Checking CRL

Thanks to openssl.org, and Lutz, I have made a client server connection using DH for key negotiation, and RSA for checking both client and server. Of course I would like to check the CRL (I use openssl 0.9.7) I have made an AC certificate, 3 client's certificates; the 3rd is now invalid in the

Re: Checking CRL

On Thu, Jan 16, 2003 at 11:38:40AM +0100, p b wrote: Thanks to openssl.org, and Lutz, I have made a client server connection using DH for key negotiation, and RSA for checking both client and server. Of course I would like to check the CRL (I use openssl 0.9.7) I have made an AC

ASK OPENSSL: CRL extensions

Hi all, I have one question for you. I want to check extensions added to a CRL entry but I do not know how to access informations. Actually I use the code: rev = X509_CRL_get_REVOKED(crl); for(i = 0; i sk_X509_REVOKED_num(rev); i++) { r = sk_X509_REVOKED_value(rev,

[openssl.org #461] Minor makefile/ranlib problem in crypto/{engine krb5ocsp ui}

OpenSSL version: 0.9.7 Platform: HP-UX 11.00 Severity: Minor Hello, I just rebuilt OpenSSL 0.9.7 on several platforms (OpenVMS, Solaris, Linux, HP-UX, WinNT). The make failed on HP-UX due to a minor problem in the following four makefiles (all new in 0.9.7 AFAIK):

Re: [openssl.org #461] Minor makefile/ranlib problem in crypto/{enginekrb5ocsp ui}

$(RANLIB) $(LIB) || echo Never mind. How about putting a leading minus sign; it's simpler. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL

Re: [openssl.org #461] Minor makefile/ranlib problem in crypto/{engine krb5ocsp ui}

$(RANLIB) $(LIB) || echo Never mind. How about putting a leading minus sign; it's simpler. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL

[openssl.org #461] Minor makefile/ranlib problem in crypto/{engine krb5ocsp ui}

[[EMAIL PROTECTED] - Thu Jan 16 18:06:21 2003]: OpenSSL version: 0.9.7 Platform: HP-UX 11.00 Severity: Minor Hello, I just rebuilt OpenSSL 0.9.7 on several platforms (OpenVMS, Solaris, Linux, HP-UX, WinNT). The make failed on HP-UX due to a minor problem in the following four

Re: [openssl.org #461] Minor makefile/ranlib problem in crypto/{engine krb5ocsp ui}

Rich Salz via RT wrote : $(RANLIB) $(LIB) || echo Never mind. How about putting a leading minus sign; it's simpler. Sure. My proposal was just to make it consistent with other Makefiles in OpenSSL sources. -Thierry

Re: [openssl.org #444] Win32 crash in PEM_read_X509

At 06:02 PM 1/15/2003 +0100, you wrote: If you just can't figure out Just to clarify. The posted patch is not so to say try-your-luck thing, it *does* get me through the ms\test. Understood, but it was unclear if it fixed the bug I posted in the PEM read, which is very likely a similar

Re: [openssl.org #444] Win32 crash in PEM_read_X509

what did you do to get tunala to compile under Win32? Oh, that. I have been meaning to send Geoff the diff so it could get merged into the code base. I'll get to it some day. I had to wrap up sockets a little and make a few mods in ip. Here is a zip of it with the DSP. Some project

[openssl.org #462] Enable cryptodev engine for /dev/crypto on FreeBSD

Hello, The following modifications (or similar) are needed to enable cryptodev support on FreeBSD (which has imported OpenBSD's /dev/crypto). FreeBSD's /dev/crypto is available in 5.0-RELEASE and in 4-STABLE (and the upcoming 4.8-RELEASE). Cheers, -- Jacques A. Vidrine [EMAIL PROTECTED]

[openssl.org #462] Enable cryptodev engine for /dev/crypto on FreeBSD

Thanks. The patch is applied and committed. This ticket is now resolved. [[EMAIL PROTECTED] - Thu Jan 16 19:05:40 2003]: Hello, The following modifications (or similar) are needed to enable cryptodev support on FreeBSD (which has imported OpenBSD's /dev/crypto). FreeBSD's /dev/crypto

Re: ASK OPENSSL: CRL extensions

On Thu, Jan 16, 2003, Massimiliano Pala wrote: Hi all, I have one question for you. I want to check extensions added to a CRL entry but I do not know how to access informations. Actually I use the code: rev = X509_CRL_get_REVOKED(crl); for(i = 0; i

Re: ASK OPENSSL: CRL extensions

On Thu, Jan 16, 2003 at 03:37:04PM +0100, Massimiliano Pala wrote: Hi all, I have one question for you. I want to check extensions added to a CRL entry but I do not know how to access informations. Actually I use the code: rev = X509_CRL_get_REVOKED(crl); for(i = 0; i

[openssl.org #444] Win32 crash in PEM_read_X509

[[EMAIL PROTECTED] - Thu Jan 16 18:39:44 2003]: what did you do to get tunala to compile under Win32? Oh, that. I have been meaning to send Geoff the diff so it could get merged into the code base. I'll get to it some day. I had to wrap up sockets a little and make a few mods in

Re: Use of ENGINE by naive applications

* Jacques A. Vidrine ([EMAIL PROTECTED]) wrote: Prepare for a possibly dumb question. :-) No, it's a good question. How are existing applications generally supposed to take advantage of ENGINE? I notice that in crypto/evp/c_all.c, there is an OpenBSD-specific hook to enable the `cryptodev'

Problem decrypting a signed and then encrypted pkcs7 message on windows 98 using Crypto API

Hi I apologize for this annoying win32 spam. I have google'd a lot but still couldn't find the exact reason why a windows 98 with IE 6.0 box would fail to decrypt a signed and then encrypted pkcs7 message that I generated using openssl 0.9.6g. When the message is EVP_des_ede3_cbc() encrypted,

Apparent bug: OpenSSL 0.9.7 crypto/evp_enc.c EVP_DecryptInit()

I've searched the archives, don't find a mention of this, and the Jan 15 snapshot has the same apparent bug. I'm not absolutely sure, and even if I'm right it's a one-line fix so I'm hoping one of the active members would be willing to patch it. [[By the way, the webpage form to submit to

openssl-SNAP-20030116 won't compile on Win32

Hello, I just got the latest snapshot (openssl-SNAP-20030116.tar.gz) to update my local OpenSSL, and it chokes part way through the Win32 build. I did the `perl Configure VC-WIN32` and `ms\do_ms` to prepare and `nmake -f ms\ntdll.mak` to try and make. The errors from nmake are as follows: cl

Re: Problem decrypting a signed and then encrypted pkcs7 message on windows 98 using Crypto API

On Thu, Jan 16, 2003, Himanshu Soni wrote: Hi I apologize for this annoying win32 spam. I have google'd a lot but still couldn't find the exact reason why a windows 98 with IE 6.0 box would fail to decrypt a signed and then encrypted pkcs7 message that I generated using openssl 0.9.6g.

Re: Apparent bug: OpenSSL 0.9.7 crypto/evp_enc.c EVP_DecryptInit()

On Thu, Jan 16, 2003, Larry West wrote: I've searched the archives, don't find a mention of this, and the Jan 15 snapshot has the same apparent bug. I'm not absolutely sure, and even if I'm right it's a one-line fix so I'm hoping one of the active members would be willing to patch it.

RE: Problem decrypting a signed and then encrypted pkcs7 message on windows 98 using Crypto API

I am running IE 6.0 with cipher strength of 128 bit. Is there an additional security patch that I need to install even if the About Box says that its 128 bit? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dr. Stephen Henson Sent: Thursday, January