openssl 0.9.8 for wince

2006-02-10 Thread Cesc
Hi, It may sound strange ... but could someone do either: - send me the compiled static (.dll.a) and shared (.dll) of libeay32 and ssleay32, for a wince machine? - or tell me how to cross-compile for wince from a linux debian machine (i have the pocketpc tools). Tks in advance! Cesc

Re: OpenSSL for Mingw

2006-02-10 Thread Cesc
actly the story of the patch, neither i have tried building any other version of openssl with mingw than 0.9.8a. But if it is possible, i think this patch may be good to be merged into the code. Regards, Cesc On 2/9/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > On Thu, Feb 09, 2006,

Re: A Few General OpenSSL Questions...

2005-11-30 Thread Cesc
nect fine. But since i have enabled all > available version on my client (SSLv2,3 TLS v1), the BIO should not return > an error. Can someone tell what do i need to do to make the server connect > with SSL v3, or TLS ver 1 Have you tried the SSLv23_method? it starts with a v

Re: Certificate Hierarchy

2005-10-31 Thread Cesc
On 10/31/05, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Mon, Oct 31, 2005, Cesc wrote:> But, will this user.p7c be accepted on the setup of the web server (apache)? > i tried using it with s_server ... no luck.For those cases you can include the certificates in the t

Re: Certificate Hierarchy

2005-10-31 Thread Cesc
at you wanted ....   Cesc           Thanks in advance.   Rajeshwar Singh  On 10/31/05, Dr. Stephen Henson <[EMAIL PROTECTED] > wrote: On Mon, Oct 31, 2005, Cesc wrote:>>> For the sake of completion in this thread, this is what i did ... > openssl crl2pkcs7 -nocrl -cer

Re: Certificate Hierarchy

2005-10-30 Thread Cesc
It kinda worked ... but i have a few more doubts :) Tks a lot! See below On 10/30/05, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Sun, Oct 30, 2005, Cesc wrote:> See below ...>>> Used this way, it gives an OK.>So OpenSSL thinks all is fine.> If you get an error in

Re: Certificate Hierarchy

2005-10-30 Thread Cesc
See below ...On 10/29/05, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Sat, Oct 29, 2005, Cesc wrote:> Hi,>> I am facing a problem it seems this guy from the email above also had, i> just wonder what is the answer.>> My problem is that i want to create a multiple leve

Certificate Hierarchy

2005-10-29 Thread Cesc
ssing? Tks in advance, Cesc On 6/20/05, David Busby <[EMAIL PROTECTED]> wrote: Gurus,   Two questions (perhasp I should have split this)#1  When I look at Thawte or VeriSign certs that a server has there is a heirichy, Thawte then Me or VeriSign then Me.Well I made my on CA and signed some cer

Re: Adding custom data to SSL certificates

2005-10-19 Thread Cesc
,   Cesc  On 10/19/05, Katie Lucas <[EMAIL PROTECTED]> wrote: On Tue, Oct 18, 2005 at 04:04:57PM +0200, Jernej Kos wrote:> Hi,> is there a way to add custom data (fields?) to SSL certificates ? If > so, where can i find more documentation about it ?There's not a huge amount of docu

TLS Extension support - Server Name Indication

2005-10-12 Thread Cesc
could announce the proxy it is connecting to, thus solving all the multi-domain problems. We heard that it is there in gnutls, what about openssl?   And, now that i started, what TLS Extensions does openssl support?   Regards,   Cesc

Re: Threading OpenSSL

2005-08-29 Thread Cesc
, openser.org comes to mind. In this sip proxy, tls connections are used among various threads to send data ... take a look, it may help. Regards, Cesc On 8/28/05, Dusty Hendrickson <[EMAIL PROTECTED]> wrote: > I am currently working on a project making use of SSL > connections via OpenS

Re: Investigating a leak

2005-07-19 Thread Cesc
ust a suggestion. Cesc On 7/19/05, Simon Edwards <[EMAIL PROTECTED]> wrote: > That'd do it. But if you're doing the loop in that sequence, and if you have > set non-blocking on the sockets, then instead of polling for the connection > you can use select or poll (depending on your

Re: Investigating a leak

2005-07-19 Thread Cesc
ll ssl_accept again ... ). But in you main server thread, you just do a continue, thus looping again ... and creating a brand new ssl structure and socket ... you should loop() { create the tcp socket loop () { ssl_acc

Re: Supporting both TLSv1 and SSLv3

2005-06-29 Thread Cesc
Why don't you try SSLv23_client_method()? You can also use the set_options (for the SSL structure or the SSL_CTX) to prohibit the use of SSLv2. This way, you got an SSLv3 and TLSv1 client. Cesc On 6/29/05, david kine <[EMAIL PROTECTED]> wrote: > Hello, > > How should

SSL_CTX_use_PrivateKey_file ... noisy output

2005-05-30 Thread Cesc
Hi, When I load the private key, using SSL_CTX_use_PrivateKey_file function, and I fail to enter the correct one, i get the following output (actually, i loop three times to ask the user to reenter the password). How can i make these error lines not appear? I use the password_cb function to outp

SSL_VERIFY_PEER with SSL_VERIFY_CLIENT_ONCE

2005-05-27 Thread Cesc
Hi, I am trying to build an application server which requests a client certificate, but that if this is not provided, it will not fail, just generate a warning. To request the client cert, i set the SSL_VERIFY_PEER. To make it not fail if client does not provide cert, i use SSL_VERIFY_CLIENT_ONCE

Certificate verify failed on big-endian (Intel IXP425)

2005-05-25 Thread Cesc
, with TLS). I have seen a few discussions about endiannes, about some test failing ... The next thing i would like to try is to cross-compile OpenSSL 0.9.7 for the IXP425 and install the new libraries. What is the safest way to avoid all conflicts, even big a big-performance penalty? Thanks! Cesc