Re: General question about documentation

2009-11-25 Thread John R Pierce
Rene Hollan wrote: Crypto is hard... mostly because X509 is a dog's breakfast of committee compromisitis. That said, openssl docs should AT LEAST address one who is familiar with X509. openssl docs should go way beyond that, and include tutorials of the 'right way' to do a wide range of

Re: General question about documentation

2009-11-25 Thread Tim Ward
From: Graham Leggett minf...@sharp.fm Use the source: while not the easiest to read it is the most accurate documentation available at any given time. (No, this is not a justification for a lack of or bad documentation). The objection, and it's a major one, to reverse engineering the API from

Re: General question about documentation

2009-11-25 Thread Victor Duchovni
On Tue, Nov 24, 2009 at 06:27:19PM -0800, John R Pierce wrote: openssl docs should go way beyond that, and include tutorials of the 'right way' to do a wide range of the sorts of things that SSL/TLS programs need to do. That's what books are for. Don't confuse reference documentation with

New blackout

2009-11-25 Thread The Doctor
I was able to see openssl.org last night MST but not at this current time. -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! http://twitter.com/rootnl2k

Re: New blackout

2009-11-25 Thread Chris Wilson
On Wed, 25 Nov 2009, The Doctor wrote: I was able to see openssl.org last night MST but not at this current time. Works fine for me. -- _ ___ __ _ / __/ / ,__(_)_ | Chris Wilson at qwirx.com - Cambs UK | / (_/ ,\/ _/ /_ \ | Security/C/C++/Java/Perl/SQL/HTML Developer | \

Re: Huh?

2009-11-25 Thread Steffen DETTMER
* Kyle Hamilton wrote on Tue, Nov 24, 2009 at 13:10 -0800: [startssl.com] from the CA policy http://www.startssl.com/policy.pdf: Fully qualified domain names, typically .www.domain.com. or .domain.com. are validated by sending an electronic mail message with a verification code to one of

Re: General question about documentation

2009-11-25 Thread Michael S. Zick
On Tue November 24 2009, Graham Leggett wrote: Tim Ward wrote: In the really big corporates I have been involved with, they have all demanded either source code with the product or the source in escrow before they will consider using it. My experience also. One of the best arguments for

RE: General question about documentation

2009-11-25 Thread Rene Hollan
This is true, but often the code does not match the docs. Or, the docs leave something out (is this dynamically allocated? Who is responsible for deallocating it, etc). Reconciling what the code does vs. what it should do vs. what is ambiguous is always a matter for debate (is that a feature or a

RE: General question about documentation

2009-11-25 Thread Mark
I would like to post a general observation regarding users of the OpenSSL toolkit. [snip stuff about documentation]] A long time ago it was suggested to use a wiki for this purpose. Can this idea be resurrected? Mark. __

Re: Application crashes when trying to access X509 Certificate Extension returned by X509_get_ext method

2009-11-25 Thread Sanjay Bhat
Hi Kyle, Thanks a ton for the quick reply buddy :) When we debug our application in visual studio, we see that both Extension and Extension-value are not NULL. But Extension-value-data seems to be NULL or corrupted, causing our application to crash. I am trying these options for debugging