RE: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Marek Marcola
Hello, The server side SSL is no longer terminated on the IIS server. It is being handled by Cisco 11500 series content switches and it the application will no longer work. My proposition is to get ssldump and dump SSL handshake with IIS and Cisco to check difference and working parameters

BIO and DTLS

2006-08-29 Thread Jeremy Goddard
Hi All, Can anyone tell me if the behavior of the BIO_new_accept, BIO_do_accept, and BIO_read functions changes in any way while using DTLS? Thanks, Jeremy __ OpenSSL Project

Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Urjit Gokhale
Hi everyone, I am having problem building openssl on HP Itanium 64 bit box. Attached are the files that show the output of Configure and make. The output of make is stripped to show the last section where error is reported. The error is ld: Unknown input file type: "./libcrypto.so"Fatal

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Marek Marcola
Hello, I am having problem building openssl on HP Itanium 64 bit box. Attached are the files that show the output of Configure and make. The output of make is stripped to show the last section where error is reported. The error is ld: Unknown input file type: ./libcrypto.so Fatal

RE: related license question

2006-08-29 Thread John L. Ries
On Mon, 28 Aug 2006, David Schwartz wrote: Certainly. Nothing in the OpenSSL licenses requires you to allow redistribution of any derivative works you create. Wrong. See the following: ...The licence and distribution terms for any publically available version or derivative of this code

RE: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Robert . Zander
Excellent, excellent idea. Is ssldump an API call? If so, I haven't seen that. Let me go out to the site and look. I wish there were a more organized and informative source for information on the openssl API. That should definitely make the problem expose itself. Thanks! Marek Marcola

RE: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Marek Marcola
On Tue, 2006-08-29 at 13:52 -0400, [EMAIL PROTECTED] wrote: Excellent, excellent idea. Is ssldump an API call? If so, I haven't seen that. Let me go out to the site and look. I wish there were a more organized and informative source for information on the openssl API. This is very useful

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Leif Thuresson
Hi, I have also had problems building shared version of openssl-0.9.8b on hpux-11.00 parisc using the hp ansi-c compiler. It looks like the openssl shared-library building part is completely re-implemented in 0.9.8 (compared to 0.9.7 which worked out of the box) In 0.9.7 shared libraries where

Re: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Nils Larsch
[EMAIL PROTECTED] wrote: Excellent, excellent idea. Is ssldump an API call? it's an application to analyze a ssl connection (see http://www.rtfm.com/ssldump/ ) Cheers, Nils __ OpenSSL Project

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread urjit_gokhale
Original message Date: Tue, 29 Aug 2006 20:05:51 +0200 From: Leif Thuresson [EMAIL PROTECTED] Subject: Re: Build problem on HP Itanium 64 bit machine To: openssl-users@openssl.org Hi, I have also had problems building shared version of openssl-0.9.8b on hpux-11.00 parisc using

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread urjit_gokhale
Original message Date: Tue, 29 Aug 2006 19:02:32 +0200 From: Marek Marcola [EMAIL PROTECTED] Subject: Re: Build problem on HP Itanium 64 bit machine To: openssl-users@openssl.org Hello, I am having problem building openssl on HP Itanium 64 bit box. Attached are the files that

Re: Build problem on HP Itanium 64 bit machine

2006-08-29 Thread Marek Marcola
Hello, Do you have libssl library dependency like: $ ldd libssl.so.0.9.8 libcrypto.so.0.9.8 = ./libcrypto.so.0.9.8 libdl.so.1 = /usr/lib/hpux32/libdl.so.1 in your build directory. Are you suggesting looking into the Makefile? Well ... I can see that building a shared object

RE: license question

2006-08-29 Thread David Schwartz
What is actually going on when the end-user runs OpenSSL and it dynamically links in your restricted library, or the end user compiles the unrestricted OpenSSL into your restricted library, is that they are committing a license violation of the OpenSSL license when they start using the

Re: license question

2006-08-29 Thread William A. Rowe, Jr.
Ryan Shon wrote: I work for nFocal, a company in Rochester, New York. We want to develop a variant of OpenSSL in which we optimize the cryptography library to run on a particular DSP. The other components of OpenSSL would remain unchanged except where needed to utilize our custom library.

SMIME_read_PKCS7 fails with memory BIO but works with file BIO

2006-08-29 Thread Heikki Toivonen
I am trying to use SMIME_read_PKCS7 to read a signed and encrypted MIME message from memory BIO, but I can't get it to work. It works fine if I construct a file BIO to read from. Am I doing something wrong, or is this a bug? See the test application below that shows the problem. Please note that

Re: Unable to locate the keystore/certificate store or private key

2006-08-29 Thread Robert . Zander
Nils, The basic succession of calls are as follows. I think the program waits for an ssl_read or ssl_write to implicitly trigger the handshake process. meth = TLSv1_client_method() SSL_load_error_strings(); SSLeay_add_ssl_algorithms(); SSL_CTX_new(meth); ssl = SSL_new( ctx ); sbio =

Re: Validating Cert Chain

2006-08-29 Thread k b
Thanks for all the reponse, i have a question about this following method int X509_STORE_CTX_init(X509_STORE_CTX *ctx, X509_STORE *store, X509 *x509, STACK_OF(X509) *chain); if i understand this correctly the argument 'x509' is the cert that u want to be verified the