[openssl-users] Query on BIO_do_accept in openssl server.

Hi All, I am new to openssl and I am trying to achieve server client communication using Openssl with BIO interfaces. As per my understanding on the man page of BIO_do_accept(BIO *abio), first call to it will set's up accept BIO and Second call to the same is a blocking call and wait for incoming

SSL Problem

.wholesale.bt.com/emailAddress=gopiram [EMAIL PROTECTED] verify return:1 3052:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1052:SSL alert number 46 3052:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226: Kind Regards Ravi Karia

Re: How to fallback from TLS to SSLV3?

should choose one of them. But it does not work with the WS I specified. It works fine, when I include SSL_OP_NO_TLSv1 in SSL_CTX_set_options. Is there any other way to tell that both SSLV3 and TLSV1 are supported and let the server choose one of them? Thanks, Ravi. On 8/28/07, ravi shankar <[EM

Re: How to fallback from TLS to SSLV3?

Hi Lutz, Yes. We use sslv23_method with SSL_OP_NO_SSLv2 in SSL_CTX_set_options. In this case, how do I specify that both SSLv3 and TLSv1 are valid in my client hello? Is it specified in the cipher list? I use the cipher setting as "DEFAULT:@STRENGTH". Thanks, Ravi. On 8/28/07, Lut

How to fallback from TLS to SSLV3?

connection goes fine. Is there any SSL_CTX option or api to tell that try TLS, if it does not work, fallback to SSLV3? We do not want to completely disable TLS by setting the option SSL_OP_NO_TLSv1 in SSL_CTX_set_options. Thanks for your help. - Ravi.

How to fallback from TLS to SSLV3?

connection goes fine. Is there any SSL_CTX option or api to tell that try TLS, if it does not work, fallback to SSLV3? We do not want to completely disable TLS by setting the option SSL_OP_NO_TLSv1 in SSL_CTX_set_options. Thanks for your help. - Ravi.

How to Authenticate the Public key

SA-SHA1) & also the function to hash it to be passed as a part of Authorization? Regards, Ravi - Check out the all-new Yahoo! Mail beta - Fire up a more powerful email and get things done faster.

Re: Application Development & Makefile examples

to know if I can find some Makefile examples to include the libraries & header files for my application to compile & link. Appreciate any help. Regards, Ravi - Looking for earth-friendly autos? Browse Top Cars by "Green Ra

Re: Extracting Public Key from .CER file

Hello, I want to use the Open SSL function call to extract the Public Key from the Manufacturers X.509 Certificate, which is in the .CER format. Could someone please advise me? Thanks & Regards - Need Mail bonding? Go to the Yahoo! Mail Q&A for great tips from

Re: Issues with openssl client application while trying to connect to rsasecurity webserver.

Can any one please help me on the below question? Is it because that the rsasecurity server certificate is issued by www.valicert.com and valicert.com trusted root is not available to complete the certificate chain? Thanks, Ravi. On 1/4/07, ravi shankar <[EMAIL PROTECTED]> wrote: Hi, W

Issues with openssl client application while trying to connect to rsasecurity webserver.

certificate when we connect to the webserver. These steps works fine with other webservers, but does not work with rsasecurity site (fails with the error 'unable to get local issuer certificate') Any thought on this issue would be appreciated. Thanks, Ravi. # openssl s_client -connect www.rsase

Re: Trusting a server certificate

Hi,Can anyone please help me on the below question?Thanks,Ravi.On 8/3/06, ravi shankar <[EMAIL PROTECTED] > wrote:Hi,I am new to openssl. How do we tell the SSL client to trust the server certificate in advance using openssl APIs. For example, when we have the trusted root from the webserv

Trusting a server certificate

trusted root. But when we have only the server certificate(before making the connection itself) instead of the trusted root, which function can be used to tell the ssl client to trust the server certificate? Can any one explain me? Thanks,Ravi.

private key from pkcs#12 file

key (encrypted) itself. Is there anything wrong in what I am doing? If I were to supply the option "-nodes" the private key is dumped to the file non-encrypted. I am using openssl v0.9.5. Alternatively was there a bug in that version which exhibited this behavior? t

openssl in php

Hi, Iam writing application on PHP for connecting to the openssl. I want to create a CA , andd i want to know how can i generate csr with openSSL (Linux) without intercative mode from PHP. I need example scripts to automate the openssl(linux) commands in PHP Thanks in advance. Regards, Ravi

make[2]: *** [test_ca] Error 1

hi,   I am trying to install openssl and getting the following errors...pls help me to fix this     cheers Ravi Kashyap     Country Name (2 letter code) [AU]:AUOrganization Name (eg, company) []:Dodgy BrothersCommon Name (eg, YOUR name) []:Brother 1Common Name (eg, YOUR name) []:Brother

Re: cert in personal store

While importing the received certificate, it is unable to find the private key in the key store. Thatswhy it is storing in the people's certificates store. Try to store in the proper key store and check once again. Ravi Arnaud De Timmerman wrote: > hi all, > > I'm

Re: Cross Certification

Dear All, I do not receive any reply for this. Any pointers will be appreciated. Ravi Prakash B.V. "Ravi Prakash B.V." wrote: > > Dear all, > > I want to establish cross certification between two different independent > CAs. How is it possible? > > Any po

Re: problem signing spkacs

Hi, Your process is correct. But the output certificate is in DER format. Thatswhy u r unable to see BEGIN CERTIFICATE tags... The mime type is also correct.. How u r downloading to netscape browser? Ravi Prakash B.V. On Thu, 18 Oct 2001, Christopher L. Everett wrote: > Hello: >

Re: pkcs12 error message

You have to provide private key file also along with certificate. It can be within your certificate file w.crt or u can provide the private key file separately using -inkey option. Try using -inkey option Ravi On Wed, 17 Oct 2001, Juan Carlos Albores Aguilar wrote: > i'm trying to

Re: crl question

After revoking the certificate, you didnt generate the CRL file. First generate the CRL file and then ckeck. cheers, Ravi Prakash B.V. On Wed, 17 Oct 2001, Juan Carlos Albores Aguilar wrote: > Hi, i'm using openssl and i've created my own CA so i can sign certificates, >r

Cross Certification

Dear all, I want to establish cross certification between two different independent CAs. How is it possible? Any pointers/links/docs for the above. Thanks in Advance, Ravi Prakash B.V. __ OpenSSL Project

[ smime-crypto.SignText]

this. Thanks & Regards, begin:vcard n:Venkata Ravi Prakash;Burlagadda tel;cell:98490 30284 tel;home:08644 26681 tel;work:040 7814515/17/19 extn:387 x-mozilla-html:FALSE org:Tata Consultancy Services;Advanced Technology Centre version:2.1 email;internet:[EMAIL PROTECTED] title:ASE adr;qu

Openssl on Tandem

:21070006:PKCS7 routines:PKCS7_dataDecode:bad get asn1 object call:pk7_doit.c:405: 22383:error:21072077:PKCS7 routines:PKCS7_decrypt:decrypt error:pk7_smime.c:400: I also found out that bntest in the test directory fails. ( no error reported while compiling ) Thanks and regards, Ravi begin:vcard

Info on keyEncipherment, dataEncipherment, keyUsage, keyAgreement

Hi, I am newbie to this group. I want to know more about keyEncipherment, dataEncipherment, keyUsage, keyAgreement. Can you please point to any documents or proper link to know the exact definitions and usage. Thanks in Advance. Ravi -- A man without a woman is like a statue without pigeons

MVS support

Hi, will Openssl work on S/390 with MVS ?? If so, give the pointers or link to download that code. Thanks in advance, Ravi -- A man without a woman is like a statue without pigeons. __ OpenSSL Project

Private Key File!!!

Hi All, I don't know where to get the Certificate Key File from??? Actually I have just created the CA and a Certificate with the help of Openssl CA.sh script... Don't have any file for the private key. Pls. throw some light!!! Re

Hi All!!!

layer!!!   Regards Ravi Mittal

No Subject

__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Error: unable to get local issuer certificate??

tents. I am not sure whether this is the cause for the above errors. Please can anyone help me out in this as early as possible. Thanks in advance. Hope to get earliest reply. Ravi Srinvas M E-mail : [EMAIL PROTECTED] Voice mail : +81 3 5404 9592 Fax : +81-3-5473-4441

No Subject

nyone suggest me. Thanks in Advance & Regards, Ravi Srinvas M E-mail : [EMAIL PROTECTED] Voice mail : +81 3 5404 9592 Fax : +81-3-5473-4441 CREDIT | FIRST SUISSE | BOSTON Credit Suisse First Boston (Japan) Limited 5th Floor Shiroyama Hills, 4-3-1 Toranomon, Minato-ku,

How can I get debug version....

ug verison and using gcc. Regards, Ravi Srinvas M This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message i