multi-thread support

2006-02-19 Thread Randy Turner
Hi All, I just wanted to verify that, as of OpenSSL 0.9.8a, any OpenSSL data facility that utilizes "STACK_OF" as a container for different types of objects, the routines that reference these "stacks" do not support multiple threads accessing the same "stack". Is this the case? I didn't

Re: SSL_accept and SIGALRM

2006-02-19 Thread Alberto Alonso
I hate answering my own questions, but after hours of frustration it seems that the answer relies on how signal handlers are set. I should of paid more attention to the man page for signal(), it states on the NOTES that it should not be used in a multi-threaded process. The right function is siga

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Georg Lohrer
On So, 19 Feb 2006, Kyle Hamilton wrote: > Incidentally: I have no idea what the concept of "serial number" that > Deutsche Post is using, but those aren't serial number 1 or 2, no > matter what the website OCSP responder says. I don't speak or read > German, which makes it difficult for me to re

Re: Deutsche Post

2006-02-19 Thread Kyle Hamilton
On 2/19/06, Peter Sylvester <[EMAIL PROTECTED]> wrote: > Where did you find the certs from Deutsche Post? http://www.deutschepost.de/dpag?skin=lo&check=yes&lang=de_EN&xmlFile=49490, click on 'Certificate lookup', second option from the bottom of the box close to the upper right corner of the page.

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Kyle Hamilton
Incidentally: I have no idea what the concept of "serial number" that Deutsche Post is using, but those aren't serial number 1 or 2, no matter what the website OCSP responder says. I don't speak or read German, which makes it difficult for me to read the CPS they've got, especially as regards the

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Kyle Hamilton
Okay. :) Anyway, the files that I got were perfectly fine PEM. It was having trouble with the postal address, but asn1parse was able to handle them fine. Now, to try to import them into Firefox and see if they can be handled... and it looks like they can't. Time to head over to the dev-tech-cry

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Dr. Stephen Henson
On Sun, Feb 19, 2006, Kyle Hamilton wrote: > Georg, > > would you mind if I forwarded the certificates to Dr. Henson? (I > believe he's in the UK, which has stricter privacy laws. ;) ) > No need. I pulled the certificate out of that OCSP response and I've applied a fix to OpenSSL to tolerate i

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Georg Lohrer
Hi Stephen, On So, 19 Feb 2006, Dr. Stephen Henson wrote: > On Sun, Feb 19, 2006, Georg Lohrer wrote: > > > > > I have just sent an email to Kyle giving him the certificates for > > scrutinizing. So I'm very excited seeing any output. > > > > Your initial suspicion was correct about postal

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Kyle Hamilton
Georg, would you mind if I forwarded the certificates to Dr. Henson? (I believe he's in the UK, which has stricter privacy laws. ;) ) -Kyle On 2/19/06, Georg Lohrer <[EMAIL PROTECTED]> wrote: > Hi Stephen, > > thank you for coming back on my questions. > > On So, 19 Feb 2006, Dr. Stephen Henson

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Dr. Stephen Henson
On Sun, Feb 19, 2006, Georg Lohrer wrote: > > I have just sent an email to Kyle giving him the certificates for > scrutinizing. So I'm very excited seeing any output. > Your initial suspicion was correct about postal address. When OpenSSL is patched to tolerate it it will parse the certifiate j

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Georg Lohrer
Hi Stephen, thank you for coming back on my questions. On So, 19 Feb 2006, Dr. Stephen Henson wrote: > On Sun, Feb 19, 2006, Georg Lohrer wrote: > > > > > Unfortunately I cannot get the contents of a certificate with: > > > > > pkcs15-tool --read-certificate 01 | openssl x509 -text -noo

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Kyle Hamilton
On 2/19/06, Georg Lohrer <[EMAIL PROTECTED]> wrote: > Hi Kyle, > > thank you for your explanation. Now the fog begins to vanish. > > Asymetric cryptography is well known but not the way it will be done with > SmartCard, or better with my SmartCard. > I was disturbed, because signtrust.de has to off

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Dr. Stephen Henson
On Sun, Feb 19, 2006, Georg Lohrer wrote: > Hi Kyle, > > On So, 19 Feb 2006, Kyle Hamilton wrote: > > Asymetric cryptography is well known but not the way it will be done with > SmartCard, or better with my SmartCard. If it has a public, private key pait it will use asymmetric encryption...

Re: Openssl signing with smartcard does not find certificate

2006-02-19 Thread Georg Lohrer
Hi Kyle, On So, 19 Feb 2006, Kyle Hamilton wrote: > How these things work is by a process called "Asymmetric > cryptography", or "public/private key cryptography". Your smartcard > has both a public and a private key stored on it. The private key > will never leave the card, but the public k