Man Patch (attached)
The man patch I was talking about. diff -urN openssl-0.9.5-orig/Makefile.org openssl-0.9.5/Makefile.org --- openssl-0.9.5-orig/Makefile.org Fri Feb 25 16:34:55 2000 +++ openssl-0.9.5/Makefile.org Sat Mar 11 20:36:58 2000 @@ -370,10 +370,11 @@ @for i in doc/apps/*.pod; do \ (cd `dirname $$i`; \ fn=`basename $$i .pod`; \ - sec=`[ "$$fn" = "config" ] echo 5 || echo 1`; \ + sec=`case $$fn in openssl|CA.pl) echo 1;; config) echo 5s;; *) echo +1s;; esac`; \ + sec1st=`echo $$sec | cut -c1`; \ $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \ --release=$(VERSION) `basename $$i` \ - $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec); \ + $(INSTALL_PREFIX)$(MANDIR)/man$$sec1st/`basename $$i +.pod`.$$sec); \ done @echo installing man 3 and man 7 @for i in doc/crypto/*.pod doc/ssl/*.pod; do \ diff -urN openssl-0.9.5-orig/doc/apps/CA.pl.pod openssl-0.9.5/doc/apps/CA.pl.pod --- openssl-0.9.5-orig/doc/apps/CA.pl.pod Fri Feb 4 01:23:16 2000 +++ openssl-0.9.5/doc/apps/CA.pl.podSat Mar 11 20:36:58 2000 @@ -132,7 +132,7 @@ =head1 SEE ALSO -Lx509(1)|x509(1), Lca(1)|ca(1), Lreq(1)|req(1), Lpkcs12(1)|pkcs12(1), -Lconfig(5)|config(5) +Lx509(1s)|x509(1s), Lca(1s)|ca(1s), Lreq(1s)|req(1s), +Lpkcs12(1s)|pkcs12(1s), Lconfig(5s)|config(5s) =cut diff -urN openssl-0.9.5-orig/doc/apps/ca.pod openssl-0.9.5/doc/apps/ca.pod --- openssl-0.9.5-orig/doc/apps/ca.pod Thu Feb 24 19:18:48 2000 +++ openssl-0.9.5/doc/apps/ca.pod Sat Mar 11 20:36:58 2000 @@ -473,7 +473,7 @@ =head1 SEE ALSO -Lreq(1)|req(1), Lspkac(1)|spkac(1), Lx509(1)|x509(1), LCA.pl(1)|CA.pl(1), -Lconfig(5)|config(5) +Lreq(1s)|req(1s), Lspkac(1s)|spkac(1s), Lx509(1s)|x509(1s), +LCA.pl(1)|CA.pl(1), Lconfig(5s)|config(5s) =cut diff -urN openssl-0.9.5-orig/doc/apps/ciphers.pod openssl-0.9.5/doc/apps/ciphers.pod --- openssl-0.9.5-orig/doc/apps/ciphers.pod Wed Feb 23 03:10:58 2000 +++ openssl-0.9.5/doc/apps/ciphers.pod Sat Mar 11 20:36:58 2000 @@ -337,6 +337,6 @@ =head1 SEE ALSO -Ls_client(1)|s_client(1), Ls_server(1)|s_server(1), Lssl(3)|ssl(3) +Ls_client(1s)|s_client(1s), Ls_server(1s)|s_server(1s), Lssl(3)|ssl(3) =cut diff -urN openssl-0.9.5-orig/doc/apps/config.pod openssl-0.9.5/doc/apps/config.pod --- openssl-0.9.5-orig/doc/apps/config.pod Fri Feb 4 01:23:16 2000 +++ openssl-0.9.5/doc/apps/config.pod Sat Mar 11 20:36:58 2000 @@ -133,6 +133,6 @@ =head1 SEE ALSO -Lx509(1)|x509(1), Lreq(1)|req(1), Lca(1)|ca(1) +Lx509(1s)|x509(1s), Lreq(1s)|req(1s), Lca(1s)|ca(1s) =cut diff -urN openssl-0.9.5-orig/doc/apps/crl.pod openssl-0.9.5/doc/apps/crl.pod --- openssl-0.9.5-orig/doc/apps/crl.pod Tue Feb 8 15:37:07 2000 +++ openssl-0.9.5/doc/apps/crl.pod Sat Mar 11 20:36:58 2000 @@ -112,6 +112,6 @@ =head1 SEE ALSO -Lcrl2pkcs7(1)|crl2pkcs7(1), Lca(1)|ca(1), Lx509(1)|x509(1) +Lcrl2pkcs7(1s)|crl2pkcs7(1s), Lca(1s)|ca(1s), Lx509(1s)|x509(1s) =cut diff -urN openssl-0.9.5-orig/doc/apps/crl2pkcs7.pod openssl-0.9.5/doc/apps/crl2pkcs7.pod --- openssl-0.9.5-orig/doc/apps/crl2pkcs7.pod Thu Jan 27 03:24:52 2000 +++ openssl-0.9.5/doc/apps/crl2pkcs7.podSat Mar 11 20:36:58 2000 @@ -85,6 +85,6 @@ =head1 SEE ALSO -Lpkcs7(1)|pkcs7(1) +Lpkcs7(1s)|pkcs7(1s) =cut diff -urN openssl-0.9.5-orig/doc/apps/dgst.pod openssl-0.9.5/doc/apps/dgst.pod --- openssl-0.9.5-orig/doc/apps/dgst.podFri Jan 21 04:16:19 2000 +++ openssl-0.9.5/doc/apps/dgst.pod Sat Mar 11 20:36:58 2000 @@ -6,7 +6,7 @@ =head1 SYNOPSIS -[Bdgst] +Bopenssl Bdgst [B-md5|-md2|-sha1|-sha|mdc2|-ripemd160] [B-c] [B-d] diff -urN openssl-0.9.5-orig/doc/apps/dhparam.pod openssl-0.9.5/doc/apps/dhparam.pod --- openssl-0.9.5-orig/doc/apps/dhparam.pod Thu Feb 24 19:18:49 2000 +++ openssl-0.9.5/doc/apps/dhparam.pod Sat Mar 11 20:36:58 2000 @@ -110,6 +110,6 @@ =head1 SEE ALSO -Ldsaparam(1)|dsaparam(1) +Ldsaparam(1s)|dsaparam(1s) =cut diff -urN openssl-0.9.5-orig/doc/apps/dsa.pod openssl-0.9.5/doc/apps/dsa.pod --- openssl-0.9.5-orig/doc/apps/dsa.pod Thu Feb 17 01:16:00 2000 +++ openssl-0.9.5/doc/apps/dsa.pod Sat Mar 11 20:36:58 2000 @@ -144,7 +144,7 @@ =head1 SEE ALSO -Ldsaparam(1)|dsaparam(1), Lgendsa(1)|gendsa(1), Lrsa(1)|rsa(1), -Lgenrsa(1)|genrsa(1) +Ldsaparam(1s)|dsaparam(1s), Lgendsa(1s)|gendsa(1s), Lrsa(1s)|rsa(1s), +Lgenrsa(1s)|genrsa(1s) =cut diff -urN openssl-0.9.5-orig/doc/apps/dsaparam.pod openssl-0.9.5/doc/apps/dsaparam.pod --- openssl-0.9.5-orig/doc/apps/dsaparam.podThu Feb 24 19:18:49 2000 +++ openssl-0.9.5/doc/apps/dsaparam.pod Sat Mar 11 20:36:58 2000 @@ -96,7 +96,7 @@ =head1 SEE ALSO -Lgendsa(1)|gendsa(1), Ldsa(1)|dsa(1),
Re:
See openssl/crypto/x509/x509_vfy.c for reference. There are functions as X509_verfy_cert and internal_verify just doing the same job as u wanted to do. Hazel --- Krishnam Raju [EMAIL PROTECTED] wrote: Hi, I also hv posted a similar question. After getting the issuers name frm the cert. u hv recvd u hv to read that issuers cert( CAs cert) and after this u hv to verify various fields. I belive there will be some api for doing this. i am looking for that. regds Krishnam Raju Brajesh Tiwari wrote: Hi: I am writing a SSL client using openSSL. The client talks to a Netscape secured web server. I am able to get the certificate from the web server. From the certificate, using X509_get_subject_name() and X509_get_issuer_name() I am able to get subject (certificate sender's) and issuer's (certificate issuer's) details. My question is what exactly should I do, and how, to verify/authenticate the certificate sent to me so that I know that they are from the correct web server. Thanks. Brajesh __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ Do You Yahoo!? Talk to your friends online with Yahoo! Messenger. http://im.yahoo.com __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Compiling Problems OpenSSL 0.9.5
Hello folks,
I have problems compiling openSSL 0.9.5 on a Suse 6.2 Linux system.
I have included the testlog file.
Thanks
Marcus
--
Marcus ThielmannPhone: +49-2605-961518
Mail: [EMAIL PROTECTED]
OpenSSL self-test report:
OpenSSL version: 0.9.5
Last change: PKCS7_encrypt() was adding text MIME headers twice beca...
OS (uname): Linux riesling 2.2.10 #2 Son Sep 19 17:39:26 MEST 1999 i586 unknown
OS (config): i586-whatever-linux2
Target (default): linux-elf
Target: linux-elf
Compiler: gcc version 2.7.2.3
Failure!
-
make[1]: Entering directory `/tmp/openssl-0.9.5'
c_rehash: rehashing skipped ('openssl' program not available)
touch rehash.time
testing...
make[2]: Entering directory `/tmp/openssl-0.9.5/test'
gcc -I../include -DTHREADS -D_REENTRANT -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer
-m486 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -c bntest.c -o bntest.o
gcc -o bntest -I../include -DTHREADS -D_REENTRANT -DL_ENDIAN -DTERMIO -O3
-fomit-frame-pointer -m486 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM bntest.o -L. -L..
-L../.. -L../../.. -L.. -lcrypto
../libcrypto.a(bn_add.o): In function `BN_uadd':
bn_add.o(.text+0x156): undefined reference to `bn_add_words'
../libcrypto.a(bn_div.o): In function `BN_div':
bn_div.o(.text+0x449): undefined reference to `bn_mul_words'
../libcrypto.a(bn_mul.o): In function `bn_mul_recursive':
bn_mul.o(.text+0x32): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0x126): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x156): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x16b): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x196): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x1ab): undefined reference to `bn_sub_words'
../libcrypto.a(bn_mul.o)(.text+0x1e6): more undefined references to `bn_sub_words'
follow
../libcrypto.a(bn_mul.o): In function `bn_mul_recursive':
bn_mul.o(.text+0x221): undefined reference to `bn_mul_comba4'
bn_mul.o(.text+0x253): undefined reference to `bn_mul_comba4'
bn_mul.o(.text+0x27f): undefined reference to `bn_mul_comba4'
bn_mul.o(.text+0x2af): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0x2e3): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0x30f): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0x3d5): undefined reference to `bn_add_words'
bn_mul.o(.text+0x3f1): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x40c): undefined reference to `bn_add_words'
bn_mul.o(.text+0x42d): undefined reference to `bn_add_words'
../libcrypto.a(bn_mul.o): In function `bn_mul_part_recursive':
bn_mul.o(.text+0x591): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x5d2): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x5ed): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x622): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x63d): undefined reference to `bn_sub_words'
../libcrypto.a(bn_mul.o)(.text+0x672): more undefined references to `bn_sub_words'
follow
../libcrypto.a(bn_mul.o): In function `bn_mul_part_recursive':
bn_mul.o(.text+0x6bb): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0x6cf): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0x8fd): undefined reference to `bn_add_words'
bn_mul.o(.text+0x920): undefined reference to `bn_sub_words'
bn_mul.o(.text+0x943): undefined reference to `bn_add_words'
bn_mul.o(.text+0x96b): undefined reference to `bn_add_words'
../libcrypto.a(bn_mul.o): In function `bn_mul_low_recursive':
bn_mul.o(.text+0xa1b): undefined reference to `bn_add_words'
bn_mul.o(.text+0xa41): undefined reference to `bn_add_words'
bn_mul.o(.text+0xa97): undefined reference to `bn_add_words'
../libcrypto.a(bn_mul.o)(.text+0xaa0): more undefined references to `bn_add_words'
follow
../libcrypto.a(bn_mul.o): In function `bn_mul_high':
bn_mul.o(.text+0xb6a): undefined reference to `bn_sub_words'
bn_mul.o(.text+0xb9a): undefined reference to `bn_sub_words'
bn_mul.o(.text+0xbb1): undefined reference to `bn_sub_words'
bn_mul.o(.text+0xbda): undefined reference to `bn_sub_words'
bn_mul.o(.text+0xbf1): undefined reference to `bn_sub_words'
../libcrypto.a(bn_mul.o)(.text+0xc1a): more undefined references to `bn_sub_words'
follow
../libcrypto.a(bn_mul.o): In function `bn_mul_high':
bn_mul.o(.text+0xc58): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0xc72): undefined reference to `bn_mul_comba8'
bn_mul.o(.text+0xcee): undefined reference to `bn_add_words'
bn_mul.o(.text+0xd1f): undefined reference to `bn_sub_words'
bn_mul.o(.text+0xd44): undefined reference to `bn_add_words'
bn_mul.o(.text+0xd76): undefined reference to `bn_sub_words'
bn_mul.o(.text+0xdd2): undefined reference to `bn_add_words'
bn_mul.o(.text+0xe03): undefined reference to `bn_add_words'
bn_mul.o(.text+0xe1c): undefined reference to `bn_sub_words'
bn_mul.o(.text+0xe39): undefined reference to `bn_add_words'
bn_mul.o(.text+0xe5c): undefined
Re: Compiling Problems OpenSSL 0.9.5
On Sun, Mar 12, 2000 at 04:07:25PM +0100, Marcus Thielmann wrote: I have problems compiling openSSL 0.9.5 on a Suse 6.2 Linux system. Please try today's snapshot, which should appear on ftp.openssl.org in a few hours. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Compiling Problems OpenSSL 0.9.5
I have problems compiling openSSL 0.9.5 on a Suse 6.2 Linux system. Try today's snapshot, URL: ftp://ftp.openssl.org/snaphost%2fopenssl-SNAP-2312.tar.gz (to appear in a couple of minutes). __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
using openssl under winNT
Thanks the help. I have successfully installed openssl on the winNT, now the problem is that when I tried to use "openssl req... ", error came out with "Using configuration from /usr/local/ssl/openssl.cnf, unable to load config info..." It seems that I installed the system on the unix env. and all the configuration information is based on unix env. But I definately installed it on NT. How can I change the configuration or recompile to get it work on the NT? Thanks greatly. Max __ Do You Yahoo!? Talk to your friends online with Yahoo! Messenger. http://im.yahoo.com __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
[STATUS] OpenSSL (Sun 12-Mar-2000)
OpenSSL STATUS Last modified at __ $Date: 2000/03/06 14:24:25 $ DEVELOPMENT STATE o OpenSSL 0.9.5a: Under development... o OpenSSL 0.9.5: Released on February 28th, 2000 o OpenSSL 0.9.4: Released on August 09th, 1999 o OpenSSL 0.9.3a: Released on May 29th, 1999 o OpenSSL 0.9.3: Released on May 25th, 1999 o OpenSSL 0.9.2b: Released on March22th, 1999 o OpenSSL 0.9.1c: Released on December 23th, 1998 RELEASE SHOWSTOPPERS AVAILABLE PATCHES o CA.pl patch (Damien Miller) IN PROGRESS o Steve is currently working on (in no particular order): Proper (or at least usable) certificate chain verification. Private key, certificate and CRL API and implementation. Developing and bugfixing PKCS#7 (S/MIME code). Various X509 issues: character sets, certificate request extensions. Documentation for the openssl utility. NEEDS PATCH o non-blocking socket on AIX o $(PERL) in */Makefile.ssl o "Sign the certificate?" - "n" creates empty certificate file OPEN ISSUES o internal_verify doesn't know about X509.v3 (basicConstraints CA flag ...) o The Makefile hierarchy and build mechanism is still not a round thing: 1. The config vs. Configure scripts It's the same nasty situation as for Apache with APACI vs. src/Configure. It confuses. Suggestion: Merge Configure and config into a single configure script with a Autoconf style interface ;-) and remove Configure and config. Or even let us use GNU Autoconf itself. Then we can avoid a lot of those platform checks which are currently in Configure. o Support for Shared Libraries has to be added at least for the major Unix platforms. The details we can rip from the stuff Ralf has done for the Apache src/Configure script. Ben wants the solution to be really simple. Status: Ralf will look how we can easily incorporate the compiler PIC and linker DSO flags from Apache into the OpenSSL Configure script. Ulf: +1 for using GNU autoconf and libtool (but not automake, which apparently is not flexible enough to generate libcrypto) o The perl/ stuff needs a major overhaul. Currently it's totally obsolete. Either we clean it up and enhance it to be up-to-date with the C code or we also could replace it with the really nice Net::SSLeay package we can find under http://www.neuronio.pt/SSLeay.pm.html. Ralf uses this package for a longer time and it works fine and is a nice Perl module. Best would be to convince the author to work for the OpenSSL project and create a Net::OpenSSL or Crypt::OpenSSL package out of it and maintains it for us. Status: Ralf thinks we should both contact the author of Net::SSLeay and look how much effort it is to bring Eric's perl/ stuff up to date. Paul +1 o The EVP and ASN1 stuff is a mess. Currently you have one EVP_CIPHER structure for each cipher. This may make sense for things like DES but for variable length ciphers like RC2 and RC4 it is NBG. Need a way to use the EVP interface and set up the cipher parameters. The ASN1 stuff is also foo wrt ciphers whose AlgorithmIdentifier has more than just an IV in it (e.g. RC2, RC5). This also means that EVP_Seal and EVP_Open don't work unless the key length matches the fixed value (some vendors use a key length decided by the size of the RSA encrypted key and expect RC2 to adapt). o ERR_error_string(..., buf) does not know how large buf is, there should be ERR_error_string_n(..., buf, bufsize) or similar. WISHES o __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
