RE: how do i use a CRL file to verify a certificate against?

2004-09-21 Thread Lee Baydush
te against? Den 21. sep 2004, kl. 15:43, skrev Lee Baydush: > You can't tell if it has been revoked. That's why they are 'trusted > roots'. If you think your root ca has been compromised, that is when > you usually hit the big red panic button and shut down the

RE: how do i use a CRL file to verify a certificate against?

2004-09-21 Thread Lee Baydush
You can't tell if it has been revoked. That's why they are 'trusted roots'. If you think your root ca has been compromised, that is when you usually hit the big red panic button and shut down the shop. -Original Message- From: Jon Bendtsen [mailto:[EMAIL PROTECTED] Sent: Tuesday, Septe

RE: Problems with get_notAfter

2004-09-20 Thread Lee Baydush
--- Lee Baydush <[EMAIL PROTECTED]> escreveu: Do you know are you trying to output to an input only BIO? I assume you also checked the hbio!=NULL and cert!=NULL? > > -Original Message- > From: Marcos Paraiso > [mailto:[EMAIL PROTECTED] > Sent: Monday, September 20, 2004

Adding signature algorithm for verification

2004-09-20 Thread Lee Baydush
Will somebody tell me how to add an OID and corresponding verification routine to OpenSSL version 0.9.7c to verify a SHA-256 signature. Currently I am trapping the X509_V_ERR_CERT_SIGNATURE_FAILURE and X509_V_ERR_CRL_SIGNATURE_FAILURE errors in my verify callback routine, comparing the OID in t

RE: Problems with get_notAfter

2004-09-20 Thread Lee Baydush
Do you know are you trying to output to an input only BIO? I assume you also checked the hbio!=NULL and cert!=NULL? -Original Message- From: Marcos Paraiso [mailto:[EMAIL PROTECTED] Sent: Monday, September 20, 2004 9:08 AM To: [EMAIL PROTECTED] Subject: Problems with get_notAfter Hi ev