Re: Loading a certifcate from file into a X509 struct

2002-10-02 Thread Steve Haslam
all C callbacks. (Don't you just long for Perl-style closures sometimtes?) SRH -- Steve Haslam Reading, UK [EMAIL PROTECTED] Debian GNU/Linux Maintainer [EMAIL PROTECTED]

Re: scripting openssl req -new

2002-09-27 Thread Steve Haslam
On Fri, Sep 27, 2002 at 05:42:56PM +0200, Mathieu Arnold wrote: > I've been going through the list archive, and I can't find out how to > script certificate creation. > the ideal thing would be to be able to specify things like : > openssl req -new -x509 -days 3650 -text -out cert.pem -keyout cert

Re: Validity period of certificates

2002-09-27 Thread Steve Haslam
verify callback in s_cb.c, I think. SRH -- Steve Haslam Reading, UK [EMAIL PROTECTED] Debian GNU/Linux Maintainer [EMAIL PROTECTED] almost called it today, turned to face the void, numb with the suffering and the question- &qu

Re: session reuse: getting "old session cipher not returned" errors

2002-09-18 Thread Steve Haslam
On Wed, Sep 18, 2002 at 03:47:52AM +0100, Steve Haslam wrote: > SSL DEBUG HACK: s->hit=1, c=0x815217c (EDH-DSS-DES-CBC3-SHA), > s->session->cipher=(nil) ((NONE)) In fact.. (talking to myself again, sorry), I looked in d2i_SSL_SESSION(), and it sets "cipher" to NULL, a

Re: session reuse: getting "old session cipher not returned" errors

2002-09-17 Thread Steve Haslam
On Wed, Sep 18, 2002 at 02:58:53AM +0100, Steve Haslam wrote: > So, according to ssldump, the "cipherSuite" entry in the ServerHello is the > same the second time round. Is it a problem that the client seems to be in > "read server hello B" state twice? > > O

session reuse: getting "old session cipher not returned" errors

2002-09-17 Thread Steve Haslam
hello B" state twice? OK, can anyone advise me? Is ssldump really useful for debugging or is there something I can do with the ssl libs to show more debugging info? I'm using OpenSSL 0.9.6g (from the Debian package) on both machines. SRH -- Steve Haslam Reading, UK