Problem with creating p12 file with chain

2008-02-06 Thread Reinhardt, Karen - Contractor
Hi All, I am attempting to create a p12 file which will include both intermediate and root CA certificates in addition to the key and server certificate. I keep getting Error unable to get local issuer certificate getting chain. I have checked the subject, issuer, AKI, and SKI for all certs

Multiple host names in one cert

2008-02-06 Thread Robin Bowes
Hi, We have a few servers (openldap, apache) that are accessed via different host names, e.g.: Internal: *.client.isp_int.com External: *.client.isp_ext.com We use a self-generated CA to signed the certs. I am currently creating two certs - one for internal hostnames with

Re: Problem with creating p12 file with chain

2008-02-06 Thread Bernhard Froehlich
Reinhardt, Karen - Contractor schrieb: Hi All, I am attempting to create a p12 file which will include both intermediate and root CA certificates in addition to the key and server certificate. I keep getting Error unable to get local issuer certificate getting chain. I have checked the

RE: Problem porting SSL on VDK OS

2008-02-06 Thread David Schwartz
Hi All; Thanks to you for your suggestions. I followed your suggestion and removed ssl/ssl_task.c and compiled it but I got one problem which is as follows: crypto\sha\sha1s.cpp, line 72: cc0020: error: identifier GetTSC is undefined GetTSC(s1); You have no TSC, so this

RE: Compiling on a Mac

2008-02-06 Thread David Schwartz
Can you share the code that you found, a link to it, or at least a hint as to which search engine you found it on? http://www.cs.odu.edu/~cs772/sourcecode/NSwO/compiled/encdec.c There you go. I'm curious -- do you understand what the code you are compiling is supposed to actually *do*?

Re: Compiling on a Mac

2008-02-06 Thread Larry Bugbee
The source for incremental_send isn't in the book anywhere that I've seen. I'm using the first edition (June 2002). My code does call incremental_send, and the code I'm trying to compile is the example code provided in the book itself (in chapter 6 - see example 6-4). The book provides

compiling a ssl

2008-02-06 Thread gopinath ethiraja
I have downloaded openssl 0.9.8g source from the website. Its working fine. but i need the source code for my project and I got in openssl. when i compiled it in vc++ in windows, i got no errors. but i get an external reference error when linked. do i need to add any lib files ? please guide me

possible SSL_write bug

2008-02-06 Thread Alessandro Pivi - GLOBALcom engineering
Hi, I made a program that connects to a stunnel server. I am able to connect to the server, read, write, with no problems. The problem is that if I close the stunnel, I can handle the error correctly if I make an SSL_read, but not if I make an SSL_write. The SSL_write returns a positive value

Problem in porting open ssl library

2008-02-06 Thread Ajeet kumar.S
Hi all; I want to port open ssl on VDK(VDSP compiler, BF533 Processor).For that purpose I down load Open ssl from openssl.org (openssl-0.9.8g). Actually above project having so man folder like crypto, apps, cert, engine, demo, etc. Let me know which folder I will port in

RE: possible SSL_write bug

2008-02-06 Thread David Schwartz
I made a program that connects to a stunnel server. I am able to connect to the server, read, write, with no problems. Good. The problem is that if I close the stunnel, I can handle the error correctly if I make an SSL_read, but not if I make an SSL_write. The SSL_write returns a positive

is TLS-PSK already implemented in opensssl

2008-02-06 Thread gopinath ethiraja
is TLS-PSK already implemented in opensssl __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

Re: Compiling on a Mac

2008-02-06 Thread Joel Christner
Hi David, Yes indeed I do. I have seen that link before, but it doesn't contain the contents of incremental_send (this data is left hanging in limbo with nothing to do). My goal is to integrate this into a sockets application I'm using where there will indeed be a continuous stream of data.

Re: compiling a ssl

2008-02-06 Thread Joel Christner
Hi Gopinath, I'm having the same issue (not in VC++ though) What symbols are causing external reference errors for you? What command-line string are you using to try and compile your project w/ OpenSSL? Did you link ssl/crypto into your project? On Feb 6, 2008 1:51 AM, gopinath ethiraja

Re: Problem in porting open ssl library

2008-02-06 Thread jimmy bahuleyan
Ajeet kumar.S wrote: Hi all; I want to port open ssl on VDK(VDSP compiler, BF533 Processor).For that purpose I down load Open ssl from openssl.org (openssl-0.9.8g). Actually above project having so man folder like crypto, apps, cert, engine, demo, etc. Let me know which

RE: Compiling on a Mac

2008-02-06 Thread David Schwartz
Hi David, Yes indeed I do. I have seen that link before, but it doesn't contain the contents of incremental_send (this data is left hanging in limbo with nothing to do). That is the contents of incremental_send. My goal is to integrate this into a sockets application I'm using where

RE: RSA_verify problem

2008-02-06 Thread Marek . Marcola
Hello, I have tested the sample code and it runs without error however I am still using the default char N[], char E[] and msg[] values in the file. I am unclear what steps I need to take to convert the Modulus and Exponent strings from my XML into a format suitable for this function. In

Re: Which folder and source files required to port for work on SSL

2008-02-06 Thread Marek . Marcola
Hello, I am new user of open ssl.I am trying to port open ssl on VDK RTOS (Which is not VMS OS, Which is RTOS developed by Analog Devices).For porting OPEN SSL I got openssl-0.9.8g from http://www.openssl.org/. I am trying port whole project openssl-0. 9.8g but this project

OpenSSL FIPS Object Module v1.1.1 patch (v1.1.2) now validated

2008-02-06 Thread Steve Marquess
I've just been informed that we have received the long awaited official approval of the vulnerability fix for the OpenSSL FIPS Object Module v1.1.1. The patched version of that product is now known as v1.1.2 with the new validation certificate number 918 and can be downloaded from

Re: install openssl from source while rpm is their on RHEL 4

2008-02-06 Thread cdemel
Hi I have a red hat ES 4 64 bit version installed server with openssl-0.9.7a-43.8 rpm installed. i need to install the openssl 0.9.8g from the source. If I use default prefix whcih is /usr/local/ssl to install config files and all default config options Will it remove any of the libraries which

Re: is TLS-PSK already implemented in opensssl

2008-02-06 Thread Kurapati Raja Sekhar
Yes It is already implemented in openssl. Go to apps directory and see the example programs s_client.c and s_server.c. gopinath ethiraja [EMAIL PROTECTED] wrote: is TLS-PSK already implemented in opensssl __ OpenSSL