RE: SSL_CTX_use_PrivateKey_file

2003-01-08 Thread Fisk, Kevin
Okay. Right now, I call SSL_CTX_use_PrivateKey_file with the parameter SSL_FILETYPE_PEM. What do I pass for the type PK (first parameter) to pass this. Do I need to convert the PEM file before it can be passed as an ASN.1 certificate? I tried only passing the private key portion as a string, th

SSL_CTX_use_PrivateKey_file

2003-01-07 Thread Fisk, Kevin
Is there any way to pass a string with the private key, instead of reading it from a file, such as read it from a database and pass it to the function, without writing it to disk? Kevin __ OpenSSL Project

RE: IMPORTANT: The release of 0.9.6h is postponed

2002-11-22 Thread Fisk, Kevin
Sorry, my fingers banged out the message before my brain thought to look at the rest of the thread to see if anyone had suggested making the buffers volatile. -Original Message- From: Jeffrey Altman [mailto:[EMAIL PROTECTED]] Sent: Friday, November 22, 2002 7:22 AM To: [EMAIL PROTECTED] Cc

RE: IMPORTANT: The release of 0.9.6h is postponed

2002-11-22 Thread Fisk, Kevin
If a variable is declared as "volatile", the compiler by definition is not supposed to make these kinds of optimizations. I had issues one time with some software I wrote for a hardware company to do a BIT (built-in test) for memory errors and the compiler optimizing the store and read of the memo

RE: FW: SSL_ERROR_SYSCALL

2002-11-18 Thread Fisk, Kevin
Thank you for your help. It turned out that the library we were using that implemented the OpenSSL calls was not properly handing the SSL_ERROR_SYSCALL when errno was EAGAIN. After discovering that ERR_get_err returned 0, I began to suspect that something I read about EAGAIN being equivalent to E

RE: CSR / CA Issued Certificate

2002-10-15 Thread Fisk, Kevin
JSSE... let me know if you are interested in knowing how... Cheers Jose -Original Message- From: Fisk, Kevin [mailto:[EMAIL PROTECTED]] Sent: 15 October 2002 02:01 To: [EMAIL PROTECTED] Subject: CSR / CA Issued Certificate I've been using OpenSSL a great deal, though this is going to

RE: SSL type

2002-08-01 Thread Fisk, Kevin
ssl.h. There is a struct, ssl_st. SSL is typedef'd to ssl_st. Kevin -Original Message- From: Ken Hoo [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 01, 2002 11:59 AM To: [EMAIL PROTECTED] Subject: SSL type Anyone know where the "SSL" type is defined? I did a grep and got too much

The Warning and Patches

2002-07-31 Thread Fisk, Kevin
As you are probably aware, someone sent a security warning yesterday regarding OpenSSL along with patches. I am reluctant to apply these types of patches unless I am sure they are genuine. A patch can just as easily allow a hacker access as prevent it. Was this warning sanctioned by the OpenSSL

RE: Is a 'random.pem' file secure?

2002-07-25 Thread Fisk, Kevin
I believe this was actually from a sample provided to us by Eric in response to a question we posted on the list. Kevin -Original Message- From: Xperex Tim [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 3:35 PM To: [EMAIL PROTECTED] Subject: Re: Is a 'random.pem' file secure?

des_encrypt3

2002-06-26 Thread Fisk, Kevin
Does anyone have a small example of how to do a 3DES encryption? __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

locking_function

2002-03-28 Thread Fisk, Kevin
I am trying to set up mutexes for 'locking_function'. OpenSSL is telling me I need 29 mutex locks. Is that how many I need PER thread doing SSL communications? How can I set up the locking function to be a member function of my SSL class? Is that possible. Sorry, but I don't have much experie

RE: How to create client certificate

2002-02-19 Thread Fisk, Kevin
On the client side, you also need the lines: SSL_CTX_use_PrivateKey_file(ctx, "client.pem", SSL_FILETYPE_PEM); SSL_CTX_use_certificate_file(ctx, "client.pem", SSL_FILETYPE_PEM); And, on the server side, you need a verifier function. int verify_callback(int ok, X509_STORE_CTX *ctx)

Error Message Text

2002-02-15 Thread Fisk, Kevin
When I try to make an SSL connection, it fails. When I try to get the text, this is the best I can get. Is there any way to get any clearer of an error message? error:0006:lib(0):func(0):reason(6) __ OpenSSL Project