Re: building openssl tests

2007-12-11 Thread Peter Waltenberg
Looks like some expired certificates are the only problem, you can see the explicit warning from that early on, then some SSL failures later because the cert's won't verify. (Been known to happen to other people's SSL packages as well). You can probably recreate them yourself if you are

Re: OS390-Unix (EBCDIC) - a fix for x509_vfy.c

2007-12-11 Thread Dr. Stephen Henson
On Mon, Dec 10, 2007, JBYTuna wrote: This a first time post for me on this list. We have been chasing a problem, using OpenSSL on z/OS (OS/390) for several years. The problem surrounded 2-way authentication, with the SSL server on z/OS. Although the proper client is sent to the server,

Problem if CERT expires after Tue Jan 19 04:14:08 CET 2038

2007-12-11 Thread Kretschmer, Andreas
Hallo, I got a problem with long living certificates. Today I created a certificate valid for 11000 days. (No Problem!). But if I generate the next certifikate with the same validation period I get entry 1064: invalid expiry date. If I remove the last line of index.txt I am able to generate one

const parameter in RSA_verify*

2007-12-11 Thread Luis Recuerda Santiago
Hello, I have found that in the definition of the functions RSA_verify, RSA_verify_ASN1_OCTET_STRING and in the member rsa_verify of the struct rsa_meth_st, the type of the parameter sigbuf is 'unsigned char *', but I think this type should be 'const unsigned char *'. The pointer to the buffer

Re: OpenSSL FIPS Object Module v1.2

2007-12-11 Thread Steve Marquess
Kyle Hamilton wrote: I'm trying to point out something that I perceive as an issue in the organizational intelligence. ...big snip... To make plain the changes that I'd like to see, in order of my perception of possibility/likelihood: a) I would like to see the the addition of ability for