Re: OpenSSL on IBMi

2010-04-05 Thread Pankaj Aggarwal
Hi Shaw, I do have the qsh porting tools installed (which include icc, gmake etc.). I checked the CCSID for these tools. it's 1200. Now since my openssl files have been extracted from tar in qsh environment, they have the CCSID of 37. Should I get the IBM tools for CCSID 37? I tried to set the

Re: OpenSSL on IBMi

2010-04-05 Thread Pankaj Aggarwal
Got it working ! Stuck in another error in openssl/crypto :-( icc -I. -I.. -I../include -DOPENSSL_THREADS -D_MULTI_THREADED -v -O4 -DB_ENDI AN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -D_ALL_SOURCE -DNO_SYSLOG -qTGTRLS=*CURR ENT -qTGTCCSID=37 -c cryptlib.c -o cryptlib.o command

RE: Pre Master Secret Regarding

2010-04-05 Thread Bob Bell (rtbell)
Aravind Actually, there is more than one key that is derived from the pre-master key. There is both an encryption and HMAC keys for both transmission and reception. That translates to 4 separate keys. Bob From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org]

OpenSSL, relative paths of configuration file

2010-04-05 Thread Thomas Steinbach
Hello, in the openssl.cnf file are three path settings wich can be set relative. But relative to what? My problem is, that I don't know and dont't find an answer from which point this relative paths are starting 1.) The active directory? 2.) The directory where openssl (executable) resides or

OpenSSL, relative paths of configuration file

2010-04-05 Thread Thomas Steinbach
Hello, in the openssl.cnf file are three path settings wich can be set relative. But relative to what? My problem is, that I don't know and dont't find an answer from which point this relative paths are starting 1.) The active directory? 2.) The directory where openssl (executable) resides or

Re: OpenSSL, relative paths of configuration file

2010-04-05 Thread Michael S. Zick
On Sat April 3 2010, Thomas Steinbach wrote: Hello, in the openssl.cnf file are three path settings wich can be set relative. But relative to what? My problem is, that I don't know and dont't find an answer from which point this relative paths are starting 1.) The active directory?

Verisign client requirements

2010-04-05 Thread piper.guy1
Hi, Please understand I'm a newbie to security if my question sounds rather elementary. The embedded product I'm working on requires a secure connection to our server that uses a Verisign certificate to authenticate. I've been porting the OpenSSL examples from the O'Reilly publication so far and

RE: pkcs7 cert loading, why this code doesn't work?

2010-04-05 Thread sean wang
thanks Mounir! yes the 'write' thing was a typo. the second issue was the problem. sean your are right the pass in type should be a Date: Sun, 4 Apr 2010 02:22:29 +0200 From: mounir.idra...@idrix.net To: openssl-users@openssl.org Subject: Re: pkcs7 cert loading, why this

any way to delete a cert from store

2010-04-05 Thread sean wang
is there a conterpart for X509_STORE_add_cert? basically how do I remove a cert from a store. I saw someone posted the question before but got no answers... thanks, _ Hotmail

RE: Verisign client requirements

2010-04-05 Thread David Schwartz
Piper.guy1 wrote: Hi, Please understand I'm a newbie to security if my question sounds rather elementary. The embedded product I'm working on requires a secure connection to our server that uses a Verisign certificate to authenticate. I've been porting the OpenSSL examples from the