policy for Extensions

Hi all, is planned to add into openssl.cnf policy for extensions for use with openssl ca (like "policy for subject")? explanation: In this time is possible copy requesed extensions from request into certficate, but sometimes I'd like check some settings like: critical, keyUsage:certSign, etc. In

Re: error in eng_table.c openssl-SNAP-20011007

I'm committing this change anyway, but would be grateful if you could confirm at your end that this makes the warnings/errors go away? 2. Linker error: unresolved symbols a)EVP_DecryptInit_ex, b)EVP_EncryptInit_ex, c)ENGINE_load_openbsd_dev_crypto I'm fixing (c) properly now, expect

Re: error in eng_table.c openssl-SNAP-20011007

I'm committing this change anyway, but would be grateful if you could confirm at your end that this makes the warnings/errors go away? 2. Linker error: unresolved symbols a)EVP_DecryptInit_ex, b)EVP_EncryptInit_ex, c)ENGINE_load_openbsd_dev_crypto I'm fixing (c) properly

error in eng_table.c openssl-SNAP-20011007

in file /crypto/engine/eng_table.c on line 137 missing pointer before cleanup! wrong: int engine_table_register(ENGINE_TABLE **table, ENGINE_CLEANUP_CB cleanup, ENGINE *e, const int *nids, int num_nids, int setdefault) correct: int engine_table_register(ENGINE_TABLE **table, ENGINE_CLEANUP_CB

Re: error in eng_table.c openssl-SNAP-20011007

ot; [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 08, 2001 4:44 PM Subject: Re: error in eng_table.c openssl-SNAP-20011007 Hi there, Thanks! Of course, I'm wondering to myself, how the hell didn't "gcc" pick this up before now? Cheers, Geoff On Monday 08 Octobe

bugs in openssl-SNAP-20011007

all are tested on W2k with VC++ 7.0 (maybe this is problem (:-)) 1) in /crypto/evp/makefile on line 23 are wrong: TEST=evp_test.c evptests.txt but this create in global makefile with evptests.txt.c! correct: TEST=evp_test.c 2) /apps/speed.c on line 86 /apps/s_time.c on line 84 error: #include

Engine question

Hi all, we will implement our engine. But ENGINE in OpenSSL are develop still. My question is: what is right sequence a call functions for engine which have authenticate access to the private key usage? Without OpenSSL I use something like this: 1) connect to IP address 2) login as USER 3) write

BUG in X509v3/v3_cpols.c

Hi devs, in function policy_section() if first policy qualifier is UserNotice memory isn't allocate for *pol-qualifiers*. If first is CPS all is OK. Martin __ OpenSSL Project

Concatenation BIOs ones more

Hi devs, (excuse me I write for this still) I found easy way for do it. I mean create concatenation BIOs. pointers next_bio are used only for filters BIO. I concatenate BIOs through this pointer. modification: bio_lib.c BIO_read() { i=b-method-bread(b,out,outl); /* line 166: concatenate

Re: Bug in PEM_X509_INFO_read_bio() ??

meddelelse- Fra: Martin Szotkowski [mailto:[EMAIL PROTECTED]] Sendt: 19. januar 2001 12:54 Til: Hellan,Kim KHE Emne: Bug in PEM_X509_INFO_read_bio() ?? Hi Kim, I have same problem, but I don't know solution. How you resolve this problem? thanks Martin

BIO_seek in readonly mem BIO?

Hi, this feature are not supported? Why? Is there way reach it direct through BUF_MEM in this readonly mem BIO? thanks Martin __ OpenSSL Project http://www.openssl.org Development Mailing List

engine propose

Hi all, we are using OpenSSL with smart card. We made hard intervention into OpenSSL code, that enable use smard card as a key file. When I use RSA key in file I use standard file, if I want use card, I use special file with some setting in this file. I simply call PEM_read_bio_RSAPrivateKey()

engine suggestion

Hi Engine Devs, I don't know what you want add to the Engine, but I think, that good idea will be use Engine whit 1) MS CryptoAPI 2) Netscape Navigator key and certificate database through this you can use all HW or SW CSP installed in Windows or in Netscape. Martin

engine suggestion

Hi Engine Devs, I don't know what you want add to the Engine, but I think, that good idea will be use Engine whit 1) MS CryptoAPI 2) Netscape Navigator key and certificate database through this you can use all HW or SW CSP installed in Windows or in Netscape. Martin

Re: engine suggestion

Those are indeed good ideas. Something to really give some thought is how to handle certificates that one gets through a Netscape engine. As it is right now, the engine mechanism supports private keys on the cart, but not certificates. I think that you can access direct to the cert7.db

engine PKCS11

Hi, will be in OpenSSL created engine (I mean ENGINE) that will communicate with HW using PKCS11? I think, this is way how to create universal engine. Martin __ OpenSSL Project

error in certificatePolicies (X509V3_get_section)

Hi, I'm using W2000 and OpenSSL 0.9.4 All works fine, but if I changed lines in config file, than Win hanged with this error "The instruction at xxx referenced memory at "0x0". " this works fine: (caica.cfg) certificatePolicies =

Will be WTLS certs in OpenSSL?

If yes when? If no why? thanks Martin __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager

Re: difference between OpenSSL and BSAFE libs?

] -Original Message- From: Martin Szotkowski [mailto:[EMAIL PROTECTED]] Sent: Friday, May 26, 2000 1:58 AM To: [EMAIL PROTECTED]; konference_OpenSSL_dev Subject: difference between OpenSSL and BSAFE libs? Hi all, In our company we have used OpenSSL few years (from SSLeay 8.x

OT: I need algorithm (or function)

Hi all, i have interesting problem: + We have some Personal Number (PN). + PN is primary key in database (DB) of important data. ("bad customer") + must NOT exist way to get PN and data from DB + must exist way to find out if PN is in DB + of course we must inserting PN and data in DB - ease