Re: Strange behaviour

2013-10-08 Thread Walter H.
I thought similar, but it becomes more strange; if the webserver uses a certificate that is signed from a CA with built in token, then this needn't be; and in case it is signed from my internediate certificate, this doesn't help ... Greetings, Walter On 07.10.2013 09:39, Mat Arge wrote: Jus

Re: Strange behaviour

2013-10-07 Thread Mat Arge
Just a wild guess: If you click on "edit trust" on the root certificate in Firefox, you have to tick the box for web server certificates. cheers Mat On Friday 04. October 2013 21:29:57 you wrote: > Hello, > > there exists a self signed root CA certificate (A) > one intermediate CA certificate (

RE: Strange behaviour: chain with AIA fails in Firefox

2013-10-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Walter H. > Sent: Friday, October 04, 2013 15:30 > there exists a self signed root CA certificate (A) > one intermediate CA certificate (B) > and this intermedia certificate has signed a SSL certificate (C) of a > web server; > [and C and B have

Re: strange behaviour of clock() with DH_generate_key

2007-12-05 Thread Koza
Koza wrote: > > I try to measure time of generating a key for DH. I have a code alike: > startclk = clock(); > for (i=0;i DH_generate_key(a); > stopclk = clock(); > I know the anser now, it was my fault since not DH_generate_key takes a long time but DH_generate

Re: Strange behaviour

2001-03-27 Thread Lutz Jaenicke
On Tue, Mar 27, 2001 at 10:19:43AM +0200, Oscar Renalias wrote: > As IMP does not support SSL natively yet, we are using openssl c_client I suppose you meant openssl "s_client". > Everything works fine except for one thing. We don't know if it's a > php/imp issue, an imap issue or an openssl iss

Re: Strange behaviour with SSL_CTX_set_verify

2001-03-23 Thread Filipe Contente
w() did the job of fixing > the problem. > > Ramdas > > -Original Message- > From: Greg Stark [mailto:[EMAIL PROTECTED]] > Sent: Thursday, March 22, 2001 5:51 PM > To: [EMAIL PROTECTED] > Subject: Re: Strange behaviour with SSL_CTX_set_verify > > You n

RE: Strange behaviour with SSL_CTX_set_verify

2001-03-22 Thread Hegde, Ramdas
Thanks Greg Moving the SSL_CTX_set_verify() above the SSL_new() did the job of fixing the problem. Ramdas -Original Message- From: Greg Stark [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 22, 2001 5:51 PM To: [EMAIL PROTECTED] Subject: Re: Strange behaviour with SSL_CTX_set_verify

Re: Strange behaviour with SSL_CTX_set_verify

2001-03-22 Thread Greg Stark
You need to do the SSL_CTX_set_verify() *before* you do the SSL_new(). The SSL * sort of inherits all of the settings from the parent SSL_CTX *, kind of like a fork(). If you need to customize a setting for a particular SSL session, you do this to the SSL * object. ___