Re: Running SSL on own socket code

Depends exactly what the person wants to do and also if he wants to use existing code and if he is familiar with the bio pairs. My point was not specific to his needs as there was not a lot of detail, only that making changes to the code is better and easier when you override functions -- such

Compiling openssl-1.0.0.d

I have a SUN V240 running Solaris 10 10/09 SPARC (I added latest patch after discovering the problem to be described) using the ORACLE for Solaris CPU 11/04. I get a successful Configure, but have a problem with 'make'. Here is the output using GNU make from sunfreeware.com latest package: Kill

[tls] >>> TLS 1.0 Alert [length 0002], fatal unknown_ca

Hi Actually I have install Cent OS5 and Freeradius 2.0 http://www.howtoforge.com/wifi-authentication-accounting-with-freeradius-on-centos5-p3 created certificates using above mentioned link. I am trying to use 802.11x enterprise with iPhone. I have created certificates and imported client_cer

Re: [openssl-users] CA

I am having a similar problem here: For some reason I need to renew/extend a intermediate certificate within a chain. Without setting the old serial number, all its descending certs verification will fail when use 'openssl verify'. So the question is: Is there anyway to issuing a new signing certi

Issue with 1.0.0d of OpenSSL on Windows.

Hi,   It has been a while I dived into the OpenSSL product. Please forgive me for posting this issue and if it has already resolved please send me a pointer.   I compiled and built OpenSSL 1.0.0d on Windows using Visual Studio C++ without any compiler problems. The test all passed fine.   I was u

About client certification verification

Hi, I would like to clarify if SSL server request client to send certification, and does not do the verification in OpenSSL (verification error is ignored, and certificate is verified somewhere else), will the client certificate still participate in the negotiation of keys? Thanks -- qun-ying

Re: Running SSL on own socket code

On Wed, Jun 01, 2011 at 10:56:47AM -0700, Eric S. Eberhard wrote: > The way I do things like this is to slightly modify OpenSSL (and keep track > of the mods!) Completely unnecessary, OpenSSL supports custom I/O layers via BIO pairs. -- Viktor. _

Re: Running SSL on own socket code

The way I do things like this is to slightly modify OpenSSL (and keep track of the mods!) 1) Hunt down the socket code 2) Set a new variable, a pointer to a function (for each function you replace) (fptr in my example) 3) rename the routine to "release_function" 4) make a new function() which

Re: Running SSL on own socket code

On Tue, May 31, 2011 at 09:05:29AM -0400, Jeff Saremi wrote: > I'd like to know the feasibility or complexity around using my own > socket code with OpenSSL's ssl code. If I provide OpenSSL with a pair of > BIOs to read and write would that be sufficient? How tightly integrated > the code is with

Re: Errors with certificate signing x509v1 when making test. Test failed

On Wed June 1 2011, Dr. Stephen Henson wrote: > On Tue, May 31, 2011, gvfb wrote: > > > > > >Thanks, I've got the package for shared libraries libssl0.9.8 as well as > > >the -dev packages which I need to compile IMAP toolkit, I'll probably use > > >those, unless I manage to install from source

Re: Errors with certificate signing x509v1 when making test. Test failed

On Tue, May 31, 2011, gvfb wrote: > > >Thanks, I've got the package for shared libraries libssl0.9.8 as well as the > >-dev packages which I need to compile IMAP toolkit, I'll probably use those, > >unless I manage to install from source and then I will enable mod_ssl on > >apache, with a simp

Running SSL on own socket code

I'd like to know the feasibility or complexity around using my own socket code with OpenSSL's ssl code. If I provide OpenSSL with a pair of BIOs to read and write would that be sufficient? How tightly integrated the code is with bio_connect and bio_socket? thanks jeff __

Re: Errors with certificate signing x509v1 when making test. Test failed

On Tue May 31 2011, gvfb wrote: > > De: owner-openssl-us...@openssl.org > Para: openssl-users@openssl.org > Cc: > Fecha: Tue, 31 May 2011 23:08:18 -0400 > Asunto: RE: Errors with certificate signing x509v1 when making test. Test > failed > > > > From: owner-openssl-us...@openssl.org On Behalf

Re: How to derive EAP-TLS key material from TLS?

On Wed, Jun 1, 2011 at 5:49 PM, Robin Seggelmann wrote: > > _key, but how can I find the PRF api used to calculate: > as Michael stated, the function SSL_tls1_key_exporter() is exactly what > you're looking for. The TLS Key Exporter is described in RFC 5705. The > patch #1830, which Michael also m

Re: How to derive EAP-TLS key material from TLS?

Hi Neo, On Jun 1, 2011, at 4:02 AM, Neo Liu wrote: > On Tue, May 31, 2011 at 6:41 PM, Michael Tüxen > wrote: > > What about using SSL_tls1_key_extractor()? > > I didn't this function in OpenSSL source. > I can get master secret from SSL_SESSION->master_key, but how can I find the > PRF api u

Re: How to derive EAP-TLS key material from TLS?

On Jun 1, 2011, at 4:02 AM, Neo Liu wrote: > > > On Tue, May 31, 2011 at 6:41 PM, Michael Tüxen > wrote: > > What about using SSL_tls1_key_extractor()? > > I didn't this function in OpenSSL source. I don't understand what you are saying... > I can get master secret from SSL_SESSION->master_k