RE: how do i use a CRL file to verify a certificate against?

2004-09-21 Thread Lee Baydush
You can't tell if it has been revoked. That's why they are 'trusted roots'. If you think your root ca has been compromised, that is when you usually hit the big red panic button and shut down the shop. -Original Message- From: Jon Bendtsen [mailto:[EMAIL PROTECTED] Sent: Tuesday,

RE: how do i use a CRL file to verify a certificate against?

2004-09-21 Thread Lee Baydush
. sep 2004, kl. 15:43, skrev Lee Baydush: You can't tell if it has been revoked. That's why they are 'trusted roots'. If you think your root ca has been compromised, that is when you usually hit the big red panic button and shut down the shop. no no, it's not the root ca that has been revoked

RE: Problems with get_notAfter

2004-09-20 Thread Lee Baydush
Do you know are you trying to output to an input only BIO? I assume you also checked the hbio!=NULL and cert!=NULL? -Original Message- From: Marcos Paraiso [mailto:[EMAIL PROTECTED] Sent: Monday, September 20, 2004 9:08 AM To: [EMAIL PROTECTED] Subject: Problems with get_notAfter Hi

Adding signature algorithm for verification

2004-09-20 Thread Lee Baydush
Will somebody tell me how to add an OID and corresponding verification routine to OpenSSL version 0.9.7c to verify a SHA-256 signature. Currently I am trapping the X509_V_ERR_CERT_SIGNATURE_FAILURE and X509_V_ERR_CRL_SIGNATURE_FAILURE errors in my verify callback routine, comparing the OID in

RE: Problems with get_notAfter

2004-09-20 Thread Lee Baydush
--- Lee Baydush [EMAIL PROTECTED] escreveu: Do you know are you trying to output to an input only BIO? I assume you also checked the hbio!=NULL and cert!=NULL? -Original Message- From: Marcos Paraiso [mailto:[EMAIL PROTECTED] Sent: Monday, September 20, 2004 9:08 AM To: [EMAIL PROTECTED