Export Control

2001-09-06 Thread michael luch
Hello, I'm using openssl 0.96b (in the EU/ US) and have a question regarding ciphers and current export controls. When I create two peers and establish a connection the cipher seems to be EXP1024-RC4-SHA with the actual strength at 56 bits. This seems to be export constrained somehow in the

cert expiry dates

2001-01-25 Thread michael luch
I want to figure out in how many days a cert will expire. I want to do this so I can flag the user that their cert is about to expire (n a week, say). What API should I use for this? thanks, Michael. _ Get Your Private, Fre

No Subject

2000-09-12 Thread michael luch
Hello, for a bespoke client/server application, I wish to include an extension to x509 certificates that contains an integer value only. What is the best way to set about this? I imagine I can add a completely new extension (this seems nontrivial) or perhaps overload an existing extension. O

Embedded CA certificate and certificate store.

2000-08-18 Thread michael luch
Hello, I wish to embed a CA certificate in my application binary, rather than load it from a file. However I don't know how to add my CA certificate (in X509 format) to the certificate store. Currently, when loading from a file I use SSL_CTX_load_verify_locations. My question is what functio