RE: SSL_read() returns SSL_ERROR_SYSCALL

2009-06-10 Thread chithuanand
Please see my comments inline. Does the server/service report (usually log) anything relevant to your access/connection/request/whatever? In particular, if it logs something about server error you need to look there. If it too reports seeing a reset, coming from your direction, then you

Universal Principal Name

2009-06-10 Thread Marco Monacelli
I using de Demos CSR example for generate a CSR with Openssl Library. I serch a sample for create CSR witch Universal Principal Name Value. for sample mail value I using this: add_ext(exts, NID_subject_alt_name, email:st...@openssl.org); But if I must add UPC to this extension a dont'know how

Re: get x509 common name

2009-06-10 Thread Martin Kaiser
Hi Jerry, Thus wrote Jerry Wang (jerry...@gmail.com): Does OpenSSL have a function for getting the common name from a X509 certificate? how about something like X509 *cert; X509_NAME *subjectName; char subjectCn[256]; subjectName = X509_get_subject_name(cert); X509_NAME_get_text_by_NID(

Help For Compiling 64bit program of OpenSSL

2009-06-10 Thread Joe Zou
Hi, I will compile 64bit program, so I need 64bit OpenSSL library. But, I don't know how to compile 64bit OpenSSL library. Could you tell me how to do? Thank you very much 2009-06-10 Joe Zou

Re: Help For Compiling 64bit program of OpenSSL

2009-06-10 Thread Marco Monacelli
you try recompilation on Windows system or on Unix sistem ? 2009/6/10 Joe Zou joe.zoux...@gmail.com: Hi, I will compile 64bit program, so I need 64bit OpenSSL library. But, I don't know how to compile 64bit OpenSSL library. Could you tell me how to do? Thank you very much 2009-06-10

RE: SSL_read() returns SSL_ERROR_SYSCALL

2009-06-10 Thread chithuanand
hi, We have tried settiong the ciphersuite using SSL_CTX_set_cipher_list(), as eNULL/NULL-MD5/DEFAULT. But we get handshake error. In the server also we have tried giving the encryption= true and cipherlist to all of the above settings. eNULL/NULL-MD5 /any null values give handshake error.

RE: SSL_read() returns SSL_ERROR_SYSCALL

2009-06-10 Thread Shaw Graham George
Is the server IIS? And do you get all of the response? Because IIS doesn't necessarily close SSL connections in a tidy manner - it can give SSL_ERROR_SYSCALL. G. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of chithuanand

Re: Not so Ancient History

2009-06-10 Thread Paul Rogers
On Tue, 9 Jun 2009 22:54:41 -0700, Kyle Hamilton aerow...@gmail.com said: Did you run './config 386'? Mostly I was following a LFS page: # linux-elf is close, but we need -march=i386 instead of -m486 cp Configure{,.backup} sed '/^linux-elf/s/486/386/' Configure.backup Configure rm -f

Re: Not so Ancient History

2009-06-10 Thread Paul Rogers
Did you run './config 386'? OK, so I changed my script to try THAT: # linux-elf is close, but we need -march=i386 instead of -m486 #cp Configure{,.backup} #sed '/^linux-elf/s/486/arch=i386/' Configure.backup Configure #rm -f Configure.backup #(Configure 386 linux-elf --prefix=/usr

Re: Not so Ancient History

2009-06-10 Thread Carter Browne
When I looked at the Configure script in the past, the only way I say to get an entry for x86 Linux was to modify the script itself. It does not look at CFLAGS or CSSFLAGS to get the CPU options. Carter Carter Browne CBCS cbro...@cbcs-usa.com 781-721-2890 Paul Rogers wrote: Did you run

Re: ASN1 code generator?

2009-06-10 Thread Ger Hobbelt
On Tue, Jun 9, 2009 at 6:57 PM, Chris Barech...@bareflix.com wrote: I just wanted to make sure I'm not missing something. Converting an ASN1 spec to code is a manual process, right? There is no parser/code generator as part of openssl? Correct. It's a manual operation. OpenSSL does not come

WHat is NID_subject_key_identifier

2009-06-10 Thread Satish Chandra Kilaru
HI All What is NID_subject_key_identifier? And when do I want to add an extension with this NID to a x509 certificate? --Satish __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: WHat is NID_subject_key_identifier

2009-06-10 Thread Satish Chandra Kilaru
I found relevant information in RFC 3280. I recommend referring to that RFC for any questions like mine. http://www.ietf.org/rfc/rfc3280.txt --Satish On Wed, Jun 10, 2009 at 5:34 PM, Satish Chandra Kilaruiam.kil...@gmail.com wrote: HI All What is NID_subject_key_identifier? And when do I want

Re: Not so Ancient History

2009-06-10 Thread Paul Rogers
On Wed, 10 Jun 2009 13:17:48 -0400, Carter Browne cbro...@cbcs-usa.com said: When I looked at the Configure script in the past, the only way I say to get an entry for x86 Linux was to modify the script itself. It does not look at CFLAGS or CSSFLAGS to get the CPU options. The big problem