Re: Adding Hash to Application : Static Build - OpenSSL With FIPS

2010-10-27 Thread rajesh kumar
sorry to repost it ... sorry if its annoying anyone.. has anyone faced with same issues ... really need of help here ... Thanks, Rajesh. On Tue, Oct 26, 2010 at 3:54 PM, rajesh kumar rajeshdavul...@gmail.comwrote: Hi All, According to UserGuide i am trying to add hash to my Project DLL as i

Re: Adding Hash to Application : Static Build - OpenSSL With FIPS

2010-10-27 Thread Jeffrey Walton
Hi Rajesh, I've had success with integrity checking using MACs and signatures for both PE/PE+ and Elf32/64 executables and dynamic libraries on their respective platforms (not limited to a OpenSSL dll). If I recall, OpenSSL is only trying to embed a MAC. 5292:error:2507606A:DSO support

Checking certificate chain

2010-10-27 Thread Plot Lost
Hi, I'm trying to figure out how to check a certificate is valid according to a chain of certificates. There are 3 certs in all, and they are all held as X509 data in memory, e.g. X509 *server_cert; X509 *inter_cert; X509 *root_cert; How can I check that 'server_cert' is authenticated by

Re: Adding Hash to Application : Static Build - OpenSSL With FIPS

2010-10-27 Thread rajesh kumar
Hi Jeff, first of all a big thanks for reply ... i am trying to build it on Windows using VS2005. as suggested by Dr. Stephen and others on OpenSSL threads, i have build FIPS on FIPS 1.2 Module and then linking it against OpenSSL Build 0.9.8l to build FIPS Capable OpenSSL - cd

Re: Checking certificate chain

2010-10-27 Thread Bruce Stephens
Plot Lost plot.l...@gmail.com writes: Hi, I'm trying to figure out how to check a certificate is valid according to a chain of certificates. There are 3 certs in all, and they are all held as X509 data in memory, e.g. X509 *server_cert; X509 *inter_cert; X509 *root_cert; How can I check

Re: Checking certificate chain

2010-10-27 Thread Plot Lost
Hi, I'm trying to figure out how to check a certificate is valid according to a chain of certificates. There are 3 certs in all, and they are all held as X509 data in memory, e.g. X509 *server_cert; X509 *inter_cert; X509 *root_cert; How can I check that 'server_cert' is authenticated by

Re: Checking certificate chain

2010-10-27 Thread Martin Kaiser
Hi, Thus wrote Plot Lost (plot.l...@gmail.com): Stick them in an X509_STORE_CTX and call X509_verify_cert(). ?See apps/verify.c for an example. I'm using verify_cert, and whilst that works to allow me to check that inter_cert is ok according to root_cert (result = 1) I can't check that

Re: How can I load a PEM key stored in a string instead from a file?

2010-10-27 Thread Michael S. Zick
On Tue October 26 2010, Leandro Santiago wrote: Sorry. I don't understand everything. Do you have any code example? I've tried to read the source code of these functions, but PEM_read_PrivateKey is a macro (and I hate read big macros) :-( gcc -E ... output.txt Is your answer to that

Re: Checking certificate chain

2010-10-27 Thread Bruce Stephens
Plot Lost plot.l...@gmail.com writes: [...] For this particular project I'm required to check each step individually, not the entire chain at once. That's what verifying the chain does (see the implementation of X509_verify_cert()). You could add a callback using