Re: bad characters encoded on ssl logs coming from x509 cert

2010-04-28 Thread Phillip Hellewell
On Tue, Apr 27, 2010 at 5:29 PM, Luis Neves luisne...@hotmail.com wrote: As I think they are in DER format so I use openssl x509 -inform DER -in xx.cer -noout -text I was able to get it to output the characters correctly by adding -nameopt multiline,utf8,-esc_msb to the command-line. It

Re: bad characters encoded on ssl logs coming from x509 cert

2010-04-28 Thread Phillip Hellewell
On Wed, Apr 28, 2010 at 12:39 AM, Phillip Hellewell ssh...@gmail.com wrote: On Tue, Apr 27, 2010 at 5:29 PM, Luis Neves luisne...@hotmail.com wrote: As I think they are in DER format so I use openssl x509 -inform DER -in xx.cer -noout -text I was able to get it to output the characters

RE: bad characters encoded on ssl logs coming from x509 cert

2010-04-28 Thread Luis Neves
Very interesting! How/where can I use this information to control what mod_ssl is sending to mod_authz_ldap? To avoid sending '\x' to the ldap queries Luis From: ssh...@gmail.com Date: Wed, 28 Apr 2010 01:00:59 -0600 Subject: Re: bad characters encoded on ssl logs coming from x509 cert

Re: bad characters encoded on ssl logs coming from x509 cert

2010-04-28 Thread Dr. Stephen Henson
On Wed, Apr 28, 2010, Phillip Hellewell wrote: On Tue, Apr 27, 2010 at 5:29 PM, Luis Neves luisne...@hotmail.com wrote: As I think they are in DER format so I use openssl x509 -inform DER -in xx.cer -noout -text I was able to get it to output the characters correctly by adding

Re: bad characters encoded on ssl logs coming from x509 cert

2010-04-28 Thread Phillip Hellewell
On Wed, Apr 28, 2010 at 6:45 AM, Dr. Stephen Henson st...@openssl.org wrote: On Wed, Apr 28, 2010, Phillip Hellewell wrote: It makes me wonder though why isn't UTF-8 the default output on a Linux system with LANG set to en_US.UTF-8? Backwards compatibility reasons mainly. We have to be very

RE: bad characters encoded on ssl logs coming from x509 cert

2010-04-28 Thread Luis Neves
So what to change in my system so apache manages the certificates as it should? I cant find any settings for this. the ssl logs is full of the '\x' characters. Is there any parameter on some openssl.conf or other file? Im keep googling around and cant find anything I dont want apache/mod_ssl

freeing X509 structures

2010-04-28 Thread Matt Fioravante
I've got some code that dynamically allocates an X509 object using PEM_read_X509 and then extracts some data from it. The problem is the object never gets freed. I tried to call free() on the X509 pointer but that doesn't work either because it has dynamically allocated sub structures. Is there

Question regarding opening the OpenSSL source code in visual studio

2010-04-28 Thread Moshe, Kfir
Hey I would like to modify the source code of some functions in OpenSSL Since I'm working under Windows and have Visual Studio installed, the easiest way to do so will be by creating a visual studio project with the source code Has anyone ever did something like that, is there by a chance a

Question on changing the socket layer

2010-04-28 Thread Moshe, Kfir
Hey I would like to change the main send and receive function that OpenSSL uses to functions written by me So every packet send\receive by OpenSSL will be actually send\receive from my code BUT: I want to keep the whole TLS\SSL logic as is Can someone please suggest me something? Thanks

Re: freeing X509 structures

2010-04-28 Thread Bruce Stephens
Matt Fioravante fmatthew5...@gmail.com writes: I've got some code that dynamically allocates an X509 object using PEM_read_X509 and then extracts some data from it. The problem is the object never gets freed. I tried to call free() on the X509 pointer but that doesn't work either because

Re: Question regarding opening the OpenSSL source code in visual studio

2010-04-28 Thread Modem Man
Moshe, Kfir schrieb: Hey I would like to modify the source code of some functions in OpenSSL Since I’m working under Windows and have Visual Studio installed, the easiest way to do so will be by creating a visual studio project with the source code Has anyone ever did something

RE: building OpenSSL 0.9.8/1.0.0 on Solarisx86

2010-04-28 Thread Alona Rossen
In fact, we were able to create usable 32-bit with SunStudio compilers (C++ 5.0, 5.5, 5.8) on Solaris8/9/10 on SPARC. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. David Kirkby Sent: April 23, 2010 3:13 PM To:

where to find the ca.txt file

2010-04-28 Thread sara bai
hi: at the official HOWTO's column ,said there is an doc/HOWTO/. ca.txt ,but I can find that fille neither the website nor the source code does any one know where to find it thanks 4. Creating a self-signed test certificate If you don't want to deal with another certificate authority, or just

Re: where to find the ca.txt file

2010-04-28 Thread Vladimir Belov
I think there is no such file yet. I could be mistaken. For what do you need this file? Do you want to know how to create a self-signed test certificate or something else? - Original Message - From: sara bai sara@gmail.com To: openssl-users@openssl.org Sent: Thursday, April

Why sshd makes a PTR dns request after receiving user's name ?

2010-04-28 Thread barx
Hello When sshd has received the username of a linux user from a SSH client, it look likes it send a PTR request on the client's IP. for example, if 192.168.56.106 start a connection on a sshd server running on 192.168.56.1, this machine will send a PTR request on 105.56.168.192.in-addr.arpa

problem with closing file descriptors while loading certificate in sign

2010-04-28 Thread stanislav kimov
Hi, thanks for developing openssl. It's realy a lifesaver! But sometimes it gets difficult for me to understand it. I have made my own realisation of SIGN by using functions from smime.c and encountered a big problem while testing it for memory leaks. My realisation works correctly, but when I

Re: Why sshd makes a PTR dns request after receiving user's name ?

2010-04-28 Thread Kyle Hamilton
This is not an SSH support list. SSH uses OpenSSL libraries, but that's the extent of it. My conjecture (and this is only my conjecture): you may be running TCP wrappers, or you may have host-based access blocking disabled. In any case, it's at least used for logging purposes (since names are