Re: How to use ocsp in openssl

2012-06-22 Thread Alexander Komyagin
Thank you for the feedback, JT. I'm glad that you've found my patch useful. Good if it works for 1.0.1c, because I only tested it with 1.0.1a. On Thu, 2012-06-21 at 17:28 +0400, JT Rosin wrote: > After hours of desperately trying to implement some kind of working ocsp > check (using the code from

Re: How to use ocsp in openssl

2012-06-21 Thread JT Rosin
After hours of desperately trying to implement some kind of working ocsp check (using the code from apps/ocsp.c) in the verification callback i finally gave up and applied Alexander Konyagin's patch (found a new message from him with updated one) to 1.0.1c sources that i previously downloaded. I j

Re: How to use ocsp in openssl

2012-06-20 Thread jb-openssl
Of cause you shouldn't write your own OCSP code. OCSP is already part of the OpenSSL library and the file apps/ocsp.c shows how to use it. Alexander Konyagin's patch from 12 days ago doesn't seem to have been reviewed or commented by anybody else, so I am not sure if it is because he also posted

Re: How to use ocsp in openssl

2012-06-20 Thread JT Rosin
hi, Jakob! Though it may work, i personally don't think that it's a good idea to implement ocsp code myself! Not only because I'm a lazy guy, but mainly for practical reasons :-) In google I found that some guy had already made a patch that brings some kind of ocsp client functionality to openssl

Re: How to use ocsp in openssl

2012-06-20 Thread Jakob Bohm
Look in the openssl source code in the "apps" directory. There you will find the source code for each of the openssl command line subcommands (including "openssl ocsp"). Use this as inspiration for how to do the ocsp directly in your code. For most of the openssl command line subcommands, the c

Re: How to use ocsp in openssl

2012-06-20 Thread JT Rosin
Any help on this?? On Mon, 2012-06-18 at 15:32 +0400, JT Rosin wrote: > Hello to everybody!! > > I'm writing a client/server app with communication over SSL. Every setup > can be a server or a client so I think I could benefit from using ocsp > for validation purposes! > > I'm very new to openss