SSL_get_peer_certificate fails with 0.9.8k, works with 0.9.8j

2009-05-01 Thread Jeff Davey
Hi, I recently ran into an issue with OpenSSL 0.9.8k returning NULL when calling SSL_get_peer_certificate() after a successful handshake. The issue doesn't occur every time, but often enough. I reverted to OpenSSL 0.9.8j, and haven't been able to replicate the problem. To verify, I again went 0.9

Re: X509_verrify_cert worked in 0.9.7c but not in 0.9.8

2005-11-16 Thread Jeff Davey
Well. I figured this out. The problem is, we were using the system header files (OpenSSL-0.9.7e) to build the binary, but we were linking in the 0.9.8a static library. I added the 0.9.8a header files to the include path, and the problem went away. On Wed, 2005-09-28 at 17:58 -0600, Jeff Davey

Re: X509_verrify_cert worked in 0.9.7c but not in 0.9.8

2005-09-28 Thread Jeff Davey
On Thu, 2005-09-29 at 01:50 +0200, Dr. Stephen Henson wrote: > Sorry I must have missed that. Can you send a report to RT? Do you get the > same problems using the verify utility? That should pretty much make the same > calls. If you do please include the certificates and the command line you > use

Re: X509_verrify_cert worked in 0.9.7c but not in 0.9.8

2005-09-28 Thread Jeff Davey
On Wed, 2005-09-28 at 23:22 +0200, Dr. Stephen Henson wrote: > What circumstances give that error: what command or application? Can you > include the certificate chain that does that? > I have also noticed this problem with 0.9.8, and reported it here on this list August 8th (with no response).

Problems with X509_verify_cert and 0.9.8

2005-08-04 Thread Jeff Davey
I'm having a very peculiar problem. I'm doing the following to verify that this cert is signed by our root certificate, and that it's a valid cert: X509_STORE *store = X509_STORE_new(); if (store) { X509_STORE_set_verify_cb_func(store, _glicVerificationCallback); // load the CACert