Re: SSL_CTX_add_extra_chain_cert does not work, but X509_STORE_add_cert works

2013-04-11 Thread Felipe Blauth
2013/4/11 Dave Thompson > >From: owner-openssl-us...@openssl.org On Behalf Of Felipe Blauth > >Sent: Wednesday, 10 April, 2013 17:35 > > >[In a server] I can't use SSL_CTX_load_verify_locations anymore, > >because now I load stuff from a database. So I was happy &

SSL_CTX_add_extra_chain_cert does not work, but X509_STORE_add_cert works

2013-04-10 Thread Felipe Blauth
Hey folks. I have an OpenSSL TCP server that is under modifications, so I need to change my code. The SSL setup is simple, and I'll spare you from that. The point is that I can't use SSL_CTX_load_verify_locations anymore, because now I load stuff from a database. So I was happy adding the certif

Re: Using libcrypto's RSA code

2013-03-29 Thread Felipe Blauth
To read the key from your header file you might want to use a memory BIO in conjunction with the PEM_read_bio_PUBKEY function or PEM_read_bio_RSAPublicKey ( I don't remember which one you should use, but this was answered in this list before). I don't have a test enviroment right now, but you shoul

How to implement custom STACK object functions

2012-12-10 Thread Felipe Blauth
Hello, I have defined a custom ASN.1 structure by doing something like this: *typedef struct my_custom* *{* *... // omited * * * *} MY_CUSTOM;* Then I did the declarations like this: *DECLARE_ASN1_ITEM(MY_CUSTOM)* *DECLARE_STACK_OF(MY_CUSTOM)* *DECLARE_ASN1_SET_OF(MY_CUSTOM)* And implemen

Re: openssl verify always returns 0 (success) to shell

2012-11-04 Thread Felipe Blauth
the case of 'openssl verify', what > makes sense to me would be: > > 0 - verified > non-zero - didn't verify > > > On 11/4/2012 10:51 AM, Felipe Blauth wrote: > >> OpenSSL app worked as expected, and that is what 0 means (EXIT_SUCCES) >> in C prog

Re: openssl verify always returns 0 (success) to shell

2012-11-04 Thread Felipe Blauth
OpenSSL app worked as expected, and that is what 0 means (EXIT_SUCCES) in C programming. The fact that verification wasn't successful does not mean OpenSSL app didn't work correctly. I think you either have to write your own app (or maybe just modifiy OpenSSL verify app to return what you want) or

Re: Unregister an index registered with RSA_get_ex_new_index

2012-08-17 Thread Felipe Blauth
2012/8/17 Dr. Stephen Henson > On Fri, Aug 17, 2012, Felipe Blauth wrote: > > > I see. I've digged a little bit more in the built-in engines and found > out > > that this is the way some of them are implemented. I guess there's no way > > to to the same for

Re: Unregister an index registered with RSA_get_ex_new_index

2012-08-17 Thread Felipe Blauth
for quick reply. 2012/8/16 Dr. Stephen Henson > On Thu, Aug 16, 2012, Felipe Blauth wrote: > > > Dear all, > > > > Im writing an OpenSSL engine and I have some internal data to manage via > > ex_data functions. > > > > What I've been doing

Unregister an index registered with RSA_get_ex_new_index

2012-08-16 Thread Felipe Blauth
Dear all, Im writing an OpenSSL engine and I have some internal data to manage via ex_data functions. What I've been doing so far is using RSA_get_ex_new_index(0, NULL, NULL, NULL, ), at the initialization of the engine to register a free function for structures allocated when the method ENGINE_l