SSL_load_error_strings hangs or throws exception

2004-12-14 Thread George Lind
I have a problem where both the client and server go into the SSL_load_error_strings() function and both either throw an exception or hang.  This is a loopback transfer and it only happens the first time after starting the application.  All others attempts work fine. Does anyone have any

fopen error, no such process?

2002-07-08 Thread George Lind
I am getting an error from SSL_CTX_use_certificate_file. I am getting 33558531 error:02001003:system library:fopen:No such process. Does anyone know what this means? Thanks George __ OpenSSL Project

SSL_CTX_use_certificate_file

2002-07-02 Thread George Lind
I am getting an error from SSL_CTX_use_certificate_file. I am getting 33558531 error:02001003:system library:fopen:No such process. Does anyone know what this means? Thanks George __ OpenSSL Project

SSL_shutdown: do I need it?

2001-08-23 Thread George Lind
I am running openssl on an NT machine. I am trying to transfer a file to an IBM mainframe which is using IBM's implementation of SSL. When I issue an SSL_shutdown the mainframe does not have the ability to send back the shutdown notification so the NT side hangs waiting for a response. Do I rea

how to create CRL with openssl?

2001-05-04 Thread George Lind
How do you generate a CRL with the openssl tool? Thanks, George __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

how do you generate a CRL?

2001-05-02 Thread George Lind
How do you generate a CRL with the openssl tool? Thanks, George __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

tracing SSL_read() and SSL_write()

2001-05-01 Thread George Lind
Is the callback function that I set with BIO_set_callback only called during the handshake? I would like to trace not only the verification but all SSL_read and SSL_write data that I send during a session. If the callback function is not called at these times how do you trace these calls? Thanks,

multiple trusted authorities

2001-05-01 Thread George Lind
How do I let my server accept certificates from multiple trusted authorities? Do I combine the certificates into one big file? Thanks, George __ OpenSSL Project http://www.openssl.org User Support

BIO_set_callback

2001-04-30 Thread George Lind
Is the callback function that I set with BIO_set_callback only called during the handshake? I would like to trace not only the verification but all SSL_read and SSL_write data that I send during a session. If the callback function is not called at these times how do you trace these calls? Thank

Re: unsupported certificate alert

2001-04-27 Thread George Lind
Within the verify callback function X509_STORE_CTX_get_error(ctx) returns a 26 which is "unsupported certificate purpose". The callback function than checks the verify depth. Since this is within the depth range the certificate is "OK". What exactly does that error message mean and why is the

Re: client continues after server fails

2001-04-24 Thread George Lind
ate or the handshake fails. Are you perhaps using option #1? _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _ - Original Message - From: "George Lind" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]&

client continues after server fails

2001-04-24 Thread George Lind
My server is doing client authentication. My client is also using verify peer. When the client attempts to connect it gets a certificate from the server and continues on. The server is not recieving a certificate from the client so it is failing. The client attempts to write to the server but

unexpected alert packet after shutdown

2001-04-23 Thread George Lind
We have built an OPENSSL client. We seem to get through the authentication level, and we are sending data through SSL. After sending data through SSL, we execute the following function to close SSL: SSL_shutdown(ssl); The server receives the following alert: 1503 1643BABD A90D53A7 2735C24B

how to use SSL_CTX_use_certificate_chain_file

2001-04-23 Thread George Lind
I can' t find any documentation on SSL_CTX_use_certificate_chain_file. Is this a server or client function? Thanks, George __ OpenSSL Project http://www.openssl.org User Support Mailing List

PEM_read_X509 causes crash

2001-04-23 Thread George Lind
I have written a server on NT that crashes when it gets to the PEM_read_X509 function. Here is a portion of the code: X509* pCert = NULL; FILE *fpCert = fopen("c:\\trustedCA.pem", "r"); PEM_read_X509(fpCert, &pCert, NULL, NULL); Does anyone know what is wrong? Thanks, George __

how does server get client certificate?

2001-04-19 Thread George Lind
What function calls does a server have to make if it wants the client to send its certificate? Thanks, George __ OpenSSL Project http://www.openssl.org User Support Mailing List

client doesn't present certificate to server

2001-04-18 Thread George Lind
I am running a server on NT. I am am using verify peer. The server is failing on the SSL_accept with an error message of "SSL3_GET_CLIENT_CERTIFICATE:no certificate returned". My SSL_accept is return a -1. The client is also using verify peer. Is the problem in my client or server? Thanks,

client SSL_connect error

2001-04-18 Thread George Lind
I am running an SSL client on AIX and am getting the following error message on the SSL_connect: error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded. Does anyone know what this means? Thanks, George __ OpenS

unsupported certificate type

2001-03-29 Thread George Lind
I have written code to run as a server. I am using the SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL) function. When the client tries to connect it fails saying that the certificate is an unsupported type. Both the client and server have gotten test certificates from Thawte and have the same tr

newbie question - creating CSR?

2001-03-26 Thread George Lind
How do I create a CSR that I will use to get a certificate from www.thawte.com. Thanks, George __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PRO

setting handshake type

2001-03-23 Thread George Lind
How do you set the handshake type? How do you specify if you are a client, a server, or a server that requires client authentication? Thanks George __ OpenSSL Project http://www.openssl.org User