[openssl-users] Thoughts about security, privacy, ... (was: OCSP_sendreq_bio())

2015-10-29 Thread Walter H.
Hello Jabob, On Thu, October 29, 2015 11:07, Jakob Bohm wrote: > On 28/10/2015 21:58, Walter H. wrote: >> On 28.10.2015 18:34, Jakob Bohm wrote: >>> On 28/10/2015 17:36, Walter H. wrote: >> OCSP must not be https ... >> the same with CRL download ... > Really, I thought that was only

Re: [openssl-users] Freeing of const char * fields in ASN1_OBJECT

2015-10-29 Thread Reinier Torenbeek
Hi Michael, Many thanks for the extensive explanation, I understand the rationale now. > Now, a *good* public C library will implement proper ADTs. Indeed I am used to using ADT mechanisms so I did not run into this issue anywhere else before. It will be a lot of work to make all types

Re: [openssl-users] OCSP_sendreq_bio()

2015-10-29 Thread Jakob Bohm
On 28/10/2015 21:58, Walter H. wrote: On 28.10.2015 18:34, Jakob Bohm wrote: On 28/10/2015 17:36, Walter H. wrote: On 28.10.2015 16:44, Jakob Bohm wrote: On 27/10/2015 21:21, Walter H. wrote: On 26.10.2015 21:42, rosect...@yahoo.com wrote: Hi, I need some help