Re: How OpenSSL connections work

2022-03-06 Thread Corey Minyard
On Sun, Mar 06, 2022 at 02:39:55AM +, loic nicolas wrote: > Hello, > > I can't figure out how OpenSSL connections work. > > I would like to use 2 bios (rbio, wbio) which will be shared for all my > connections. I'm not sure why you would want to do this. Why would you allocate one BIO and

Re: [openssl-users] SSL_CTX_set_cert_verify_callback and certificate access

2019-01-11 Thread Corey Minyard
On 1/11/19 12:42 PM, Sam Roberts wrote: On Wed, Jan 9, 2019 at 6:54 PM Corey Minyard wrote: My first inclination for a secure connection was to use ssh. However, ssh is not as well suited for this as I would have liked, and all the ssh libraries are tied to a file descriptor in ways that are

Re: [openssl-users] SSL_CTX_set_cert_verify_callback and certificate access

2019-01-11 Thread Corey Minyard
On 1/11/19 12:14 PM, Jordan Brown wrote: On 1/10/2019 10:55 AM, Corey Minyard wrote: It is unusual, perhaps, but I'm trying to implement something like ssh does.  I can't expect users of ser2net to obtain certificates from a real certificate authority, that's too high a barrier

Re: [openssl-users] SSL_CTX_set_cert_verify_callback and certificate access

2019-01-10 Thread Corey Minyard
On 1/10/19 11:17 AM, Viktor Dukhovni wrote: On Wed, Jan 09, 2019 at 08:54:30PM -0600, Corey Minyard wrote: What I would like to do is pull out some information from the certificate that is being verified, set/modify the verify store based upon that information (basically chose the CA based

Re: [openssl-users] SSL_CTX_set_cert_verify_callback and certificate access

2019-01-10 Thread Corey Minyard
On 1/10/19 11:00 AM, Michael Wojcik wrote: From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Jordan Brown Sent: Thursday, January 10, 2019 11:15 On 1/9/2019 6:54 PM, Corey Minyard wrote: 2. Set the userid in the certificate and use client authentication to

[openssl-users] SSL_CTX_set_cert_verify_callback and certificate access

2019-01-09 Thread Corey Minyard
I'm working on an application using openssl, and I would like to set some things up for verification based upon information in the certificate.  Unfortunately, from what I can tell, there is no way to do this.  (Maybe it's not a good idea.  Not sure.) What I would like to do is pull out some i