RE: Error: relocations based on the ABS44 coding model can not be used in building a shared object

2010-08-19 Thread Jeremy Farrell
As the first line of output from 'ldd s2_meth.o' says, the file is not an executable. Why are you running that command, and why are you expecting it to do anything useful? GIGO applies here, the output from the command is as meaningless as the command. I'd do a standard dynamic build of OpenSSL

Re: Authenticode timestamp processing: error while parsing timestamp request

2010-08-19 Thread Jakob Bohm
On 18-08-2010 19:41, Alessandro Menti wrote: Thanks for your help, Jacob. Where can I find your signing tools? A quick Google search revealed no useful links. Sorry, closed source in-house code only, tied heavily into other closed source code, anyway it was a client, not a server. Alternati

RE: Error: relocations based on the ABS44 coding model can not be used in building a shared object

2010-08-19 Thread BISHT, SEEMANT (SEEMANT)
Hi Time, Iam still facing the same issue. Actually I need to have .so similar to libssl.so & libcrypto.so but just single one. And also I need to have the same in 64 Bit. Iam still getting the same error: ld: fatal: relocation error: R_SPARC_H44: file ssl/s2_meth.o: symbol: relocations based on

RE: The best way to limit cipher strength

2010-08-19 Thread Diffenderfer, Randy
After further study, I have accomplished my immediate goal by rebuilding sendmail with FFR_TLS_1 enabled which gives me a CipherList option, and a quick 'man ciphers' sets me down the path to strong ciphers. So, I'm good to go. But, as a thought project, how would I do what I had originally as

Re: Certificate roll

2010-08-19 Thread Sam Jantz
Mohan, Unless the certificate is self-signed there is no way to change the information without having to invalidate it by signing it yourself anyway. You would either have to get a new certificate from the same (or other trusted) CA, and install that one, or (if it is self signed) generate a new

Re: Getting info from SSL_CTX

2010-08-19 Thread Harshvir Sidhu
Sam, I will try this and incase have some questions then i will send an email. Thanks. - Harshvir On Thu, Aug 19, 2010 at 10:02 AM, Sam Jantz wrote: > Harchvir, > > I am working on a similar problem, and from all I've seen the > information you are looking for is not stored in the conte

Fully UTF8 Subject line? UTF8 commonName?

2010-08-19 Thread Lou Picciano
Dear SSLers, Can someone point us to a hard example of encoding fields within a cert in UTF8? Specifically, we'd like to sign our CSRs with a UTF8-content 'subject' line. Essentially, we're ttying to be sure we spell our users' names correctly! We've already experimented with the UTF encodi

Re: Create Cert Dynamically

2010-08-19 Thread Sam Jantz
For this you are going to need to use the Openssl C api, specifically the X509.h stuff. There are several functions that deal just with certificates, and everything you need to create one is there. As for the Key you will need to use EVP_PKEY which should come from the EVP family of functions. S

Re: Getting info from SSL_CTX

2010-08-19 Thread Sam Jantz
Harchvir, I am working on a similar problem, and from all I've seen the information you are looking for is not stored in the context, but rather in the actual SSL_SESSION object. There is a function SSL_SESSION_print(BIO* bio, SSL_SESSION * ses), and SSL_SESSION_print_fp(FILE* fp, SSL_SESSIO

HowTo Check

2010-08-19 Thread Andre Dieball
Hi there I have some Problems with encrypted emails. A user sends me an encrypted mail where I have the corresponding certificate and Key. Unfortunately Mail (Apple) sais it cannot read that email and displays the smime.p7s file only. How can I check which certificate has been used to encrypt th

Getting info from SSL_CTX

2010-08-19 Thread Harshvir Sidhu
Hi, I am trying to get info from SSL_CTX created through TCP connection, so that i can use that to encrypt/decrypt data and send through UDP. I am trying to authenticate and share keys using SSL_Connect handshake method, and then later extracting information from that CTX and encrypt data.

Re: SSL pointer is NULL after BIO_get_ssl call

2010-08-19 Thread Kyrylo V. Polezhaiev
Sorry, first mistake was semicolon after if (connection->ssl == NULL); > Hello, > > I am developing an client application using OpenSSL C API. I have an > error in the this code: > > /* connection struct consists of SSL_CTX, SSL and BIO pointers */ > ... > connection->ctx = SSL_CTX_new(

Create Cert Dynamically

2010-08-19 Thread Raj
Hi All Can anybody tell me how to create a Digital certificate and its key from an application, VC++ for Windows Thanks, Raj Rajmohan SK

Re: Man in the middle proxy - Not working

2010-08-19 Thread Raj
Hi I have created multiple threads for processing the multiple socket request. On each thread I am waiting on a processing a single socket request only May I attach my sample application along with my next posting so that you will get more idea about what I am doing and you can instr

Re: Check the private key

2010-08-19 Thread Christian Hohnstaedt
Hi Vladimir, $ openssl asn1parse > Hi, > > I've got private key file priv.key with the following contents > > -BEGIN RSA PRIVATE KEY- > MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAMXxTv8clwKiAqHH > oI3mn53v1VaH17K/o3toc040pF7+QYY+Pn1Vb53xQtb7zCe7DNPGyA5AylP4WoHi > kBiolMASchWYDxyi

Re: Certificate roll

2010-08-19 Thread Mohan Radhakrishnan
Hi John, Yes. We do use SSL certificates. You can consider me a newbie. I am just trying to understand the ways to roll an intermediate or any other certificate that is going to expire soon without causing an outage. Is that possible at all ? (e.g) If a certificate is compromised I

SSL pointer is NULL after BIO_get_ssl call

2010-08-19 Thread Kyrylo V. Polezhaiev
Hello, I am developing an client application using OpenSSL C API. I have an error in the this code: /* connection struct consists of SSL_CTX, SSL and BIO pointers */ ... connection->ctx = SSL_CTX_new(SSLv23_client_method()); if (connection->ctx == NULL) { DEBUG_MESSAGE("SSL_CT

Check the private key

2010-08-19 Thread VladimirShushkov
Hi, I've got private key file priv.key with the following contents -BEGIN RSA PRIVATE KEY- MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAMXxTv8clwKiAqHH oI3mn53v1VaH17K/o3toc040pF7+QYY+Pn1Vb53xQtb7zCe7DNPGyA5AylP4WoHi kBiolMASchWYDxyij3WpJuaginurwqAwYOB3XyxZqWP7xNaWLhLIdhLG72b7n8fX /v

The best way to limit cipher strength

2010-08-19 Thread Diffenderfer, Randy
What is the "correct" way to limit cipher suite strength, as in get rid of "weak" ciphers? I am contemplating building an openssl version with no support for export ciphers, and no support for SSLv2 cipher suites. I tried the config args of "no-ssl2" and "no-export", and got half the intended

SSL pointer is NULL after BIO_get_ssl call

2010-08-19 Thread Kyrylo V. Polezhaiev
Hello, I am developing an client application using OpenSSL C API. I have an error in the this code: /* connection struct consists of SSL_CTX, SSL and BIO pointers */ ... connection->ctx = SSL_CTX_new(SSLv23_client_method()); if (connection->ctx == NULL) { DEBUG_MESSAGE("SSL_CT

Re: Certificate roll

2010-08-19 Thread John Doe
From: Mohan Radhakrishnan > Is there any material that shows how to roll to new > certificates using OpenSSL ? I am looking for a test case to > understand how this works. Anyone know about this ? Did you try to google something like "generate certificate openssl" or "openssl certi

VC++ 2008 / Windows Mobile 6 build problem.

2010-08-19 Thread Dmytro Bogovych
Greetings. I try to build OpenSSL libraries for WM 6 Pro SDK. I downloaded 1.0.0a, wcecompat. 1) WCECOMPAT variable is set. 2) vcvars32.bat from VC/bin folder is run (there is no similar .bat file in WM SDK). 3) OpenSSL is configured as VC-CE. 3) ms/do_ms.bat launched. But I do not see cedll.mak

Certificate roll

2010-08-19 Thread Mohan Radhakrishnan
Hi, Is there any material that shows how to roll to new certificates using OpenSSL ? I am looking for a test case to understand how this works. Anyone know about this ? Thanks, Mohan __ OpenSSL Project