Problem with verifying root certificate GlobalSign

2006-02-21 Thread Martijn Moret
Hi all, A partner that we need to communicate with has a certificate signed by globalsign. I downloaded the certificates from: http://support.globalsign.net/en/serversign/server_faq_body.cfm When converting these to PEM and running them trough the openssl verify command, i get the following

Re: Problem with verifying root certificate GlobalSign

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Martijn Moret wrote: Hi all, A partner that we need to communicate with has a certificate signed by globalsign. I downloaded the certificates from: http://support.globalsign.net/en/serversign/server_faq_body.cfm When converting these to PEM and running them trough

Re: Different skey size returned by i2d_RSAPrivateKey

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Alpt wrote: Hi there, I want to pack a RSA priv key and this is what I'm doing: ... rsa=RSA_generate_key(1024, RSA_F4, NULL, NULL); len=i2d_RSAPrivateKey(rsa, priv); ... Why isn't `len' always the same? Is it normal? Yes its normal. Some key components

RE: Memory grows

2006-02-21 Thread Fell, Anthony
I too have noticed a similar leak on a VxWorks client used to secure LDAP connections. I hopefully will investigate this issue in the next fewweeks. I will provide any pertinent details to the group if/when I have any. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Samy

how to resolve depth=0

2006-02-21 Thread Winston Ford
Hello, I'll spare my sob story, suffice to say there's week old blood on the wall.. Here's what I'm trying to resolve: [pbAl:~] winstonf% openssl s_client -connect www.elegantbabygifts.com: 443 -state CONNECTED(0003) SSL_connect:before/connect initialization SSL_connect:SSLv2/v3 write

Re: how to resolve depth=0

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Winston Ford wrote: Hello, I'll spare my sob story, suffice to say there's week old blood on the wall.. Here's what I'm trying to resolve: [pbAl:~] winstonf% openssl s_client -connect www.elegantbabygifts.com: 443 -state CONNECTED(0003)

Re: how to resolve depth=0

2006-02-21 Thread Winston Ford
Yes, the current cert was bought this weekend from starfield (godaddy). Reason being, another client site has a cert from starfield, and IE successfully completes handshake. Site is https:// www.shopelizabethbrady.com It is running on same machine, same apache, Apache/1.3.33

Re: how to resolve depth=0

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Winston Ford wrote: Yes, the current cert was bought this weekend from starfield (godaddy). Reason being, another client site has a cert from starfield, and IE successfully completes handshake. Site is https:// www.shopelizabethbrady.com It is running on same

Re: how to resolve depth=0

2006-02-21 Thread Winston Ford
Wow, the issue has been resolved. Many thanks for keen eyes. After commenting out the SSLCertificateChainFile directive in my httpd.conf, one was still returned in the handshake. I include a dir of vhost.conf's and had backed up the one which had ssl issues. Apache was still pulling

Re: function PEM_read_RSAPrivateKey not returning

2006-02-21 Thread William A. Rowe, Jr.
Matthias wrote: Kyle Hamilton wrote: Did you make sure to remove %SYSTEMROOT%\system32\ssleay32.dll and libeay32.dll? Just running the uninstaller doesn't get rid of them. No, I forgot that. Sorry, my fault. I now replaced those two DLLs with the ones I compiled myself. Good news: in

Re: Different skey size returned by i2d_RSAPrivateKey

2006-02-21 Thread Alpt
On Tue, Feb 21, 2006 at 01:49:25PM +0100, Dr. Stephen Henson: ~ The way you are supposed to use this stuff is to first get the length, then ~ allocate enough memory and finally write out the encoding. ~ ~ It isn't a good idea to make assumptions about the maximum size. It risks ~ buffer overrun

Re: function PEM_read_RSAPrivateKey not returning

2006-02-21 Thread William A. Rowe, Jr.
Matthias wrote: I deleted all ssl-related DLLs on my system now. When I compile OpenSSL as described in INSTALL.W32, point the include library directory of my example program on openssl\out32dll, recompile my example program, copy the 2 DLLs from openssl\out32dll to my example project

Silly CA/certs questions...

2006-02-21 Thread Jeff Wiegley
Sorry for the newb question but I've been reading howtos and turorials all afternoon and I can't figure out how to make a CA thingy. (Or even if I should) Second sorry that this is so long. It's a reflection of how confused all of this has made me. If you want to skip to the summary question at

Re: function PEM_read_RSAPrivateKey not returning

2006-02-21 Thread Kyle Hamilton
On 2/21/06, William A. Rowe, Jr. [EMAIL PROTECTED] wrote: One most confusing thing is that MS actually has two -different- pdb files. One is a source program database, one is an executable program database. You want to locate the one with a name matching your .dll files into the same