BIO_read() crash

Hi team, I find a segment fault in BIO_read() on openssl 3.0 about calculate digest with BIO using md4 algorithm. This is my test code, put it in a.c, build & run, it will crash. If don't load legacy provider: 1. Set dgst = "md4", EVP_get_digestbyname(dgst) won't return NULL, but a non-NULL

how to programmatically specify the path of fipsmodule.cnf and load it in application without using openssl.cnf in OpenSSL 3.0

Hi team, Do you know how to programmatically specify the path of fipsmodule.cnf and load it in application without using openssl.cnf in OpenSSL 3.0? Historically, my product uses customized OpenSSL and doesn't have an openssl.cnf. I need to use FIPS module, and I try to load it, it fails until I

OpenSSL 3.0.7 make test failed on AIX 7100-04

Hi team, I compile OpenSSL 3.0.5 and 3.0.7 on AIX 7100, make and make install succeed, but make test failed at very beginning when doing "00-prep_fipsmodule_cnf.t". This is my config options: ./Configure -Wl,-R,/.uvlibs1 aix64-cc enable-fips enable-acvp-tests no-mdc2 no-idea shared --prefix=/di

Does OpenSSL use exponent blinding?

Hello! I am writing to inquire if OpenSSL uses exponent blinding to mitigate leakage of secrets during RSA decryption. For what I can see, Botan and Libgcrypt use exponent blinding for RSA and also ElGamal. However, I can only find "base blinding" in OpenSSL. Would anyone shed some lights on this?

Re: Probably memory leak on handshake when KTLS enabled

ected and suppressed errors, rerun with: -s ==18674== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 0 from 0) Dmitry Belyavsky 于2020年6月12日周五 下午6:24写道： > Could you please try to re-run the client via Valgrind? > > On Fri, Jun 12, 2020 at 7:03 AM Xinzhe Wang wrote: > >&g

Probably memory leak on handshake when KTLS enabled

When KTLS is enabled, multiple client's handshake will lead to unexpected eof while reading and data corrupt(possible memory leak). Tested OpenSSL version: master, 3.0.0-alpha1 Kernel version: 5.4.43-1-MANJARO Reproduce step(using docker): sudo modprobe tls git clone https://github.com/openssl/op

Re: [openssl-users] SSL_get_peer_certificate returns NULL in client_cert_cb after upgrade to openssl 1.1.1

On 11/10/18 10:25, Matt Caswell wrote: > > > > > > On 10/10/18 23:04, Dave Wang wrote: > >> Hi there, > >> > >> I have a client can talk with server, where the client certificate is > >> loaded in client_cert_cb based on matching the server side

[openssl-users] SSL_get_peer_certificate returns NULL in client_cert_cb after upgrade to openssl 1.1.1

Hi there, I have a client can talk with server, where the client certificate is loaded in client_cert_cb based on matching the server side certificate. it works perfectly in openssl 1.1.0h, however it stops working after I upgrade to openssl 1.1.1. In client_cert_cb , when I call SSL_get_peer_c

[openssl-users] FIPS 2.0.11 build with Visual Studio 2010 fails self-tests

Hello, I hit the exactly the same issue as the one reported here - http://openssl.6102.n7.nabble.com/FIPS-Module-1-2-build-with-Visual-Studio-2010-fails-self-tests-tt36372.html#a36391 Anybody knows if a solution is available now? Thanks so much in advance, Wang -- Sent from: http://openssl

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

My further investigation showed this is a memory leak in my application code rather than an OpenSSL leak. Thanks, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

My further investigation showed this is a memory leak in application code, rather than an OpenSSL one. Thanks, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] OpenSSL 1.0.2n Build Failed on Windows 32bit Platform

Thank you very much, Matthias. It works. Regards, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] OpenSSL 1.0.2n Build Failed on Windows 32bit Platform

efined; assuming extern returning int [exec] NMAKE : fatal error U1077: '"D:\engapps\Microsoft Visual Studio 8\VC\BIN\cl.EXE"' : return code '0x2' [exec] Stop. [exec] Result: 2 Anyone knows how to fix this issue? Any help is appreciated. Thank you in advance,

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

days. Regards, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

ry little time for each client. The RSA object is not released until the server is shutdown. Regards, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

ocs/manmaster/man3/RSA_public_encrypt.html). Or this restriction is undocumented? Regards, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

crpt.c:111) Regards, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

not been fixed for so many years. Thanks, Wang -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] Potential memory leak in RSA_private_decrypt

Hello, The memory usage of one of our OpenSSL applications increases quickly.Valgrind detects the only possible leak below. We are using OpenSSL 1.0.2k. ==9721== 520 bytes in 1 blocks are indirectly lost in loss record 1,178 of1,294 ==9721==at 0x4A0817C: malloc (vg_replace_malloc.c:298) ==9721=

[openssl-users] newer openSSL no longer produce libeay32 on Windows?

Hi list, On windows platform, Some libraries (not openSSL) explicitly link with libeay32.dll, however, it seems openSSL 1.1+ only builds libssl & libcrypto (personally I prefer this, because it is consistent with other *nix platforms). What is the purpose of libeay32? Is it only for 32-bit windows

iOS arm64 question

Hi all, Has anyone run into issues with openssl 0.98y on the Apple iOS arm64 architecture? I built a simple test app with s_client - the SSL connection succeeds with armv7, but fails with arm64 during the SSL handshake. Any input will be much appreciated! Best, Jerry

Module machine type 'x86' conflicts with target machine type 'x64'

Hi, I am trying to generate the fips capable openssl library on Windows. I use "vcvarsall amd64" to set up environment for 64bit. I generated fips object module using the following command: ms\do_fips Then I tried to build fips capable library using the following commands: perl Configure VC-W

Re: Reworking OpenSSL code from using files to reading keys from memory

_ > OpenSSL Project http://www.openssl.org > User Support Mailing Listopenssl-users@openssl.org > Automated List Manager majord...@openssl.org > -- Thank you. Best Regards, Michael(Huaqing) Wang

Re: SSL_Connect call gives SSL_ERROR_WANT_READ for non blocking sockets

use the ssl_connect() by > polling that would be of great help. preferred language would be C/C++ > > thanks, > ~Arjun > > > > > -- Thank you. Best Regards, Michael(Huaqing) Wang

Openssl 1.0.0e: dtls segmentation fault after set SSL_OP_NO_QUERY_MTU

So I am thinking this may be a bug in Openssl 1.0.0e. -- Thank you. Best Regards, Huaqing Wang

OpenSSL unable to load certificate error

Hi, I recently got the latest version of OpenSSL (1.0.0) however I now have a problem with one of my certificates that I didn't use to have in an older version. Specifically, whenever I try to do anything with this particular certificate I run into an: 1472:error:0D0680A8:asn1 encoding routines:

ASN1_UTCTIME Question

Hi, I was just wondering what is the best way for converting type ASN1_UTCTIME* to type char* or string in C++? Thanks in advance, Jerry

RE: does bio_get_mem_data handle unicode?

ok my bad, the question was wrong. here is the real question I have, when I use the routine X509_NAME_print_ex, how can I convert the output to be in unicode format? the result I get currently is just char*. From: swan...@hotmail.com To: openssl-users@openssl.org Subject: does bio_get

does bio_get_mem_data handle unicode?

it appears that this function only handles char*, how should unicode strings be handled? thanks, sean _ Hotmail is redefining busy with tools for the New Busy. Get more from your in

any way to delete a cert from store

is there a conterpart for X509_STORE_add_cert? basically how do I remove a cert from a store. I saw someone posted the question before but got no answers... thanks, _ Hotmail h

RE: pkcs7 cert loading, why this code doesn't work?

IO_new_mem_buf(a, -1); > bio = BIO_push(b64, bio); > > inlen=BIO_read(bio, inbuf, 4096); > > p7 = d2i_PKCS7(NULL, &ptr, inlen); > > I hope this will help. > -- > Mounir IDRASSI > IDRIX > http://www.idrix.fr > > > On 4/3/2010 3:06 AM, sean wang wro

pkcs7 cert loading, why this code doesn't work?

Hello, I have a pkcs7 encoded cert which i want to load. the following code block works fine: ( I am doing a base64 decoding first, will explain the reason in the second half): BIO *bio, *b64; PKCS7 * p7; b64 = BIO_new(BIO_f_base64()); BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL); bio

get x509 common name

Hi, Does OpenSSL have a function for getting the common name from a X509 certificate? Thanks, Jerry

Re: creating a certifiicate chain

On 06/06/2009 05:35 PM, Jerry Wang wrote: > >> Hi, >> >> Does OpenSSL already have a function for creating a certificate chain? >> >> Thanks, >> Jerry >> > > > Jerry, > > It depends how you mean it. Do you want OpenSSL to create the Ro

creating a certifiicate chain

Hi, Does OpenSSL already have a function for creating a certificate chain? Thanks, Jerry

X509_STORE_CTX usage

Hi, I have a question about using X509_verify_cert(X509_STORE_CTX) - Where does the root certificate get populated in the struct X509_STORE_CTX, is it suppose to be included? Thanks, Jerry

X509_verify_cert question

Hi, I have a question about using X509_verify_cert(X509_STORE_CTX) - Where does the root cert go for X509_STORE_CTX, is it suppose to be included? Thanks, Jerry

How to parse pem file

Hi all, Do you know which API could parse pem file of certificate? Then we could get version/validate/serial number and etc. Thanks! Regards, Leo

openssl 0.9.4

Hi All, Could you give me quick reply that whether openssl 0.9.4 could support multi-threads application? Thanks and regards, Leo

About OPENSSL platform

Hi All, Could you do me a favor to know whether openssl support to run on opteron (AMD) platform? If yes, which version? And how to set configure file? Thanks and regards, Leo

test

Thanks!

How to add X509v3 Subject Alternative Name into the cert by using openssl?

Hi, I am looking for a solution to add X509v3 Subject Alternative Name into the cert with openssl. The subject Alternative Name I need to add is in the format of Other Name: Principal [EMAIL PROTECTED] Can any one show me how to achieve it? I really appreciate your help. Thanks, Yang

Re: BN_hex2bn() failed but ERR_get_error() returned no error?

Thanks, Tim. Maybe I should look at the code sometime if it's not too difficult for me to understand. :) On Thu, Sep 18, 2008 at 13:01, Tim Hudson <[EMAIL PROTECTED]> wrote: > Clark J. Wang wrote: > >> Hi list: >> >> I'm new to OpenSSL and have a problem w

BN_hex2bn() failed but ERR_get_error() returned no error?

Hi list: I'm new to OpenSSL and have a problem when trying BIGNUM usage. The function ERR_get_error() returned 0 when BN_hex2bn() failed: #include #include #include int main() { int r; char * dec, * hex = "x"; char errmsg[256]; BIGNUM * b1 = NULL; unsigned long err;

How to convert X509 object into a description string?

Dear all, How to convert an X509 object retrieved from d2i_X509 into a descriptive string? Or how to convert a DER format array retrieved from i2d_X509 into a descriptive string? Or are there any APIs easy to use to retrieve entries in a certificate object such as "issuerName" and "serialNumber"

Using OpenSSL cryptographic functions in a multi-threaded application

functions nor have we put critical sections in our own code before calling the cryptographic functions. We are experiencing some crashes and attempting to track them down and thought our use of OpenSSL may be faulty. Thanks Regards Lide Wang

Using OpenSSL cryptographic functions in a multi-threaded application

functions nor have we put critical sections in our own code before calling the cryptographic functions. We are experiencing some crashes and attempting to track them down and thought our use of OpenSSL may be faulty. Regards, Lide Wang

Re: How to set my custom information in certificate

You mean that I should write down my custom information in openssl.cnf, and then load the custom information to extension of proxy by openssl command, isn't it? yes If I want to do this job by standard openssl API, how to accomplish this/ A rough sketch would be: // set up context X509V3_s

Re: How to set my custom information in certificate

Yes, you can add custom extension info through configuring openssl.cnf and with right openssl command. Feiyi On 7/5/07, Ian jonhson <[EMAIL PROTECTED]> wrote: Hi all, Did anyone try to set some custom information in certificate? For example, if I want to set a simple string, "This is my proxy

Re: source code of function i2d_X509()

i got it. thank you very much From: "Victor B. Wagner" <[EMAIL PROTECTED]> Reply-To: openssl-users@openssl.org To: openssl-users@openssl.org Subject: Re: source code of function i2d_X509() Date: Fri, 23 Mar 2007 13:59:27 +0300 On 2007.03.22 at 17:45:33 -0700, LIDA WANG wrote:

source code of function i2d_X509()

Could anyone tell me where i can find the source code of function i2d_X509()? thanks a lot. _ Exercise your brain! Try Flexicon. http://games.msn.com/en/flexicon/default.htm?icid=flexicon_hmemailtaglinemarch07 __

Re: body part of function i2d_DHparams()

PROTECTED]> Reply-To: openssl-users@openssl.org To: openssl-users@openssl.org Subject: Re: body part of function i2d_DHparams() Date: Tue, 28 Mar 2006 15:54:49 +0200 On Mon, Mar 27, 2006, LIDA WANG wrote: > Does anyone know how to find the body part of function i2d_DHparams()? I > can on

Re: body part of function i2d_DHparams()

ct: Re: body part of function i2d_DHparams() Date: Mon, 27 Mar 2006 20:42:57 +0200 LIDA WANG wrote: Does anyone know how to find the body part of function i2d_DHparams()? I can only find the definition part of this function I think it is created by the macro IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fna

Re: body part of function i2d_DHparams()

yes, it is defined there. thank you very much. From: Bernhard Froehlich <[EMAIL PROTECTED]> Reply-To: openssl-users@openssl.org To: openssl-users@openssl.org Subject: Re: body part of function i2d_DHparams() Date: Mon, 27 Mar 2006 20:42:57 +0200 LIDA WANG wrote: Does anyone know how t

body part of function i2d_DHparams()

Does anyone know how to find the body part of function i2d_DHparams()? I can only find the definition part of this function _ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url

Arc4 patent and trade mark issue.

Hello, In openssl, doese anyone knows if i use arc4, will i end up a legal issue with RSA? in another words, is arc4 100% safe to use regarding patent and trade mark issue? i appreciate any help. __ OpenSSL Project

Re: Unimplemented stat function in wcecompat-1.2 causes error in OpenSSL-0.9.8a

k at the code at http://karajan.it.uc3m.es/~pervasive/wce_lite_compat/   Daniel Díaz http://www.it.uc3m.es/dds   De: owner- openssl-users@openssl.org [mailto:owner- openssl-users@openssl.org] En nombre de Michael Wang Enviado el: miércoles, 01 de febrero de 2006 20:32 Para: openssl-users@openssl.org

Unimplemented stat function in wcecompat-1.2 causes error in OpenSSL-0.9.8a

I just fixed an interesting problem I was having with OpenSSL-0.9.8a running with the wcecompat-1.2 library on WinCE5.0. I have multiple CA certs in a cert directory hashed by the c_rehash function.  The CA certs are in a hierarchy 2 levels deep.  My app (wpa_supplicant) is running as a client.  W

Support for multiple client side cert+key ala Windows?

Hi OpenSSL gurus, I recently discovered that I can import mulitple client side certificate and private keys into the "MY" store, and Windows will automatically pick the right client certificate based on the CAs listed in the Certificate Request message. Does OpenSSL have such a feature?  Looking

Re: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

Thanks Andy! Michael On 8/11/05, Andy Polyakov <[EMAIL PROTECTED]> wrote: > > 5. I still needed to change the MLFLAGS and LFLAGS in cedll.mak and > > ce.mak from machine:ARM to machine:thumb. Otherwise, the compiler > > compains about an incompatibility with winsock.lib (winsock.dll), > > which

Re: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

OK, I downloaded wcecompat 1.1 and openssl-0.9.8-stable-SNAP-20050810 and rebuilt everything again. Things are much, much better now. Of the items below, I think only #2 and #5 suggest a fix is needed in wcecompat and openssl. The others itmes are responses to previous emails. 1. I fixed my %IN

Re: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

On 8/9/05, Steven Reddie <[EMAIL PROTECTED]> wrote: > I wrote wcecompat solely for the OpenSSL port (but with a view to using it > for other things), so I guess you could say I'm more of an OpenSSL-er than a > Windows CE-er. > > Do you know if a similar change needs to be made for ARMV4T? > Sorr

Re: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

On 8/9/05, Andy Polyakov <[EMAIL PROTECTED]> wrote: > What were your %INCLUDE% and %LIB% upon nmake time? C:\tmp\newwcecompat\wcecompat>set CC=clarm.exe CFG=none include=C:\Windows CE Tools\WCE420\POCKET PC 2003\include\ARMV4I;C:\Windows CE T ools\WCE420\POCKET PC 2003\MFC\include;C:\Windows CE T

Re: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

7;ve put a new wcecompat.zip up at essemer.com.au which includes ENOMEM and > EAGAIN. The remainder of the problems need to be corrected in OpenSSL. > > Regards, > > Steven > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On

openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

Hi, I downloaded openssl-0.9.8-stable-SNAP-20050805 and compiled it for my Windows CE platform and had a few problems. In general though, the code (for WinCE) has been much improved over the 0.9.8 release; good job openlssl developers! Here are a couple of issues I had. 1. In the CFLAGS define,

Re: What's the state of WinCE support in Openssl-0.9.8?

OK. I've downloaded the 20050805 stable snapshot and did some compiles. I'll post my experiences on a separate thread. Michael On 8/3/05, Andy Polyakov <[EMAIL PROTECTED]> wrote: > > As for the source of randomness, it looks like the 0.9.8 release makes > > the appropriate set of WinCE calls t

Re: OpenSSL issue with xsupplicant

On 8/6/05, Shane Stixrud <[EMAIL PROTECTED]> wrote: > I am attempting to use xsupplicant to connect my fedora 4 laptop to a Open > / static wep / eap-tls enabled cisco wireless network with Cisco ACS > radius server and a Microsoft CA, everything works fine if I just use wep > and avoid EAP-TLS. >

Re: What's the state of WinCE support in Openssl-0.9.8?

date. > > Brant Thomsen > Sr. Software Engineer > Wavelink Corporation > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Michael Wang > > Sent: Monday, July 25, 2005 12:17 PM > > To: openssl-users@openss

What's the state of WinCE support in Openssl-0.9.8?

Hi, I've actually got openssl-0.9.8 compiled and working on WinCE 5.0. But I've had to make a few changes to the source code and compilation files. Just wondering if anyone else is actively using (and more importantly) testing openssl on WinCE? Just to give an example of one minor change I had

Why my program cannot sign/verify correctly when the signature is less than 64

Recently, I began to work on OpenSSL program. When I try to sign/verify a file with RSA algarism, my program shows some strange fault. The OpenSSl I worked on is version 0.97d. I read the file into a buffer and call EVP_SignUpdate function repeatedly as below:

SubjectAltName and two names in one certificate

I used openssl to create a certificate to remove the warning from the browser: "The name on the security certificate is invalid or does not match the name of the site". Once I added IP address in the commonName field in my configure file, the warning was successfully removed whenever I used this IP

RE: OpenSSL Thread-safe Issue ?

s, > > Steven > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Jim Wang > Sent: Thursday, 25 September 2003 8:31 AM > To: [EMAIL PROTECTED] > Subject: OpenSSL Thread-safe Issue ? > > > Hi, > > I hav

OpenSSL Thread-safe Issue ?

Hi, I have a server program using OpenSSL. It works well most of the time. However, when multiple clients connect to the server simultaneously, the server sometimes crashes with an access violation in the following code: /* locked by SSL_CTX in the calling function */ static void SSL_SESSION_list

"bad record mac" error

Recently I found that SSL-enabled server using openssl (version 0.9.6j) can not talk correctly to Netscape browser (and IE). I am using stunnel v4.04 as SSL server to accept https requests from client browsers, but client browsers always complain of "bad message authentication". The stunnel log

Any known problem/crash in SSL_connect?

Hi, I have a SSL application that crashes with SEGV signal during a call to SSL_connect() (backtrace follows). This happens only once during weeks of running so I wonder if there is any known corner issue regarding SSL_connect(). I am using RedHat Linux 7.1 with openssl version 0.9.6f. Backtrace:

Re: reference count of SSL session

CTX basis.. > > Aslam > > -Original Message- > From: Haihong Wang [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, September 10, 2002 2:43 PM > To: [EMAIL PROTECTED] > Subject: reference count of SSL session > > Hi, all, I am writing some programs using openssl 0.9.6

reference count of SSL session

. -- Haihong WangSoftware Engineer Voice: 408-853-6974 Email: [EMAIL PROTECTED] Cisco Systems, Inc. __ OpenSSL Project http://www.openssl.org

[no subject]

hi,  On install Openss0.9.6e, When I do nmake -f ms\ntdll.mak There is a lot of problems. For instance,it shows it can't find stdlib.h and string.h in cryptlib.c and other problems. Please tell me: how can I solve this problem. my platform is win2000 sp 2 and visual c++ 6.0. thanks! Jerr

Can't compile 0.9.6c on WinNT server

I tried to following the instructions in Install.w32 to build openssl 0.9.6c on WinNT server. I have VC++6 sp 4 and ml installed on the nt box. I have modified all the path, include, lib env variables to be correct. But I got the following errors while compiling hw_aep.c when I do a build using

RE: build in HP using aCC compiler

    web   : www.targusinfo.com _____ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Wang, Kate Sent: Tuesday, November 13, 2001 6:37 PM To: '[EMAIL PROTECTED]'; '

build in HP using aCC compiler

Hi, Has anyone been able to build openssl on HP using aCC(c++) compiler? Thanks. kate __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Auto

output format of PKCS7

Hi all, In my application, I called PKCS7_encrypt() to encrypt a document. When I call PEM_write_bio_PKCS7(out, p7) to write the encrypted document out to a file, the encrypted content always has --- BEGIN PKCS7 --- --- END PKCS7 --- wrapped arround it. And when I call PKCS7_decrypt(), it alwa

How to convert a PKCS8 private key to a RSA private key

Hi, all, Could anyone give me some advice on how to convert a PKCS8 private key into a RSA private key? Will openssl pkcs8 do the trick? The reason I ask is that we used RSA BSAFE SSL-J library before and now we switched to openssl in our application, We need a conversion tool to convert old p

Extract private key components from a RSA key

Hi, Can somebody tell what the api I can use to extract the private key component from RSA key is? There is a command : openssl rsa -inform PEM -in key.pem -text to display the private key components. However, what I need is a api to use in my application? Thanks, Best regards, Wall

change PKCS12 password

Hi, all, I am a new user to Openssl, sorry for the naive question. What is the exact command used to change PKCS12 password using Openssl? Thanks. Kate __ OpenSSL Project http://www.openssl.org

IE40 and windows NT Service Pack 5 or less on Windows NT platform give us error message.

Dear User support staff: When I access my server https://ofx.automatedfinancial.com I got login screen. after I enter userID and password. and click Login button. An error message pop up and I do not know what cause it . Internet Exploreer canneot open the Internet site https://ofx.automatedfina

RE: OpenSSL SMIME Signature Verification Chain Trust vs. Direct Trust

again for your help. Kate -Original Message- From: Dr S N Henson To: [EMAIL PROTECTED] Sent: 7/29/01 8:21 PM Subject: Re: OpenSSL SMIME Signature Verification Chain Trust vs. Direct Trust Kate Wang wrote: > > Hi, all, > > It seems to me that for SMIME siganture verificatio

OpenSSL SMIME Signature Verification Chain Trust vs. Direct Trust

Hi, all, It seems to me that for SMIME siganture verification, ALL CA certificates (including root and intermediate CAs) have to be included in the CA file specified in -CAfile option. I don't really understand why this should be enforced. In earlier version of OpenSSL there is an option -NOCH

how to extract the value of NID_netscape_comment extension?

I tried to use the function, gens = X509_get_ext_d2i(x509,NID_netscape_comment,NULL,NULL); just like the X509_get1_email() does to extract the value of the extension. but null returned. is it the right way to extract the netscape comment value out of the X509 cert? Thanks, Jason __

unsupported cypher...

Please help... I was trying to read RSA private key that was written with encryption. error occured. The error is: 11002:error:0906B072:PEM routines:PEM_get_EVP_CIPHER_INFO:unsupported encryption:pem_lib.c:506: a clean up version of the code segment is as follows: FILE * fp; fp = fopen("out

problem run test after installing ssleay 0.8.1b

Title: problem run test after installing ssleay 0.8.1b Hi, I am new to openssl and I install ssleay 0.8.1b on to NT4, the compiler is VC++6. Following is what I encounter. >perl Confirure VC-WIN32 >nmake -f ms\ntdll.mak (everything is fine so far) >cd ms >test and get the following error

how to generate x509 certificate programaticaly...

Please I am looking for examples and/or instructions on how to generate x509 certificates with the API provided by the openssl libraries. any help would be greatly appreciated! Thanks, Jason __ OpenSSL Project

Re: Library available outside the USA ?

Hi, Does this mean we can not ship the product to outside of US if it is static linked to libcrypto.a? If this is the case, is there a way to build a exportable version of library that can be used outside the US? Any compile options to build subset of the libcrypto.a? Thanks very much, Miha >

Re: IIS client authentication?

> it's location is listed in the client cert. > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Steve Wang > Sent: Friday, October 27, 2000 11:45 AM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: IIS client authentica

IIS client authentication?

Hi, all, One question for a case where strong CLIENT authentication is needed: we use open ssl on client side and use Microsoft IIS on the server side. How will the Microsoft IIS check the validity of the client certificate? Will it need to validate the whole certificate chain? Is it configurab

keys?

Hello, all,   I am trying to set up a SSL server, using the "openssl s_server".  It has an argument, "-key keyfile". What format should be the key in?   Thank you! Steve

Can anyone send me a sample about SSL client?

Hi, I am a newcomer. I am interested in writting a client program in C to send HTTPS request and communicate with HTTPS server. But I don't know how to use OpenSSL/SSLeay suite to do so? Can you give a sample or details manual about OpenSSL/SSLeay? thanx a lot. David.

Re: 0.9.6 beta Test failure

There was no particular reason for using brokengcc. I used it because I had to for 0.9.5a (hpux-gcc failed to compile). I used hpux-gcc for 0.9.6-beta1 afterwards, and the failure is gone! Richard Levitte - VMS Whacker wrote: > > From: John Wang <[EMAIL PROTECTED]> > > jjw

Using SSL_accept with non blocking socket

Hi, all - I am trying to write both sever/client that using non blocking socket. I am not using BIO based read/write. Here is what my code look like - The code is almost same as the serv.cpp and cli.cpp under demos/ssl, except I am seting non blocking option (O_NONBLOCK) SERVER:

RE: HELP NEEDED: Persist connection

the connection Is this a bug? any comments? Thanks, Miha > -Original Message- > From: Arun Venkataraman [mailto:[EMAIL PROTECTED]] > Sent: Thursday, August 24, 2000 9:57 AM > To: [EMAIL PROTECTED] > Cc: Miha Wang > Subject: Re: HELP NEEDED: Persist connect

  1   2   >