Peer Certificate Verification API

2008-11-03 Thread Aravinda babu
Hi all, Normally , During HTTPS connection establishment peer server produces it's certificate to the client.I want to know how openssl checks this certificate ? I want to know the exact API which does this so that i will check the code of that API. Please tell me the related things regarding

Re: Peer Certificate Verification API

2008-11-03 Thread Kyle Hamilton
The algorithm for checking of the digital signature of the peer certificate is covered in PKIX (RFC 3280, obsoleted by RFC 5280) and the ITU standard X.509. The library-client code for verifying a certificate can be found in the apps/verify.c . You might want to look at the man pages for

Re: [openssl.org #1693] Compiling OpenSSL with mingw-w64

2008-11-03 Thread Roumen Petrov
Alon Bar-Lev via RT wrote: On 10/31/08, Andy Polyakov via RT [EMAIL PROTECTED] wrote: Could you please test the other suggested bn_lcl.h modification? While you're on it... [SNIP] Attached is a new patch. Thanks! Alon. Why mingw64 ... -D_WIN32_WINNT=0x333 ? This has to defined by

Generation of DH parameter n DH pri key?

2008-11-03 Thread shivakumar Balur
Hi All, I am not able to generate DH Private Key using openssl command. Can any one help me in same. -- Shivakumar Balur -B '+' ve, Think '-' ve

Re: [openssl.org #1693] Compiling OpenSSL with mingw-w64

2008-11-03 Thread Alon Bar-Lev
On 11/3/08, Roumen Petrov [EMAIL PROTECTED] wrote: Why mingw64 ... -D_WIN32_WINNT=0x333 ? This has to defined by openssl headers (if not defined) to 0x400. HEAD version is for winsock2 and I'm not sure that winsock2 is available as example for ancient nt3.51. The winsock2 library is