Re: openssl 1.0.1e and X509_STORE_add_cert

2014-01-21 Thread Putinei .Ionut
20, 2014 at 1:39 PM, Putinei .Ionut putineiio...@gmail.comwrote: Hello guys, seen in changelog The functions X509_STORE_add_cert() now checks for an exact match, rather than just subject name. Can someone please explain me how to debug this and make things work? Maybe because

Re: openssl 1.0.1e and X509_STORE_add_cert

2014-01-21 Thread Putinei .Ionut
Hello, Please ignore this. Did a very big mistake because was not paying attention to what is actually loaded Seems like symlink created my c_rehash where loaded with success prior to reaching the actual certificate. Again I am sorry, Ionut On Tue, Jan 21, 2014 at 2:36 PM, Putinei .Ionut

Re: openssl 1.0.1e and X509_STORE_add_cert

2014-01-20 Thread Putinei .Ionut
with validate peer on ssl connection was solved by setting the clock properly. Still need to load the trust chain so I can verify some signed xmls. Thanks, Ionut On Tue, Jan 14, 2014 at 2:52 PM, Putinei .Ionut putineiio...@gmail.comwrote: Hello guys, I do not know if this is a openssl issue

openssl 1.0.1e and X509_STORE_add_cert

2014-01-14 Thread Putinei .Ionut
Hello guys, I do not know if this is a openssl issue or curl/xmlsec. I have certificates for trust chain (x509) that are not loaded by xmlsec and also does not validate peer on ssl connection. The fails in xmlsec report error at openssl function X509_STORE_add_cert Run environment is arm.