Re: Memory leak in d2i_X509_fp ? - Err_remove_state(0)

2005-11-15 Thread Calista
Calling Err_remove_state(0) before the thread exits fixed it :) --- Calista <[EMAIL PROTECTED]> wrote: > Hi, > > if(!(x509 = d2i_X509_fp(fpin, NULL))) { >fseek(fpin, 0, SEEK_SET); >x509=PEM_read_X509(fpin, NULL, NULL, NULL); > } > > CRYPTO_MDEBUG's

Memory leak in d2i_X509_fp ?

2005-11-15 Thread Calista
turns x509? Finally the thread exists .. cleaning.. and then I create it again.. but it leaks memory again. Thank you. Calista. __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yaho

X509_verrify_cert worked in 0.9.7c but not in 0.9.8

2005-09-28 Thread Calista
Hi, I upgraded to the latest OpenSSL and quite to my consternation the X509_verify_cert fails with the reason "self signed certificate". But if I switch back to 0.9.7c it doesn't. Did I miss anything during the upgrade? Tha

Re: PEM_read_X509 and d2i_X509_fp problem.

2005-05-10 Thread Calista
l for > details. > > -joe > > > On May 6, 2005, at 8:56 AM, Calista wrote: > > > Are the functions > > d2i_X509_fp and PEM_read_X509 thread safe? > > Discover Yahoo! Get on-the-go sports scores, stock quotes, news and more

PEM_read_X509 and d2i_X509_fp problem.

2005-05-06 Thread Calista
The code below fails sometimes( it prints "error"). I don't understand why. I have a multi threaded application, and all the threads may be doing the following code simultaneously. Are the functions d2i_X509_fp and PEM_read_X509 thread safe? The variables - x509, fp, cert_filename are local non-st

X509_get_ext_d2i () - how to free memory ?

2005-04-26 Thread Calista
Hi, How can I free the memory allocated by distributionpts = X509_get_ext_d2i(x509, NID_crl_distribution_points, NULL, NULL) when I am getting the CRL distribution points? Thanks. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the be

Re: sk_X509_CRL_delete

2005-04-26 Thread Calista
Thanks for the suggestion. I think we also need to decrement num_crls otherwise we will exceed the array boundary. Thanks again. --- Tan Eng Ten <[EMAIL PROTECTED]> wrote: > How abt adding decreasing the iterator (i--) in the > if-block so it looks > like: > > > > for(i=0; i < num_crls

sk_X509_CRL_delete

2005-04-21 Thread Calista
Hi, I load the CRLs in the beginning of my application. Then I check the crls with X509_CRL_verify and if it fails, then I do a sk_X509_CRL_delete(crl_stack, i) for e.g. for(i=0; i < num_crls; i++) { crl = sk_X509_CRL_value(crl_stack, i); . X509_verify_CRL(); if (above check fails) {

RE: sk_X509_push vs sk_x509_free

2005-04-20 Thread Calista
Thanks Aftab. --- Aftab Alam <[EMAIL PROTECTED]> wrote: > Yes you will have to use sk_X509_pop_free I think. > > Regards > Aftab Alam > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Calista > Sent:

sk_X509_push vs sk_x509_free

2005-04-20 Thread Calista
Hi, I add certificates to the store using sk_x509_push and then free it later with sk_x509_free, but it doesn't seem to free memory. Should I use sk_x509_pop or something? Thank you for your time. Calista. __ Do You Yahoo!? Tired of spam?

Re: How to get CRL in my application.

2005-04-01 Thread Calista
Yes, your pointer helped a lot. Thanks a bunch. Calista. --- Beniamino Galvani <[EMAIL PROTECTED]> wrote: > On Thu, Mar 31, 2005 at 08:13:19AM -0800, Calista > wrote: > > Thanks Erwann. > > > > I wrote a test program in CURL to get the CRL > using > > ht

Re: [openssl-users] How to get CRL in my application.

2005-03-31 Thread Calista
the OpenSSL documentation but didn't find it. Thanks once again. Calista. --- Erwann ABALEA <[EMAIL PROTECTED]> wrote: > Bonjour, > > Hodie IV Kal. Apr. MMV est, Calista scripsit: > > Is there a function in OpenSSL to retrieve the > CRL? > > No, AFAIK. Depe

How to get CRL in my application.

2005-03-29 Thread Calista
Given the "Next update" date of the CRL and the CA certificate how can I get the CRL? Is there a function in OpenSSL to retrieve the CRL? If not, can anyone explain how to do this? My application has a list of CA certificates, initially I have the CRLs too but depending on "next update" date t