What try a revoked cert in a CRL file

2003-10-24 Thread rocco . ciriello
hello everybody, I have this problem: if I have a CRL file and serial number of a certificate, what can I verify if the certificate is revoked? whid the crl command I'm extract file in text format of crl, I must parse this file, or exit a openssl command that do it! thank you

Itermittent problems with TLS conenctions.

2003-10-24 Thread Matthew Shaylor
Hi, I have a server-client system that communicates via TLS. However I am getting intermittent errors when connecting. The errors look like [as reported by ERR_error_string(ERR_get_error(),0)]: error:140940F6:SSL routines:SSL3_READ_BYTES:unknown alert type or error:1408F10B:SSL

RE: compiling 32bit binary on solaris 8

2003-10-24 Thread Jim Mack
Thanks for lead, but it's still blowing up complaining about linking against 64bit libs. This is for : solaris-sparcv7-gcc solaris-sparcv8-gcc solaris-sparcv9-gcc I really have no idea what to do. I have gone through all the relevent Makefiles and cannot find where these libs are getting built

Re: compiling 32bit binary on solaris 8

2003-10-24 Thread Saju Paul
here is a guess (and it is ONLY that); since the linker is complaining about the ssl and crypto libraries. will it help if you rebuilt the ssl and crypto libraries with the sparc7 or sparc8 compiler ? - Original Message - From: Jim Mack [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

RE: compiling 32bit binary on solaris 8

2003-10-24 Thread Venkatesh Ramaswamy
Did you do 'make clean/dist-clean' before trying that? Even after that if there is a problem, try setting ABI=32 with the configure script and then making it, like ./Configure ABI=32 ... HTH -Original Message- From: Jim Mack [mailto:[EMAIL PROTECTED] Sent: Friday, October 24, 2003 1:13

RE: compiling 32bit binary on solaris 8

2003-10-24 Thread Jim Mack
Just figured it out. I just added a -m32 flag to the library line of the solaris-sparcv9-gcc entry in Configure and it worked. Pretty sure this will work with the other sparcvX configs. FYI.. I am using gcc version 3.3. solaris-sparcv9-gcc,gcc:-m32 -mcpu=ultrasparc -O3 -fomit-frame-pointer

New IBMCA engine ... was Re: ssl3 write pending - bad write retry

2003-10-24 Thread Kent Yoder
Arne and Geoff, Sorry for the lng delay in this reply, but thanks for your help. This turned out to be barking up the wrong tree in the beginning, an error in the way our homebrewed server app was reporting SSL errors, and not load based at all... The real problem was

RE: Determining encryption used

2003-10-24 Thread David Schwartz
I'm trying to determine what encryption is being used when I make an SSL connection, but I can't seem to get any information. I looked in the online docs and found SSL_get_cipher, and SSL_get_cipher_bits. When I call them, however, I get (NONE) and 0 respectively. When I call

Question about SSL and TLS book

2003-10-24 Thread Ohaya
Hi, I've been reading the subject book, by Eric Rescorla, and ran across the following passage on page 110 (Chapter 4, under CertificateRequest): It is important to note that IF certificate chains are being used, then the CA name specified in the CertificateRequest message need not refer to the