question re fedora 14

2010-12-21 Thread Perazim
I see from the faq the notice about a custom openssl in fedora core 7. We are now at fedora 14 and my version installed from the redhat repository is: openssl-1.0.0c-1.fc14.i686 Are we still dealing with a reduced functionality version? If so, are the options to get around this still

RE: Building OpenSSL vs Downloaded

2010-12-21 Thread Ryan Pfeifle
You do not need to build the library unless you want to customize it. If you do compile it, it can be used with other compilers. I use the downloaded version with Borland C++Builder 5 and 6, though it was originally built with VC++, and it works fine. Ryan Pfeifle Sr. Programmer Voice

[FWD] OPENSSL - Windows CE

2010-12-21 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from Cerriman Lima cerri...@hotmail.com - From: Cerriman Lima cerri...@hotmail.com To: r...@openssl.org Subject: OPENSSL - Windows CE Date: Tue, 21 Dec 2010 03:25:42 + Importance: Normal

[FWD] Bug report: ntdll.mak file is not present

2010-12-21 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from Philippe Palazon cestlab...@gmail.com - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;

Re: [FWD] OPENSSL - Windows CE

2010-12-21 Thread Pierre DELAAGE
Just go there : http://delaage.pierre.free.fr and you will get all the answers you are looking for. and pray that finally my updates get included in openssl code one day, something that unfortunately never happened... and see also this page in openssl rt system :

Re: [FWD] Bug report: ntdll.mak file is not present

2010-12-21 Thread Pierre DELAAGE
Are you sure you are following the instructions in install.w32 ? because this file should be created by the configure process etc... Pierre Le 21/12/2010 05:17, Lutz Jaenicke a écrit : Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from

Re: [FWD] OPENSSL - Windows CE

2010-12-21 Thread Pierre DELAAGE
Hi, of course your will FAIL to compile openssl 100b or c because my patch are NOT included in. But if you go to my website you will find everything you need to compile successfully openssl 100a. the bug you just mentioned is solved in my version of openssl 100a. Please do as described in my

RE: [FWD] OPENSSL - Windows CE

2010-12-21 Thread Cerriman Lima
Hi Thank you for help, but I try to compile and i get the following error: Creating library out32dll_ARMV4I\capi.lib and object out32dll_ARMV4I\capi.exp e_capi.obj : error LNK2019: unresolved external symbol CryptSignHashA referenced in function capi_rsa_sign e_capi.obj : error LNK2019:

strange behavior of self signed cert “VeriSign Cla ss 3 Public Primary Certification Authority - G5”.

2010-12-21 Thread Pingzhong Li
Hi, recently when we bought certificate from Verisign, our cert has new root Certificate which is “VeriSign Class 3 Public Primary Certification Authority - G5”. This cert is quite strange when I run it at the openssl s_cilent command line, it won't stop at G5, it will go to another cert Class

RE: ifdef OPENSSL_NO_COMP

2010-12-21 Thread Bhola Ray
Hi Viktor, As U suggested I did 1)./ Configure no-zlib no-krb5 no-rc5 no-idea threads shared linux-x86_64 And as desired I saw. Since you've disabled or enabled at least one algorithm, you need to do the following before building:

Re: SSL cert chain validation timestamp issues

2010-12-21 Thread David Schwartz
On 12/20/2010 10:49 AM, travis+ml-open...@subspacefield.org wrote: So a friend ran into this lately; libnss, at least on Linux, checks that the signing cert (chain) is valid at the time of signature - as opposed to present time. (It may check present time as well - not sure on that) This is

do i need a dedicated ip address for https?

2010-12-21 Thread S Mathias
http://help.godaddy.com/article/1054 # Set up SSL protection on your website. is it an inescapable requirement to have a dedicated [not fix] ip address, when i want to use ssl on my domain? thank you happy Christmas! :)

Re: do i need a dedicated ip address for https?

2010-12-21 Thread Mike Mohr
I believe you can sort of get around that requirement using a wildcard SSL certificate (e.g. for *.domain.tld). But that only helps you if you're running multiple subdomains for the same TLD. I think I heard something about a change to the SSL protocol which would allow sending of the hostname