Re: Generating Certificates - Maximum Days Value

2006-07-25 Thread Bernhard Froehlich
Richardson, Robert H wrote: Greetings, I have been trying to find documentation on the maximum value that the "days" argument will accept for an SSL generated certificate. We will be using an integration engine product (Cloverleaf) to post X12 Eligibility requests via HTTPS to a trading pa

Re: cert info?

2006-07-25 Thread Kaushalye Kapuruge
Marten Lehmann wrote: Hello, how can I view the information that are contained in a CSR, KEY or CRT-file? E.g. for which hostname a cert is issued, when it will expire, who is the company it is issued for ... U may find this is useful. http://sial.org/howto/openssl/self-signed/ Cheers, Kau

Decryption fails

2006-07-25 Thread Kaushalye Kapuruge
Hi, Im trying to encrypt/decrypt a string using openssl. The program works fine for encryption but fails(not always) for decryption. This happens in EVP_CipherFinal_ex() call. I'm a bit confused with this random behavior. I've attached the code. Can anybody point me out what I'm doing wrong here

Generating Certificates - Maximum Days Value

2006-07-25 Thread Richardson, Robert H
Greetings,       I have been trying to find documentation on the maximum value that the "days" argument will accept for an SSL generated certificate. We will be using an integration engine product (Cloverleaf) to post X12 Eligibility requests via HTTPS to a trading partner using SSL. My inte

cert chain building post tls handshake

2006-07-25 Thread Charlie Lenahan
Orginally I was using SSL_get_peer_cert_chain() func, which I though was giving me the cert chain built up to verify the peer cert from the certs that i added to the SSL_CTX->cert_store , but then I discovered that it really is the cert chain given by the client during the TLS handshake. That

Re: PKCS7_verify mystery :)

2006-07-25 Thread euhmoins (sent by Nabble.com)
I got it ! thank you very much for your reply (what a response time ! ;) very best, Valéry. -- View this message in context: http://www.nabble.com/PKCS7_verify-mystery-%3A%29-tf1999114.html#a546 Sent from the OpenSSL - User forum at Nabble.com.

Re: PKCS7_verify mystery :)

2006-07-25 Thread Dr. Stephen Henson
On Tue, Jul 25, 2006, euhmoins (sent by Nabble.com) wrote: > > > "We now have to 'read' from p7bio to calculate digests etc." -> Why so ? > > Why do we have to read the content of BIO *p7bio and write it to BIO *tmpout > to get PKCS7_signatureVerify to work properly ? > > I hope you can unde

PKCS7_verify mystery :)

2006-07-25 Thread euhmoins (sent by Nabble.com)
Hello ! 1/ I've read the FAQs and did not find an answer to my question 2/ thanks for reading this ;) As I was taking a walk through the "pk7_mime.c" code, I stepped against a piece of code I could'nt really understand, actually not the code itselfs, but its purpose. in the PKCS7_verify funct

PKCS7_Verify mystery :)

2006-07-25 Thread euhmoins (sent by Nabble.com)
Hello ! 1/ I've read the FAQs and did not find an answer to my question 2/ thanks for reading this ;) As I was taking a walk through the "pk7_mime.c" code, I stepped against a piece of code I could'nt really understand, actually not the code itselfs, but its purpose. in the PKCS7_verify funct

Re: cert info?

2006-07-25 Thread Marten Lehmann
Thanks! __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]

Building openssl on windows with pdb

2006-07-25 Thread Yannick
Hi, I am trying to get the .pdb files for openssl. I read some previous threads regarding this case but I am still not able to generate them. Here are the steps I followed: 1) Add the 'debug' to mk1mf.pl (as say in INSTALL.W32 file). 2) Generate the nt.mak file with do_masm. 3) Edit the CFLA

Cert Extension problem

2006-07-25 Thread Richters, Eriks A
Hello I’m having some difficulty with getting a particular CA certificate to work for Client Authentication in Apache.  I’m hoping someone can help with this. I have OpenSSL version 0.9.7g installed on the machine. When it gets to the part where it tries to authenticate the certificate,

RE: openssl, threads and portable libraries

2006-07-25 Thread Fukuba, Yoshiki
Hi, If you use APR (Apache Portable Runtime) as a portable thread library, you can use apr_os_thread_current() instead of pthread_self(). Best regards, Yoshiki FUKUBA > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Friedrich Dominicus > Sent

Re: openssl, threads and portable libraries

2006-07-25 Thread Friedrich Dominicus
Darryl Miles <[EMAIL PROTECTED]> writes: > Friedrich Dominicus wrote: >> According to threads(3) and also mentioned in "network security with >> OpenSSL" from O'Reilly one has to provide callback functions for using >> OpenSSL with threads. > > The callbacks abstract the thread locking/mutex requ

Re: openssl, threads and portable libraries

2006-07-25 Thread Darryl Miles
Friedrich Dominicus wrote: According to threads(3) and also mentioned in "network security with OpenSSL" from O'Reilly one has to provide callback functions for using OpenSSL with threads. The callbacks abstract the thread locking/mutex requirements inside OpenSSL library to manipulate its g

openssl, threads and portable libraries

2006-07-25 Thread Friedrich Dominicus
I'm trying to get into openssl programming and run into the following "problem". I've found nothing about that neither while searching the web nore looking into this lib. According to threads(3) and also mentioned in "network security with OpenSSL" from O'Reilly one has to provide callback functi