Re: X509_verify() failing to verify valid certificate in old OpenSSL versions

2013-11-16 Thread Dimitrios Apostolou
On Fri, 15 Nov 2013, Dr. Stephen Henson wrote: On Fri, Nov 15, 2013, Dimitrios Apostolou wrote: On Fri, 15 Nov 2013, Dr. Stephen Henson wrote: If the certificate contains no useful information then why check it at all other than to make sure it carries the correct public key? I was not sur

Re: X509_verify() failing to verify valid certificate in old OpenSSL versions

2013-11-14 Thread Dimitrios Apostolou
On Thu, 14 Nov 2013, Dr. Stephen Henson wrote: On Thu, Nov 14, 2013, Dimitrios Apostolou wrote: + *) Don't reencode certificate when calculating signature: cache and use + the original encoding instead. This makes signature verification of + some broken encodings work correctly. Can

Re: X509_verify() failing to verify valid certificate in old OpenSSL versions

2013-11-14 Thread Dr. Stephen Henson
On Thu, Nov 14, 2013, Dimitrios Apostolou wrote: > some time now I'm having problems with X509_verify() from > openssl-1.0.0-27.el6_4.2.i686 shipped with latest RHEL 6. The > problem is that a self-signed certificate that I generate and verify > on the server side, fails to verify on the client si