Re: how to use openssl's header file in my program?

If you complied with libssl.a, just like gcc settime.c [path]libssl.a If you complied with libssl.so, just like gcc -L[path] -lssl settime.c On Wed, 1 Dec 2004 15:46:25 +0800 (CST), alan alan [EMAIL PROTECTED] wrote: First,thanks for your answer.Another,how to

how to sign without password prompt?

Hi, I'm trying to sign a file without password prompting (under Windows) openssl md5 -sign private.txt signature.txt signed.dat (Enter password .) Then I tried this: openssl md5 -passin pass:test -sign private.txt Signature.txt signed.dat .. and this: echo -n test | openssl md5

Fwd: Problem with 'make tests' (version 0.9.7e) - unknown cipher (cypher aes-128-cbc)

Hello, I'm building openssl-0.9.7e in Fedora Core 1. I made some patches (look at the attachments) to fix the root Makefile.org to remove 'fips' from SHLIBSDIR, remove 'FAR' defines from kssl.h and kssl.c, and to add '#include errno.h' in kssl.c, without that I can't finnish the 'make all'.

Re: how to use openssl's header file in my program?

I just solved it,the command is: # gcc settime.c -lcrypto Who can tell me why and explain it?thanksXuekun Hu [EMAIL PROTECTED] wrote: If you complied with libssl.a, just likegcc settime.c [path]libssl.aIf you complied with libssl.so, just likegcc -L[path] -lssl settime.c On Wed, 1 Dec 2004

RE: how to use openssl's header file in my program?

man gcc --- George Shaw Senior Software Engineer Axway a Sopra Group company Tel: +44 (0) 7802 452186 Fax: +44 (0) 1454 299684 email: [EMAIL PROTECTED] www.axway.com --- Ce message est exclusivement destin aux personnes dont le nom figure

Getting Basic Constraint

Hi All, This list is really useful. I am onto RD of OpenSSL at the moment and have got all my questions answered till now. I need to get the basic constraint value from the certificate to find out if it is a CA or not. What I should be doing for this more over I need to know a bit about how LDAP

Re: how to use openssl's header file in my program?

In message [EMAIL PROTECTED] on Wed, 1 Dec 2004 21:12:23 +0800 (CST), alan alan [EMAIL PROTECTED] said: wlx712 I just solved it,the command is: wlx712 # gcc settime.c -lcrypto wlx712 Who can tell me why and explain it?thanks Well, when you just do the following: gcc settime.c you

Certifcate verification failure

Hello, I am running same program (verifying certificate chain)on pentium machine and ARM machine. On pentium, the chain verifies, but on ARM processor it fails. Incidentaly the command line utility of openssl verifies the cert chain on both machines. I tried generating certs on ARM machine, and

RE: Bug Report: make install problem with 0.9.7e on Solaris 8. P ath separator problem?

If Marvin Nipper is listening, I have a question about these fixes that you may have tried. Did you add the fixes provided to all the makefiles under check in #12630 or just the ones under /Fips/ $EXHEADER? I was getting the same errors, Im about to try changing the makefiles under

RE: Certifcate verification failure

I had the same type of error using OpenSSL 0.9.7d built with Microsoft's eMbedded C++ 4.0 compiler on a Windows CE ARM device. However, I didn't look into it further because the version built with the 3.0 compiler worked correctly on the same device. I wouldn't be surprised if the same bug is

Re: Getting Basic Constraint

On Wed, Dec 01, 2004, Aftab Alam wrote: Hi All, This list is really useful. I am onto RD of OpenSSL at the moment and have got all my questions answered till now. I need to get the basic constraint value from the certificate to find out if it is a CA or not. What I should be doing for this

Re: Issues creating Certificate Authority

On Nov 23, 2004, at 1:59 PM, Charles B Cranston wrote: It's possible from what you describe that it was a hanging alias, that is, a symbolic link pointing to a file that does not actually exist. This looks like a file initially but gets a file does not exist when you try to actually use it... Dan

SSL3_GET_FINISHED:digest check failed

Hello, I tried do setup a connection via secure ftp to a particular ftp server with ssl encryption. using various programs (curl, lftp, ftps...) I allways get the same error: SSL3_GET_FINISHED:digest check failed because the message is the same in various programs i suppose that it could be a

Re: Issues creating Certificate Authority

On Wed, Dec 01, 2004, Dan O'Brien wrote: On Nov 23, 2004, at 1:59 PM, Charles B Cranston wrote: It's possible from what you describe that it was a hanging alias, that is, a symbolic link pointing to a file that does not actually exist. This looks like a file initially but gets a file does

Problems with RSA public key

Hello: I found that the resultin file from PEM_write_RSAPublicKey() function is diferent to the output of openssl x509 -in cert.pem -noout -pubkey (generated with the same key pair). Is there any way to extract the public key from a certificate in the same format as what PEM_write_RSAPublicKey()

Re: Problems with RSA public key

On Wed, Dec 01, 2004, Darío Mariani wrote: Hello: I found that the resultin file from PEM_write_RSAPublicKey() function is diferent to the output of openssl x509 -in cert.pem -noout -pubkey (generated with the same key pair). Is there any way to extract the public key from a certificate in

RE:Certifcate verification failure on ARM

Hi, I am working with gcc. Even if I want to solve this porblem, I dont know how to do it.Strangely, when we use the command line utility (built using the same gcc during make) the certificate chain verfies, but in the code it does'nt. While on Pentium, everything works fine.If anybody knows a way

openssl-0.9.7e install failed w/syntax error

Greetings: Any idea what causes this error - other than the obvious, a bug? This was the result of this sequence configure make make test (as root) make install [...] making install in crypto/comp... making install in crypto/ocsp... making install in crypto/ui... making install in

Re: openssl-0.9.7e install failed w/syntax error

On Wed, Dec 01, 2004, Gregory Hicks wrote: Greetings: Any idea what causes this error - other than the obvious, a bug? Please try the latest stable snapshot and see if that fixes it. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer

Re: openssl-0.9.7e install failed w/syntax error

In message [EMAIL PROTECTED] on Wed, 1 Dec 2004 10:34:54 -0800 (PST), Gregory Hicks [EMAIL PROTECTED] said: ghicks Greetings: ghicks ghicks Any idea what causes this error - other than the obvious, a bug? A *known* bug. Download a recent 0.9.7 snapshot and try it, please. There's work going

Re: openssl-0.9.7e install failed w/syntax error

Date: Wed, 01 Dec 2004 19:54:37 +0100 (CET) To: [EMAIL PROTECTED], ghicks CC: ghicks Subject: Re: openssl-0.9.7e install failed w/syntax error From: Richard Levitte - VMS Whacker [EMAIL PROTECTED] X-Waved: dead chicken, GNU emacs 21.3.1, Mew version 4.0.65 X-Mew: See http://www.mew.org/

Re: openssl-0.9.7e install failed w/syntax error

../../libcrypto.a fips_sha1dgst.o fips_sha1_selftest.o /usr/ccs/bin/ranlib ../../libcrypto.a || echo Never mind. make[2]: Leaving directory `/home/ghicks/incoming/mixmaster/openssl-f-0.9.7-stable-SNAP-20041201/fips/sha1' making all in fips/rand... make[2]: Entering directory `/home/ghicks/incoming

SSL_CTX_use_certificate_chain_file() error

Hi all I am using a SOAP toolkit called gSOAP which supports OpenSSL. While my application works fine on Linux and FreeBSD, it fails on Windows. The failure comes from a line that says if (!SSL_CTX_use_certificate_chain_file(soap-ctx, soap-keyfile)) return soap_set_receiver_error(soap,

Re: openssl-0.9.7e install failed w/syntax error

for `rand_fips_meth.seed') line 92? I've that initialiser on line 106. ghicks make[2]: *** [fips_rand.o] Error 1 ghicks make[2]: Leaving directory ghicks `/home/ghicks/incoming/mixmaster/openssl-f-0.9.7-stable-SNAP-20041201/fips/rand' Oh! Oh! Oh! We need to stop producing those FIPS

SSLv3 TLS ciphers

Hi, I've written a program that deals in SSLv3, but it uses a TLS cipher... my code gets a bad MAC header message when I use s_client but works fine if I add the -ssl3 option. My question is, can you use TLS ciphers in code that only handles SSLv3? For instance TLS calculates the MAC

Re: SSLv3 TLS ciphers

Oh.. man, I always answer my own questions. What's happening here is that the rollback protection afforded for version 2 - 3 in the client-key-exchange message, is also hurting me when I'm trying to make a TLS connection an SSL3 connection.. which means I have to either maintain two separate

Re: Nessus security alert issued in error against OpenSSL v0.9.7d?

Thanks for the explanantion and the recommendation. I am still wondering: 1) Why does nessus claim I have an older version of OpenSSL than I really do? AND 2) Is the problem Nessus reports actually fixed in 0.9.7d? - Andrew From: Dr. Stephen Henson [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED]

Re: Nessus security alert issued in error against OpenSSL v0.9.7d?

George, Thanks for the help. I took a network trace and it appears my server either issues a RST or a FIN on the connection so the first case you mentioned must apply. I understand that the author of the Nessus plug-in decided that no response is bad, but is that decision really valid here?

Re: openssl-0.9.7e install failed w/syntax error

: error: (near initialization for `rand_fips_meth.seed') line 92? I've that initialiser on line 106. ghicks make[2]: *** [fips_rand.o] Error 1 ghicks make[2]: Leaving directory ghicks `/home/ghicks/incoming/mixmaster/openssl-f-0.9.7-stable-SNAP-20041201/fi ps/rand' Oh! Oh! Oh! We

Memory problems in EVP_VerifyInit()?

Hi there, I have a couple of applications built upon a small library function that I have written. One of these applications works fine, all the time. The other does not. Ever. I'm suspicious that this may be a possible memory corruption problem in EVP_VerifyInit(), but I'd appreciate a sanity

Re: Memory problems in EVP_VerifyInit()?

I wrote: [lots of exciting speculation abot EVP_VerifyInit()] Unfortunately, all wrong. No exciting bugs in OpenSSL 0.9.7e. In another shared library that we are using, nm tells me that there are some interesting functions with names like EVP_*(). Time to go and talk with a cow-orker.