Re: Deleted client certificate trust expectations

2020-11-11 Thread Dan Freed
Wed, Nov 11, 2020 at 04:28:40PM +, Dan Freed wrote: > I have a question/issue about how OpenSSL should handle a deleted > client certificate. It appears that once a trusted certificate is read > from the filesystem, it remains trusted throughout the lifespan of the > server process

Re: Deleted client certificate trust expectations

2020-11-11 Thread Dan Freed
ocess. I assume that if I used a certificate revocation list and revoked the client cert this wouldn't be an issue, but why are the directory contents cached? Is this for performance reasons? Thanks Dan Freed

Deleted client certificate trust expectations

2020-11-11 Thread Dan Freed
not when CTX_set_verify() is called, but that doesn't seem to be what is happening. Another interesting bit is that the inverse is not true. If I add a cert to the trusted directory, it immediately uses it without having to restart the process. I assume that if I used a certificate revocation list and revoked the client cert this wouldn't be an issue, but why are the directory contents cached? Is this for performance reasons? Thanks Dan Freed

Re: [openssl-users] Help compiling on HPUX

2017-11-08 Thread Dan Freed
November 08, 2017 7:03 AM > To: openssl-users@openssl.org > Subject: Re: [openssl-users] Help compiling on HPUX > > > From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Dan Freed > > Sent: Tuesday, November 07, 2017 19:

Re: [openssl-users] Help compiling on HPUX

2017-11-08 Thread Dan Freed
ect: Re: [openssl-users] Help compiling on HPUX > > > From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Dan Freed > > Sent: Tuesday, November 07, 2017 19:14 > > To: openssl-users@openssl.org > > Subject: [openssl-us

[openssl-users] Help compiling on HPUX

2017-11-07 Thread Dan Freed
I see that there are a few posts about compiling openssl on HP-UX, so I’m hopeful that someone can help me out. I’m having issues getting things to completely finish the compilation process. There is an issue that some folks on Git-hub helped me resolve that was caused by some incompatibiliti