Re: Multithreaded application crash

2007-04-24 Thread Darryl Miles
brajesh tiwari wrote: Can some one please tell me what may be the problem here. Thank you very much. I think the problem may be a bug in your program. HTH PS - How do you seriously expect help in debugging your program from a mailing list. Yes, it is valid for your application code to

Re: openssl pkcs12 don't want to prompt password

2007-04-24 Thread ViSolve Security Consulting Group
Hello Janet, -bash-3.1$ openssl pkcs12 -in janet.p12 -nocerts -out userkey.pem -passin test123 Invalid password argument test123 Error getting passwords The value for the parameter -passin should be test123:test123 Regards, ViSolve Security Consulting Group.

Re: Multithreaded application crash

2007-04-24 Thread Marek Marcola
Hello, 0 0x3ff805c1ac8 in __nxm_thread_kill(...) in /usr/shlib/libpthread.so #1 0x3ff805ba120 in pthread_kill(...) in /usr/shlib/libpthread.so #2 0x3ff805c62a8 in UnknownProcedure2FromFile100(...) in /usr/shlib/libpthread.so #3 0x3ff80633994 in UnknownProcedure16FromFile0(...) in

Re: openssl pkcs12 don't want to prompt password

2007-04-24 Thread Dr. Stephen Henson
On Mon, Apr 23, 2007, Janet N wrote: Hi, I'm using openssl pkcs12 to export the usercert and userkey PEM files out of pkcs12. I don't want the openssl pkcs12 to prompt the user for the import and pem pass phrase. What are the password flags to be used? I got an invalid password when I

How to load CA content in context ??

2007-04-24 Thread jfhuynh
I try to build a SSL server which performs client authentication. But I cannot use SSL_CTX_load_verify_locations which has a CA file as parameter. (CA file is not located in the same machine) Nevertheless, I succeeded having in my server the content of CA file in a buffer through API like

Extract extension from certificate

2007-04-24 Thread Metalpalo
Hello everbody I have two questions. First: I created certificate with extension a I need to extract these extension(for example) from certificate. Does exist something similar as extracting of the serial number by command: openssl.exe x509 -in %CERT_SUB_HE% -serial -noout . Second: I need

Re: How to load CA content in context ??

2007-04-24 Thread Dr. Stephen Henson
On Tue, Apr 24, 2007, [EMAIL PROTECTED] wrote: I try to build a SSL server which performs client authentication. But I cannot use SSL_CTX_load_verify_locations which has a CA file as parameter. (CA file is not located in the same machine) Nevertheless, I succeeded having in my server the

Which PGP product for fips validation of the download?

2007-04-24 Thread Lee Merrill
Hi everyone, I expect this has been asked before, but which PGP product is appropriate for the FIPS validation of the FIPS ssl archive (openssl-fips-1.1.1.tar.gz) via the openssl-fips-1.1.1.tar.gz.asc file? I verified it with gpg, per the FIPS instructions ("gpg --verify *.asc *.gz"), but I

Clean SSL Error queue

2007-04-24 Thread Dinh, Thao V CIV NSWCDD, K72
Hi all What functions use to clean up SSl Error Queue in Multithread Applications ?? Thank You TD

Re: Which PGP product for fips validation of the download?

2007-04-24 Thread Kyle Hamilton
The FIPS version of OpenSSL has an external verification mechanism which does not require a PGP signature verification. In the Security Policy, there are keyed HMACs for the source files which go into fipscanister.o. A file inside the distribution mirrors this. During the build process, an

Re: Multithreaded application crash

2007-04-24 Thread brajesh tiwari
Hi darry: Thank you very much for your reply. I was looking for some help to resolve the crash issue. I have copied the callback from mttest.c file as below: static pthread_mutex_t *lock_cs; static long *lock_count; void thread_setup(void) { int i;

Re: How to load CA content in context ??

2007-04-24 Thread Jean Francois HUYNH
Thank you very much for this fast answer ;) jf Dr. Stephen Henson a écrit : On Tue, Apr 24, 2007, [EMAIL PROTECTED] wrote: I try to build a SSL server which performs client authentication. But I cannot use SSL_CTX_load_verify_locations which has a CA file as parameter. (CA file is not