Auto Reply: Auto Reply: Re: Failing to verify the certificate of one specific site

2011-10-21 Thread darren . moffat
I am out of the office on vacation until Tuesday 25th October. For urgent issues please contact Markus Flierl or Steven De Tar. __ OpenSSL Project http://www.openssl.org User Support Mailing List

Auto Reply: Re: Failing to verify the certificate of one specific site

2011-10-21 Thread darren . moffat
I am out of the office on vacation until Tuesday 25th October. For urgent issues please contact Markus Flierl or Steven De Tar. __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Failing to verify the certificate of one specific site

2011-10-21 Thread Lucas Clemente Vella
2011/10/21 Jakob Bohm : > According to the Digicert CPS > , > that DigiCert root is cross-certified by the Entrust root.  Some trusted > certificate bundles include only the Entrust root CA and will need the > Entrust-signed "cross" intermediary

Re: Is there another way to load RSA public than from a file?

2011-10-21 Thread Kenneth Goldman
> From: Väinö Leppänen > Date: 10/21/2011 03:27 AM > > I'm just starting with openssl and public key encryption. > I'm trying to encrypt certain knowledge in a C++ application, > and I already have a working code but functions such as > PEM_read_RSA_PUBKEY > read the public key data from a fi

A (client's) revoked certificate verifies as OK?!?!!

2011-10-21 Thread npmz
Hi, I'm having a problem where my 'server' code verifies a client as OK, even though their cert was revoked. I've tested my client against openssl s_server, which properly states: verify error:num=23:certificate revoked, so I know the cert/ca is setup OK. Some relevant server code: /* set veri

Re: RSA Cipher using openssl

2011-10-21 Thread trilok nuwal
Please reply me too, I don't have openssl-users subscription. I want to create a crypto objects using RSA keys so that I can get cipher > update and final kind of behavior. > I have written this code and it works fine on one machine. > > > #include > #include > > #include > #include > #includ

Re: Failing to verify the certificate of one specific site

2011-10-21 Thread Jakob Bohm
According to the Digicert CPS , that DigiCert root is cross-certified by the Entrust root. Some trusted certificate bundles include only the Entrust root CA and will need the Entrust-signed "cross" intermediary certificate to validate, other

Re: Is there another way to load RSA public than from a file?

2011-10-21 Thread Jakob Bohm
Use BIO_read_bio_RSA_PUBKEY() with BIO_new_mem_buf() to read directly from memory. For even more efficient code, use the openssl rsa command at build time to convert the PEM file to DER format before embedding it in your code, then simply pass that data to d2i_RSA_PUBKEY directly. This will make

Re: openssl s_client -dtls1 and ECC key

2011-10-21 Thread Robin Seggelmann
Hi Erwin, Thanks for the report. I found the bug and submitted a patch (#2628). You can also download it from our website at http://sctp.fh-muenster.de/dtls-patches.html and it would be very helpful if you can confirm that the patch fixes your issue. Robin On Oct 12, 2011, at 11:33 PM, Erwin

RE: TLS, BIOs, SSL_read/write

2011-10-21 Thread Vadi
Hi n8, I am converting a TLS server(which uses one thread per client) to use IOCP (in Windows 2008 server). All your answers have cleared my doubts on IOCP threading vs SSL thread-safe issues. Could you please reply, were you able to successfully implement your SSL server with 4 worker threads

Is there another way to load RSA public than from a file?

2011-10-21 Thread Väinö Leppänen
Hello, I'm just starting with openssl and public key encryption. I'm trying to encrypt certain knowledge in a C++ application, and I already have a working code but functions such as PEM_read_RSA_PUBKEY read the public key data from a file. The natural workaround of course is to implant the pu