pb in simultaneous certificate generation

2007-05-15 Thread piyush tewari
Hello everybody, i m trying to create openssl for generating multiple certificate generation, simultaneously. but the error i m having during this process is that "some other process is using serial file". Is there any mean by which i can perform the simultaneous crt generation by bat file

Re: How to get rid of this message :"Enter PEM pass phrase" ?

2007-05-15 Thread A . L . M . Buxey
Hi, > 1. rpm -e openssl ( to install the already installed openssl-0.9.8b) 1) reinstall openssl package that came with Fedora. unless you are going to rebuild all the packages that depend on it you will face a nightmare 2) strip off the password from your .pem file - if you really dont want to m

Re: 0.9.8e runtime error

2007-05-15 Thread Victor Duchovni
On Tue, May 15, 2007 at 07:03:53PM +0200, [EMAIL PROTECTED] wrote: > Hi, > > I built and installed 0.9.8e from source, with config flag "shared" to also > build shared libraries. This was OK. > > Then I built Apache with SSL support. The build succeeded but on start Apache > exits at once with

How to get rid of this message :"Enter PEM pass phrase" ?

2007-05-15 Thread Rajat Dudeja
Hi Folks ! I am using the openssl-0.9.8b. My application racoon which is a key management software for the IPsec uses openssl to read the self-siged certificates. Every time my certificate is read, I'm asked for the pass phrase "Enter the PEM pass phrase" I always enter the password : abcd I wa

0.9.8e runtime error

2007-05-15 Thread puash1sa
Hi, I built and installed 0.9.8e from source, with config flag "shared" to also build shared libraries. This was OK. Then I built Apache with SSL support. The build succeeded but on start Apache exits at once with "undefined symbol: SSL_CTX_sess_set_new_cb". Then I built ans installed 0.9.8d a

RE: Multi-threaded SSL Socket Usage

2007-05-15 Thread David Schwartz
> The design of the application is that there are worker threads which > pick up data and send them out via the sockets. This works for the most > part, however as mentioned it will sometimes no longer appear to work > (data is not received in a timely fashion for example). I would think > this is

Re: Multi-threaded SSL Socket Usage

2007-05-15 Thread Rodney Thayer
Andrew Armstrong wrote: > Is there anyone out there with experience in using OpenSSL in a > multi-threaded application that can provide some sample code or anything > to help address these issues? I vaguely recall the last time I did this that OpenSSL made no claim of thread safety and you had to

Error in SSL

2007-05-15 Thread prashant
Hi All, I am testing an application and it uses SSL for communication. Each time i connect to it using an open_ssl client using the commands below # openssl s_client -state -CAfile ca.pem -cert node1.pem -key node1.pem -verify 10 -msg -state -showcerts -connect 192.168.1.83:6664 -debug -tls1

Re: CRL management pb

2007-05-15 Thread Dr. Stephen Henson
On Tue, May 15, 2007, [EMAIL PROTECTED] wrote: > > Thank you Dr. Henson for the answer .. > I feel more ensured ... :) > > I achieved to go a little bit further in my test now after having put the > right > certificate in client side. > I am quite suprised by the behaviour of my server since wh

Re: CRL management pb

2007-05-15 Thread jfhuynh
Thank you Dr. Henson for the answer .. I feel more ensured ... :) I achieved to go a little bit further in my test now after having put the right certificate in client side. I am quite suprised by the behaviour of my server since when the client certificate belongs to the CRL list handled by my s

Re: CRL management pb

2007-05-15 Thread Dr. Stephen Henson
On Tue, May 15, 2007, [EMAIL PROTECTED] wrote: > > Thank you for your response. > Actually I use the default verify_callback function (NULL) >"SSL_CTX_set_verify(ctx,SSL_VERIFY_PEER,NULL);" > By default it does not take into account possible errors coming from client > certificate? > Does it

Multi-threaded SSL Socket Usage

2007-05-15 Thread Andrew Armstrong
Hi Everyone, I hope I have found the right place to ask for some advice. An application we have developed is responsible for handling concurrent connections from multiple SSL Sockets. While the application works fine for a while; there will sometimes be an issue where a socket blocked on wri

Re: Problem compiling with debug option in OpenSuSE 10.2

2007-05-15 Thread Goetz Babin-Ebell
--On Mai 15, 2007 13:56:39 +0700 Endhy Aziz <[EMAIL PROTECTED]> wrote: Hi all, I'm trying to compile OpenSSL-0.9.8c with debug option, but some errors shown below occurs : ... ... [...] /usr/lib/gcc/i586-suse-linux/4.1.2/../../../../i586-suse-linux/bin/ld: cannot find -lefence ^^