[openssl-users] Record aggregation with TLS Client

2016-06-21 Thread Rajeswari K
Hello Openssl users, Having a query on when our device acitng as TLS Client, we observed that both client certificate and client key exchange messages are going in a single packet. Is there any way to separate this? That means is there any option to avoid multiple records in a single packet?

Re: [openssl-users] Trouble porting code to OpenSSL 1.1

2016-06-21 Thread Jakob Bohm
On 18/06/2016 18:02, Marc Heuse wrote: Hi, I have a problem with porting OpenSSL code from 1.0 to 1.1. Please do not complain that it does not look like it make sense what this code does here - complain to Microsoft who implements certs with RDP non-standard ... The goal of the following code

Re: [openssl-users] Trouble porting code to OpenSSL 1.1

2016-06-21 Thread Dr. Stephen Henson
On Sat, Jun 18, 2016, Marc Heuse wrote: > Hi, > > I have a problem with porting OpenSSL code from 1.0 to 1.1. > Please do not complain that it does not look like it make sense what > this code does here - complain to Microsoft who implements certs with > RDP non-standard ... > I am curious

[openssl-users] Problem revoking a Cert

2016-06-21 Thread Virginia Older
I am trying to revoke a cert but I am getting the following error: openssl ca -revoke test.crt Using configuration from /etc/pki/tls/openssl.cnf Enter pass phrase for /etc/pki/tls/vaCA1/signing-ca.key: unable to load certificate 139933357430600:error:0906D06C:PEM routines:PEM_read_bio:no start

[openssl-users] How to encode text request of 'req -text -noout''s output?

2016-06-21 Thread eu...@openmailbox.org
Hi, If I get a text version of a request(e.g. use the command "openssl req -noout -text -in ca.csr"), how can I encode it with openssl command(thus transform it to the format that is able to be recognized by applications)? Thanks, Eurus -- openssl-users mailing list To unsubscribe:

Re: [openssl-users] library result doesn't look right

2016-06-21 Thread Jakob Bohm
On 20/06/2016 22:25, Yoom Nguyen wrote: Greetings Everyone, I recent download and compiled a new version openssl-1.0.2h.tar than what came with RedHat distribution. successfully compile and test. Using the following options export CFLAGS="-fPIC" ./config shared enable-ec_nistp_64_gcc_128