Please Clarify : Unable to verify leaf signature (21)

2012-03-07 Thread Mr.Rout
Dear Folks, While setting up the TLS session i am facing below error. TLS Alert Level: Fatal, Description: Unable to verify leaf signature (21) I created the Chained certfificate like below : ROOTCAServerCA-ServerCert I kept ROOTCA at my TLS client and cancatenated version of all the

Re: Providing libraries for Crypto::SSLeay

2012-03-07 Thread Jakob Bohm
Try the command (outside CPAN): make --help). Just to make sure you actually have make at all. Second thing to try, is to wipe your cpan cache directories of old build results, then try again. Third thing is to open cpan and run o conf init to make sure the settings are fine and get hints

Re: Please Clarify.Intermediate certificate verification ?

2012-03-07 Thread Jakob Bohm
On 3/7/2012 2:06 AM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Edward Ned Harvey Sent: Tuesday, 06 March, 2012 13:18 From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Mr.Rout 1) what is intermediate certificate validation

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-07 Thread Jacob White
Still have the problem. It looks to me like the OPENSSLDIR location does not exist. Even when I set OPENSSLDIR with: perl configure VC-WIN32 fips enable-static-engine --prefix=c:\openssl\dir After I finish the build c:\openssl\dir does not exist. On Tue, Mar 6, 2012 at 12:16 PM, Dr. Stephen

Re: Providing libraries for Crypto::SSLeay

2012-03-07 Thread SB Tech
Thanks for your assistance, Jakob, but it looks like the problem here is that the Prowl devs haven't paid any attention to running their Perl script on Macs for several years - it doesn't even work on Snow Leopard. I'll unsubscribe from the list now. Thanks again. Sent from my iPhone On 7

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-07 Thread Jacob White
With the /DYNAMICBASE:No option I get the same problems. Thanks for the advise, at this point I think I am moving my efforts to linux or an early version of VC++ and see if that works. On Wed, Mar 7, 2012 at 10:49 AM, Jacob White ilovejetengi...@gmail.comwrote: Still have the problem. It looks

OpenSSL Windows CryptoAPI certificate and encrypt/decrypt interop

2012-03-07 Thread Nou Dadoun
I'm trying to develop a package which can establish an ssl connection between a windows server and a client using openssl and I'm running into some serious road blocks - I'm a relative novice at both the openssl and wincrypt apis, I've done extensive searching for any hints at how this problem

Re: Tutorials on OpenSSL integration with nCipher HSM (nShield) ?

2012-03-07 Thread Sander Temme
On Mar 6, 2012, at 10:45 AM, Sunjeet Singh wrote: Hi, Most of the references on this forum on how to use nCipher HSM with OpenSSL using the CHIL API (or CAPI) are outdated. I was wondering if anyone had any pointers to helpful resources in this regard. I don't know if outdated is the

Re: Tutorials on OpenSSL integration with nCipher HSM (nShield) ?

2012-03-07 Thread Sunjeet Singh
Thank you for your response. I don't know if outdated is the word: perhaps there hasn't ever been much. Some old blogs are referencing helpful blogs/tutorials that are now expired. Searching online didn't help either. The CHIL Engine *only* registers for RSA exponentiation, and cannot be

problem with openssl

2012-03-07 Thread Julie Lin
smime.p7m Description: S/MIME encrypted message

Re: Tutorials on OpenSSL integration with nCipher HSM (nShield) ?

2012-03-07 Thread Sunjeet Singh
Greetings again, I'm back with another question. Any help will be much appreciated- My OpenSSL Application uses the OpenSSL C function call- SSL_CTX_use_certificate_chain_file( sslCtx, keyFile ); where keyFile is the path to a .PEM file containing the private key and certificate. But

Re: Tutorials on OpenSSL integration with nCipher HSM (nShield) ?

2012-03-07 Thread Dr. Stephen Henson
On Wed, Mar 07, 2012, Sunjeet Singh wrote: Greetings again, I'm back with another question. Any help will be much appreciated- My OpenSSL Application uses the OpenSSL C function call- SSL_CTX_use_certificate_chain_file( sslCtx, keyFile ); where keyFile is the path to a .PEM file

Re: OpenSSL Windows CryptoAPI certificate and encrypt/decrypt interop

2012-03-07 Thread Dr. Stephen Henson
On Wed, Mar 07, 2012, Nou Dadoun wrote: I'm trying to develop a package which can establish an ssl connection between a windows server and a client using openssl and I'm running into some serious road blocks - I'm a relative novice at both the openssl and wincrypt apis, I've done extensive

Re: Tutorials on OpenSSL integration with nCipher HSM (nShield) ?

2012-03-07 Thread Sander Temme
On Mar 7, 2012, at 2:12 PM, Sunjeet Singh wrote: Thank you for your response. I don't know if outdated is the word: perhaps there hasn't ever been much. Some old blogs are referencing helpful blogs/tutorials that are now expired. Searching online didn't help either. The CHIL Engine

how to tell the pkcs11 library name to apache2 mod_ssl?

2012-03-07 Thread Magosányi, Árpád
Hi! I try to use a pkcs11 smart card (eToken) to store the web server's private key with apachemod_ssl. From the strace output it seems that mod_ssl successfully loads the pkcs11 engine. However it does not seem to find the pkcs11 library. Given that I see no attempt to load openssl.cnf, this is