Crash observed

2013-06-27 Thread Rajeswari K
Hello Openssl team, Does any of you faced an issue while freeing the SSL_CTX? Following is the backtrace found. But we are not yet sure which address is being passed to SSL_CTX_free(). We are trying to get the crashinfo file and trying to debug. Meanwhile, if any of you faced similar issue please

AW: smime verification failure

2013-06-27 Thread Gsandtner Michael
Probably really damaged in transit. The empty attachment should not be empty too. But the CA chain is complete and correct: there is a CA certificate present with required AKI 44:6A:95:67:55:79:11:4F and SKI 41:91:69:1C:BF:AD:D8:98 Specifying the root CA in -CAfile must (and normally really doe

RE: smime verification failure

2013-06-27 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Gsandtner Michael > Sent: Wednesday, 26 June, 2013 08:27 > # openssl smime -verify -in mail.smime -CAfile A-Trust-nQual-03.pem > Verification failure > 3086427788:error:21071065:PKCS7 routines:PKCS7_signatureVerify: > digest failure:pk7_doit.c:1

Re: Problem with cipher suite ECDHE-ECDSA-AES256-SHA384

2013-06-27 Thread Karel Sedláček
You don't need to change OpenSSL; TLSv1_2_server_method() replaces SSLv23_server_method() in your own code. k On Fri, Jun 7, 2013 at 10:17 AM, mehroz wrote: > Hi, > > Could you help where do i need to change the method from > TLSv1_2_server_method() to SSLv23_server_method() . Which files(s) ne

RE: Sign with PKCS8

2013-06-27 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Lukas Haase > Sent: Thursday, 27 June, 2013 04:46 > I think I found the problem but I am unsure how to deal with it :-( > > There are two ways to create a signature: The original message can be > part of the signature (put=true) or not (put=fa

Re: Sign with PKCS8

2013-06-27 Thread Lukas Haase
Dear Dave, Thank you for your response! On 2013-06-27 6:21, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Behalf Of Lukas Haase >> Sent: Tuesday, 25 June, 2013 19:13 > >> I have the public and the private key for ECDSA on secp128r1 in a file >> stored in PKCS8 format (saved wi