RE: Empty CA name list in Certificate Request in 0.9.8e

2011-11-03 Thread Shaw Graham George
p. G. -Original Message- From: Michel [mailto:msa...@paybox.com] Sent: 03 November 2011 14:10 To: openssl-users@openssl.org Cc: Shaw Graham George Subject: Re: Empty CA name list in Certificate Request in 0.9.8e Hi George, didn't you forget a call to : SSL_CTX_set_client_CA_list()

Empty CA name list in Certificate Request in 0.9.8e

2011-11-03 Thread Shaw Graham George
Hi, Our software has been using OpenSSL for many years successfully, but we've recently discovered a problem when running our HTTPS server against a client running some IBM software (not sure exactly what at the moment. The client appears to be making a strict interpretation of the RFCs regardi

RE: OpenSSL on IBMi

2010-04-07 Thread Shaw Graham George
L IB$SHLIB_SUFFIX; ln -s $prev $SHLIB$SHLIB_SUFFIX ); fi; fi; \ fi; system DLTSRVPGM SRVPGM(OPENSSL/libssl) CPF2105: Object LIBSSL in OPENSSL type *SRVPGM not found. ssl/*.o does not link to a module object GMAKE[1]: Leaving directory `/home/qsecofr/openssl-0.9.8e' On Tue, Apr 6,

RE: OpenSSL on IBMi

2010-04-06 Thread Shaw Graham George
le compiling openssl) results in error. If I swap this, icc works fine. Next, I need to swap this in openssl, any quick way of doing this? My project involves using the openssl libraries in OS.400 native environment to create libraries on top of it which will be used by ILE Code. I believe tha

RE: OpenSSL on IBMi

2010-04-06 Thread Shaw Graham George
ive environment to create libraries on top of it which will be used by ILE Code. I believe that I won't be able to use PASE libraries in native environment, right? Pankaj On Tue, Apr 6, 2010 at 1:20 PM, Shaw Graham George wrote: OK, one step forward. I guess that previous

RE: OpenSSL on IBMi

2010-04-06 Thread Shaw Graham George
I get the IBM tools for > CCSID 37? > > I tried to set the QIBM_CSSID variable in qsh environment to 1200, but > the extracted openssl files still have CCSID of 37. > > Pankaj > > > On Sun, Apr 4, 2010 at 8:23 PM, Shaw Graham George wrote: >> >> You should rea

RE: OpenSSL on IBMi

2010-04-04 Thread Shaw Graham George
AKE not found. GMAKE: *** [links] Error 1 $ I have set the PATH environment variable as follows : /qibm/ProdData/DeveloperTools/qsh/bin/:/usr/bin:.:/QOpenSys/usr/bin I am using the old perl binaries for OS400 from CPAN site. Any idea where the problem is? On Sun, Apr 4, 2010 at 3:08 PM, Shaw Graham Geo

RE: OpenSSL on IBMi

2010-04-04 Thread Shaw Graham George
http://rt.openssl.org/Ticket/Display.html?id=1565&user=guest&pass=guest Only for 0.9.8e, though. G. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Pankaj Aggarwal Sent: 04 April 2010 10:05 To: openssl-users@openssl.org Sub

RE: Creating a certificate with Unicode characters in Issuer and Subject

2009-11-19 Thread Shaw Graham George
No, this is the output from "openssl x509 -text", but without "-nameopt utf8", which has no effect on the output anyway. G. -Original Message- From: dry...@sky-haven.net [mailto:dry...@sky-haven.net] Sent: 19 November 2009 17:16 To: Shaw Graham George Sub

RE: Creating a certificate with Unicode characters in Issuer andSubject

2009-11-19 Thread Shaw Graham George
t: 19 November 2009 13:24 To: openssl-users@openssl.org Subject: Re: Creating a certificate with Unicode characters in Issuer andSubject On Thu, Nov 19, 2009, Shaw Graham George wrote: > Hi, > > I have a requirement to make some test keys/certificates that contain > Unicode (Chinese) da

Creating a certificate with Unicode characters in Issuer and Subject

2009-11-19 Thread Shaw Graham George
Hi, I have a requirement to make some test keys/certificates that contain Unicode (Chinese) data in the Issuer and Subject fields. Print-out from an example certificate using "openssl x509" is: Issuer: C=\x00C\x00N, ST=\x00G\x00u\x00a\x00n\x00g\x00d\x00o\x00n\x00g, L=\x00G\x00u\x00a\x00n

RE: Help Please....SSL3_GET_RECORD error

2009-08-03 Thread Shaw Graham George
What remote application or software is it that is generating these errors? Is it Java? G. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Biswatosh Sent: 03 August 2009 15:32 To: openssl-users@openssl.org Subject: Fw: Help

RE: SSL_read() returns SSL_ERROR_SYSCALL

2009-06-10 Thread Shaw Graham George
Is the server IIS? And do you get all of the response? Because IIS doesn't necessarily close SSL connections in a tidy manner - it can give SSL_ERROR_SYSCALL. G. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of chithuanand

RE: compiling app with separate openssl

2008-08-08 Thread Shaw Graham George
Hi, I'm no Linux guru but this worked for me (or rather it's equivalent). To ensure that you link to your development libraries: g++ -o tls-srv main.o /home/dev/openssl-0.9.8d/lib/libssl.so.0.9.8 /home/dev/openssl-0.9.8d/lib/libcrypto.so.0.9.8 ... and then use LD_LIBRARY_PATH in your run-time t

RE: Openssl + cipher

2008-03-07 Thread Shaw Graham George
http://www.openssl.org/docs/ssl/SSL_CTX_set_cipher_list.html? G. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yolanda Craven Sent: 04 March 2008 17:35 To: openssl-users@openssl.org Subject: Openssl + cipher I'm new to using openssl and I ne

RE: cipher algorithms

2008-03-05 Thread Shaw Graham George
Surely http://www.openssl.org/docs/ssl/SSL_CTX_set_cipher_list.html. G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Baur, Mateus (Brazil R&D-CL) Sent: 05 March 2008 12:25 To: openssl-users@openssl.org Subject: RE: cipher algorithms Yes, I know yo

RE: OpenSSL client through proxy

2008-02-27 Thread Shaw Graham George
You need to open a socket to the proxy server and send it an HTTP CONNECT request. If the proxy server sends back an OK reply, then it has opened a socket to the proxy. After that the proxy acts as a port forwarder, so you can continue your SSL dialog with the proxy as if it was the SSL server.

RE: SSL Error and Info messages

2008-02-25 Thread Shaw Graham George
Hi, This may or may not be helpful ... it depends on your code, and what applications that you are talking to that lead to these errors: (1) reminds me of a problem that can occur when using OpenSSL against some Java implementations. You can test it by using openssl s_client or s_server using th

RE: Problem building Windows 64-bit

2007-08-29 Thread Shaw Graham George
FYI. I found the problem. Our build environment had the following environment variable set: LINK=/manifest:no Removing this environment variable solved the problems. G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaw Graham George Sent: 24

RE: Problem building Windows 64-bit

2007-08-24 Thread Shaw Graham George
I forgot to mention. 0.9.8e. G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaw Graham George Sent: 24 August 2007 13:40 To: openssl-users@openssl.org Subject: Problem building Windows 64-bit Hi, I've tried to follow the instructio

Problem building Windows 64-bit

2007-08-24 Thread Shaw Graham George
Hi, I've tried to follow the instructions in INSTALL.W64 for building OpenSSL for 64-bit Windows, but while C programs are compiling OK, the link of the dlls is failing: link /nologo /subsystem:console /opt:ref /dll /out:out32dll\libeay32.dll /def:ms/LIBEAY32.def @"C:\Documents and Settings\gshaw

RE: Problem handling unexpected SSL shutdown

2007-08-16 Thread Shaw Graham George
oblem handling unexpected SSL shutdown Shaw Graham George wrote: > The problem is that, on Windows at least, my server doesn't appear to > get the "SSL shutdown notify" packet, for some reason. So, if that is > to be expected, I'm looking for an alternative way of detec

RE: Problem handling unexpected SSL shutdown

2007-08-16 Thread Shaw Graham George
hat way Unless somebody has any better ideas ... G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darryl Miles Sent: 15 August 2007 15:40 To: openssl-users@openssl.org Subject: Re: Problem handling unexpected SSL shutdown Shaw Graham George wrote:

RE: Problem handling unexpected SSL shutdown

2007-08-15 Thread Shaw Graham George
] On Behalf Of jimmy bahuleyan Sent: 15 August 2007 14:01 To: openssl-users@openssl.org Subject: Re: Problem handling unexpected SSL shutdown jimmy bahuleyan wrote: > Shaw Graham George wrote: >> Hi, >> >> We have an application that provides HTTPS, either as client or >> se

RE: Problem handling unexpected SSL shutdown

2007-08-15 Thread Shaw Graham George
f shutdown? Or should I check for a shutdown before actually doing the put? But I would still have thought that the put should return an error if the socket has been shutdown. Thanks again, G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaw Graham

Problem handling unexpected SSL shutdown

2007-08-15 Thread Shaw Graham George
Hi, We have an application that provides HTTPS, either as client or server, for our customers. At the moment I am doing some testing between our client and our server, as a result of a problem with one of our customers, and there is a particular sequence of events, that involves an unexpected SSL

RE: how to use openssl's header file in my program?

2004-12-01 Thread Shaw Graham George
man gcc --- George Shaw Senior Software Engineer Axway a Sopra Group company Tel: +44 (0) 7802 452186 Fax: +44 (0) 1454 299684 email: [EMAIL PROTECTED] www.axway.com --- Ce message est exclusivement destiné aux personnes dont le nom figure ci-dessu