Re: Certificate validation problem

2008-10-10 Thread Gerhard Gappmeier
Thanks Dave, today I rechecked the dump of the certificates which cause the problem. The AUTHORITY_KEYID was really missing in them. They were created using some MS .Net stuff. My certificates which I create with openssl work fine. I told the guy who created the wrong certificates about the

Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread Ray Casterline
Hello, The Windows NT 4.0 system has the workstation service stopped. This causes the following snippet from rand_win.c to return 0 if (netstatget(NULL, LLanmanWorkstation, 0, 0, outbuf) == 0) { RAND_add(outbuf,

RE: non-blocking version of SSL_peek

2008-10-10 Thread vne
David Schwartz wrote: Hi, Can anyone tell me if SSL_peek is a blocking or non-blocking call ? It can be either. When I use it inside my code, then the program blocks on this fuction call where there is no data on the socket. If you're using blocking socket calls, that's what

Re: Valid certificate reported as expired

2008-10-10 Thread Andrej Podzimek
Have you enabled CRL checking too? You can also get that if the nextUpdate time in a CRL has passed. That might explain things if the CRL runs for a month or so. WOW! That's it! Thank you so much! CRL expired exactly the day it stopped working. I did not know that a CRL could expire. Never

[FWD] DNS Error while doing SSL handshake - bad gethostbyaddr

2008-10-10 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from Joy, Byju (GE Healthcare, consultant) [EMAIL PROTECTED] - Subject: DNS Error while doing SSL handshake - bad gethostbyaddr Date: Fri, 10 Oct 2008 15:00:51 +0200 Thread-Topic: DNS Error

RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread David Schwartz
Hello, The Windows NT 4.0 system has the workstation service stopped. This causes the following snippet from rand_win.c to return 0 if (netstatget(NULL, LLanmanWorkstation, 0, 0, outbuf) == 0) { RAND_add(outbuf,

Re: FIPS fail

2008-10-10 Thread Dr. Stephen Henson
On Fri, Oct 10, 2008, joshi chandran wrote: Hi All, Can any body give me small program which set in fips mode and uses non fips algorithm ,hence fails while running . Well the standard OpenSSL utility will do that e.g. OPENSSL_FIPS=1 openssl md5 somefile Steve. -- Dr Stephen N. Henson.

Re: FIPS fail

2008-10-10 Thread joshi chandran
Hi All, Can any body give me small program which set in fips mode and uses non fips algorithm ,hence fails while running . Thanks Joshi On Thu, Oct 9, 2008 at 5:13 PM, Steve Marquess [EMAIL PROTECTED]wrote: Kyle Hamilton wrote: Okay. Let's see if I can piece together everything I've

RE: RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread Ray Casterline
Thanks for the suggestionb but the RAND_poll function already pulls from the system right after the big #if 0 block as described below in the stetup for the calls. if (advapi) { /* * If it's available, then it's available in both ANSI

RE: non-blocking version of SSL_peek

2008-10-10 Thread David Schwartz
Actually before closing a TLS connection I need to make sure that no pending data is present on the that socket. So, calling SSL_peek would tell if this is the case or not. No, it won't. Okay, you call SSL_peek, and there's no pending data. Now, you're about to call SSL_shutdown. How do you

RE: RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread David Schwartz
Thanks for the suggestionb but the RAND_poll function already pulls from the system right after the big #if 0 block as described below in the stetup for the calls. if (advapi) { /* * If it's available, then it's available in

Microsoft Visual C++

2008-10-10 Thread Michael Luich
Hello, I'm trying to compile in Microsoft Visual C++ Express and I'm getting linker errors like: error LNK2019: unresolved external symbol _BIO_gets referenced in function char * __cdecl sr_encrypt(char *,struct _iobuf *) (?sr_encrypt@ @YAPADPADPAU_iobuf@@@Z) I got the header files all

bug in gost engine

2008-10-10 Thread Евгений
I found a bug in implementation of gost89 algorithm in gost engine of OpenSSL library. I installed openssl-SNAP-20081006. Simple program shows an error in decryption of buffer encrypted with gost89 algorithm. #include openssl/evp.h #include stdlib.h static void print_buffer(void *buffer, int

RE: [FWD] DNS Error while doing SSL handshake - bad gethostbyaddr

2008-10-10 Thread Dave Thompson
-Original Message- From: [EMAIL PROTECTED] On Behalf Of Lutz Jaenicke Sent: Friday, 10 October, 2008 09:03 - Forwarded message from Joy, Byju (GE Healthcare, consultant) [EMAIL PROTECTED] - Subject: DNS Error while doing SSL handshake - bad gethostbyaddr Date: Fri, 10 Oct

Re: Microsoft Visual C++

2008-10-10 Thread Thomas J. Hruska
Michael Luich wrote: Hello, I'm trying to compile in Microsoft Visual C++ Express and I'm getting linker errors like: error LNK2019: unresolved external symbol _BIO_gets referenced in function char * __cdecl sr_encrypt(char *,struct _iobuf *) (?sr_encrypt@ @YAPADPADPAU_iobuf@@@Z) I got the