Re: Error with dgst -sign

2010-06-29 Thread Nacho Álvarez
Hi again, Do you say me who change if (do_verify) r = EVP_DigestVerifyInit(mctx, pctx, md, e, sigkey); else r = EVP_DigestSignInit(mctx, pctx, md, e, sigkey); for if (do_verify) r = EVP_DigestVerifyInit(mctx, pctx, md, NULL, sigkey);

Re: defines set in build

2010-06-29 Thread Jakob Bohm
On 28-06-2010 15:26, Carter Browne wrote: On 6/28/2010 7:15 AM, Jakob Bohm wrote: ... If you are looking for a small, minimal-impact perl to use for this, try Strawberry perl, 5.12 or later, run its MSI file and then remove its bogus setting of the TERM environment variable from the My

Re: Error with dgst -sign

2010-06-29 Thread Dr. Stephen Henson
On Tue, Jun 29, 2010, Nacho lvarez wrote: Hi again, Do you say me who change if (do_verify) r = EVP_DigestVerifyInit(mctx, pctx, md, e, sigkey); else r = EVP_DigestSignInit(mctx, pctx, md, e, sigkey); for if (do_verify)

RE: openssl execution failure: (Win Apache) configfile name?

2010-06-29 Thread David Schulberg
Hi, Taking out the quotes and all is good! David -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of David Schulberg Sent: Tuesday, 29 June 2010 9:59 AM To: openssl-users@openssl.org Subject: RE: openssl execution failure: (Win

SSL3_GET_RECORD:decryption failed or bad record mac

2010-06-29 Thread Amit Ben Shahar
I am having issues with a server, i'm getting many of these errors especially while running a load (~80 users). here is the full error message: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac It seems to be occurring during the negotiation (accept) phase. Maybe

Re: Error with dgst -sign

2010-06-29 Thread Nacho Álvarez
Ok, with option disable-capieng (I didn't know it) OpenSSL compiles... but I changed e for NULL in those calls (EVP_Digest... in dgst.c file) and the same error occurs: Error setting context 295228:error:260C0065:engine routines:ENGINE_get_pkey_meth:unimplemented public key

Re: Error with dgst -sign

2010-06-29 Thread Dr. Stephen Henson
On Tue, Jun 29, 2010, Nacho lvarez wrote: Ok, with option disable-capieng (I didn't know it) OpenSSL compiles... but I changed e for NULL in those calls (EVP_Digest... in dgst.c file) and the same error occurs: Error setting context 295228:error:260C0065:engine

Adding OIDs

2010-06-29 Thread Mag
I'm interested in using custom OIDs for private application purposes. I've found the documentation to be deficient. For instance, in openssl.cnf it gives an example line of [ new_oids ] #testoid1=1.2.3.4 When I uncomment that line I can't even tell what the effect is; e.g., openssl req ...