Re: unable to get local issuer certificate

Hi I am not sure about the kind of cert u are having problem with. Is this some standard cert of some site (than pass on the URL) or if some internal site, than please check that complete chain is present in the IE CA list. Also, the CA cert should be installed in the Trusted root certs lists in

Re: unable to get local issuer certificate

On 8/28/06, Milan Tomic [EMAIL PROTECTED] wrote: While atempting to establish SSL connection I got this OpenSSL error: Certificate Verification: Error (20): unable to get local issuer certificate [...] One of the possible reasons for this error is that the server cert is signed by an

Re: Unable to locate the keystore/certificate store or private key

Hello, The basic succession of calls are as follows. I think the program waits for an ssl_read or ssl_write to implicitly trigger the handshake process. meth = TLSv1_client_method() SSL_load_error_strings(); SSLeay_add_ssl_algorithms(); SSL_CTX_new(meth); ssl = SSL_new( ctx );

Re: BIO and DTLS

Hello, Can anyone tell me if the behavior of the BIO_new_accept, BIO_do_accept, and BIO_read functions changes in any way while using DTLS? DTLS works over UDP so BIO_do_accept has no usage. Internally DTLS works on BIO created with BIO_new_dgram() and uses BIO_read() on that BIO

Re: Validating Cert Chain

Hello, i have a question about this following method int X509_STORE_CTX_init(X509_STORE_CTX *ctx, X509_STORE *store, X509 *x509, STACK_OF(X509) *chain); if i understand this correctly the argument 'x509' is the cert that u want to be verified the 'chain' is the

Re: SMIME_read_PKCS7 fails with memory BIO but works with file BIO

On Tuesday August 29th 2006 at 14:18 Heikki Toivonen wrote: I am trying to use SMIME_read_PKCS7 to read a signed and encrypted MIME message from memory BIO, but I can't get it to work. It works fine if I construct a file BIO to read from. Am I doing something wrong, or is this a bug? See

EAP-TLS certs

Hi, I have need of certs for 3 clients, for some tests on freeradius with a sniffer that it capture the input. Therefore I want certs of test the type which already use, generated with the script CA.all inside freeradius-1.1.2 sources. How I can make 3 certs for distinct for the clients? Is it

Re: EAP-TLS certs

Someone knows gives me of the information also on the guides who can help me? Thousand thanks for all Matteo ;-) The certs can be prepared without using CA.all - which is what I did. Two command (.bat or shell scripts) files - one used to create self-issued CA and the other to Issue

ocsp response validation problem

Hi, 0.9.8b I'm doing some OCSP testing and I had a little confusion with OCSP response validation. If you leave out -CAfile on the request then the validation fails even in the simple case where the CA is the same as the issuer. The examples in the ocsp(1) doc should include a request that

How to get the reason for rovocation in CRL Validation?

Hi, I am using openssl 0.9.8b. I am doing CRL validation. In that process, I got the CRL status thru the following API: API: sk_X509_REVOKED_find(crl-crl-revoked, rtmp). After that, I need find out the reason for revocation. I am using the API X509_REVOKED_get_ext_d2i(rtmp,