >  In OpenSSL 1.0.2 there is Make file at each directory and is hierarchical, > but > this is not the same in 1.1.1 version. > Actually I was modifying t

Re: Calling EVP_DigestFinal_ex multiple times

2019-06-17 Thread Matt Caswell
On 15/06/2019 15:08, Tobias Nießen wrote: > Hello, > > I am wondering whether it is permitted to call EVP_DigestFinal_ex multiple > times on the same context in order to retrieve the same digest twice. I > expected OpenSSL to fail with an error code, but SHA256 seems to permit it > whereas SHA3

Re: BIO in memory usage....

2019-06-17 Thread Tomas Mraz
On Sun, 2019-06-16 at 12:11 +0200, Tobias Wolf wrote: > I`d like to understand how a memory bio can be reseted with the > internal read counter back to zero for further reusage. > > e.g. > I want to try to read first der and then pem > > d2i_X509 > > and then: > > PEM_read_X509 > > Then t

Make file removed in openssl 1.1.1

2019-06-17 Thread shiva kumar
Hi, In the OpenSSL 1.1.1 Make file is generated on top directory after when config is executed. In OpenSSL 1.0.2 there is Make file at each directory and is hierarchical, but this is not the same in 1.1.1 version. Actually I was modifying the Makefile configurations manually in apps and engines di