Re: SSL_CTX_add_extra_chain_cert does not work, but X509_STORE_add_cert works

2013-04-11 Thread Felipe Blauth
2013/4/11 Dave Thompson dthomp...@prinpay.com From: owner-openssl-us...@openssl.org On Behalf Of Felipe Blauth Sent: Wednesday, 10 April, 2013 17:35 [In a server] I can't use SSL_CTX_load_verify_locations anymore, because now I load stuff from a database. So I was happy adding

SSL_CTX_add_extra_chain_cert does not work, but X509_STORE_add_cert works

2013-04-10 Thread Felipe Blauth
Hey folks. I have an OpenSSL TCP server that is under modifications, so I need to change my code. The SSL setup is simple, and I'll spare you from that. The point is that I can't use SSL_CTX_load_verify_locations anymore, because now I load stuff from a database. So I was happy adding the

Re: Using libcrypto's RSA code

2013-03-29 Thread Felipe Blauth
To read the key from your header file you might want to use a memory BIO in conjunction with the PEM_read_bio_PUBKEY function or PEM_read_bio_RSAPublicKey ( I don't remember which one you should use, but this was answered in this list before). I don't have a test enviroment right now, but you

How to implement custom STACK object functions

2012-12-10 Thread Felipe Blauth
Hello, I have defined a custom ASN.1 structure by doing something like this: *typedef struct my_custom* *{* *... // omited * * * *} MY_CUSTOM;* Then I did the declarations like this: *DECLARE_ASN1_ITEM(MY_CUSTOM)* *DECLARE_STACK_OF(MY_CUSTOM)* *DECLARE_ASN1_SET_OF(MY_CUSTOM)* And

Re: openssl verify always returns 0 (success) to shell

2012-11-04 Thread Felipe Blauth
OpenSSL app worked as expected, and that is what 0 means (EXIT_SUCCES) in C programming. The fact that verification wasn't successful does not mean OpenSSL app didn't work correctly. I think you either have to write your own app (or maybe just modifiy OpenSSL verify app to return what you want)

Re: openssl verify always returns 0 (success) to shell

2012-11-04 Thread Felipe Blauth
be: 0 - verified non-zero - didn't verify On 11/4/2012 10:51 AM, Felipe Blauth wrote: OpenSSL app worked as expected, and that is what 0 means (EXIT_SUCCES) in C programming. The fact that verification wasn't successful does not mean OpenSSL app didn't work correctly. I think you either

Re: Unregister an index registered with RSA_get_ex_new_index

2012-08-17 Thread Felipe Blauth
/16 Dr. Stephen Henson st...@openssl.org On Thu, Aug 16, 2012, Felipe Blauth wrote: Dear all, Im writing an OpenSSL engine and I have some internal data to manage via ex_data functions. What I've been doing so far is using RSA_get_ex_new_index(0, NULL, NULL, NULL, my free function

Re: Unregister an index registered with RSA_get_ex_new_index

2012-08-17 Thread Felipe Blauth
2012/8/17 Dr. Stephen Henson st...@openssl.org On Fri, Aug 17, 2012, Felipe Blauth wrote: I see. I've digged a little bit more in the built-in engines and found out that this is the way some of them are implemented. I guess there's no way to to the same for ECDSA_METHOD tough, since

Unregister an index registered with RSA_get_ex_new_index

2012-08-16 Thread Felipe Blauth
Dear all, Im writing an OpenSSL engine and I have some internal data to manage via ex_data functions. What I've been doing so far is using RSA_get_ex_new_index(0, NULL, NULL, NULL, my free function), at the initialization of the engine to register a free function for structures allocated when