How to verify a client certificate?

2010-09-26 Thread Tim Ward
oot certificate by putting it in a disk file. It's embedded in the application's executable, and I want to load it into OpenSSL from there, so I don't want to use these functions anyway. But finding out how to do that is the next problem, not the current one.

RE: Why don't openssl RSA work for Word Document file?

2010-01-28 Thread Tim Ward
utton on a Word toolbar, as that is clearly the most friendly way to provide the feature to users (or, better, have it run automatically on document close). You certainly aren't going to want a document author to have to type command lines!!! Tim Ward Brett Ward Limited - www.brettward.co.uk

Re: General question about documentation

2009-11-26 Thread Tim Ward
S records talking to each other by explicitly configured IP address the DNS lookup took minutes to time out before Java would deign to get on with doing what it was told. With no way of switching this nonsense off. Hence I used a C++ DLL to do the crypto stuff. Tim W

Re: General question about documentation

2009-11-25 Thread Tim Ward
l break when the next version does something different, which is not the case if you're writing to a published and documented API as you won't be accidentally relying on non-guaranteed implementation details. Tim Ward - Brett Ward Lim

Re: General question about documentation

2009-11-24 Thread Tim Ward
bject" system - I've sort-of picked up that if you XXX_new() something you maybe ought to XXX_free() it sometime later, and there's some sort of use counting going on, but I've not found any documentation for any of this yet. Tim Ward - Brett Ward Limited - 07801 703 600 w

Re: SSL_CTX_use_certificate_chain?

2009-11-23 Thread Tim Ward
Now solved. You iterate round the STACK_OF(X509) and add them one at a time with SSL_CTX_add_extra_chain_cert Tim Ward - Brett Ward Limited - 07801 703 600 www.brettward.co.uk - Original Message - From: "Tim Ward" To: Sent: Monday, November 23, 2009 11:11

SSL_CTX_use_certificate_chain?

2009-11-23 Thread Tim Ward
e chain were on disk in a .pem file, but it isn't - it's in memory in a STACK_OF(X509). How do I get the server end of an SSL connection to use the certificate chain parsed out of a PKCS#12 file using PKCS12_parse? Or have I completely misunderstood how to use OpenSSL to get the certifi

Re: Getting started - d2i_PKCS12_fp: on Win

2009-11-20 Thread Tim Ward
From: "Tim Ward" For debug, you need to generate and use a different .mak file; where you see the lines in do_{ms,masm,nasm}.bat that say perl util\mk1mf.pl (options) VC-WIN32 >makefile either add lines with 'debug' added to the options part and different mak

Re: Getting started - d2i_PKCS12_fp: on Win

2009-11-20 Thread Tim Ward
From: "Tim Ward" Trying to follow that through the sources myself it doesn't make any sense to me - the BIO_s_file I've found, in bss_file.c, simply returns a pointer, it doesn't make any call to setmode or anything else. OK ... looking at the disassembly that&#x

Re: Getting started - d2i_PKCS12_fp: on Win

2009-11-20 Thread Tim Ward
What did I get wrong in the above chain of logic, and what should I have done instead, and how should I have known to do something else instead? (I do, by the way, see a couple of other people have had problems with OpenSSL and the

Re: Getting started - d2i_PKCS12_fp: on Win

2009-11-17 Thread Tim Ward
ance of working? And if you're right that Windows builds ignore the applink stuff that was explicitly added for Windows builds ... I can ignore applink, not include it, and also not call the CRYPT malloc thing? Thanks again! Tim Ward - Brett Ward Limited - 07801 703 600 www.brettward.co.uk

Re: Getting started - d2i_PKCS12_fp

2009-11-16 Thread Tim Ward
to understand the stuff in the FAQ about applink.c ... what have I missed? Tim Ward - Brett Ward Limited - 07801 703 600 www.brettward.co.uk - Original Message - From: "Tim Ward" To: Sent: Monday, November 16, 2009 3:25 PM Subject: Getting started - d2i_PKCS12_fp My first

Getting started - d2i_PKCS12_fp

2009-11-16 Thread Tim Ward
en( filename, "rb" ); if ( file != 0 ) { PKCS12 *pkcs12 = d2i_PKCS12_fp( file, 0 ); // from the O'Reilly book What's wrong with that please? And what documentation should I have found, and where, that would have helped me get