Re: Need Help with Programmatic Downloading+Checking of CRLs

2011-03-16 Thread Jeff Saremi
Thanks Patrick. Unfortunately this has be a part of our code to run on various platforms. If you know of any openssl-based implementation that does this and is opensource please let me know so at least I could use that as an example. Patrick Patterson Tue, 15 Mar 2011 13:11:11 -0700 Hi

[FWD] some problem in compiling Openssl 1.0.0d for WCE

2011-03-16 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from 詹晨辉 zch...@hotmail.com - From: 詹晨辉 zch...@hotmail.com To: r...@openssl.org Subject: some problem in compiling Openssl 1.0.0d for WCE Date: Wed, 16 Mar 2011 10:39:42 +0800 Importance:

which cipher-suite must I choose

2011-03-16 Thread ikuzar
Hello, I 'd like to know which cipher-suite is the most suitable for VoIP soft. 1) I 'd like to know when must I choose bloc cipher. Then, how to know if AES is more suitable than 3DES / blowfish / etc. 2) I 'd like to know whent must I choose stream cipher. Then, how to know if RC4 is more

Re: [FWD] some problem in compiling Openssl 1.0.0d for WCE

2011-03-16 Thread Pierre DELAAGE
Hello, Just in case it may help, I patched openssl 1.0.0a to compile perfectly for WCE. But I did not check specifically ipv6 support. This build works also perfectly for Windows Mobile 5 and 6 and above. I still have to correct minor comments formatting issues to have my patch compatible

Re: Need Help with Programmatic Downloading+Checking of CRLs

2011-03-16 Thread Jeff Saremi
Try supplying your own lookup_crls() implementation instead. This can be much simpler and just needs to return any CRLs which match the supplied X509_NAME value. If there are multiple CRLs it will pick the most appopriate. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer.

multithreaded application crashes on windows

2011-03-16 Thread Alona Rossen
OpenSSL 0.9.8e Application crashes in multithreaded environment on Windows. We use libcurl with OpenSSL and execute HTTP(S) POST/GET. When the application involves SSL (HTTPS), it crashes in MT environment. The same execution flow is successful if SSL is not involved (HTTP). Please advise

Re: how to desable data compression

2011-03-16 Thread ikuzar
Could you tell me how to use this option ? in which function ? I found something like below in the internet ( I did not find on OpenSSL website ) SSL *s ... #ifndef OPENSSL_NO_COMP if (!(s-options SSL_OP_NO_COMPRESSION)) len +=

OpenSSL_add_all_algorithms issue

2011-03-16 Thread Yolanda Liu (liuyu)
Hi, all: In one of our components, there is a call to OpenSSL_add_all_algorithms() in a function AppInit() which is called when the application is initialized. From a debugger, I am seeing the AppInit() is definitely called, however, when it comes to make call to PEM_bio_read_PrivateKey(),

PKCS7 Decode issue with API

2011-03-16 Thread Martin Nicholes
Hi, I have a PCKS7 cert created when I signed some binary data with this command: openssl smime -pk7out -sign -in myInsydeL2CertVar.dat -outform DER -nochain -nosigs -noverify -binary -signer mySignpfx.pem -out myInsydeL2CertVarSigned.dat I can decode the cert with Openssl at the command