Re: [openssl-users] Man page suggestion - SSL_get_verify_result

2019-02-13 Thread Matt Caswell
On 12/02/2019 22:29, Hal Murray wrote: > Is there a better place for things like this? > > Please add X509_verify_cert_error_string to the SEE ALSO section of the man > page for SSL_get_verify_result Please raise an issue on github for this sort of thing. Even better create a

[openssl-users] Man page suggestion - SSL_get_verify_result

2019-02-12 Thread Hal Murray
Is there a better place for things like this? Please add X509_verify_cert_error_string to the SEE ALSO section of the man page for SSL_get_verify_result Thanks. -- These are my opinions. I hate spam. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo

Re: [openssl-users] SSL_get_verify_result returning 5 on SSL setup?

2015-09-04 Thread Viktor Dukhovni
On Fri, Sep 04, 2015 at 09:24:21AM +0200, Gait Boxman wrote: > I'm occasionally getting code 5 from SSL_get_verify_result when attempting > to setup an SSL/TLS connection to an MS Exchange server using v1.02a. Show the relevant code that returns "5". Most frequently "5&

[openssl-users] SSL_get_verify_result returning 5 on SSL setup?

2015-09-04 Thread Gait Boxman
Hi all, I'm occasionally getting code 5 from SSL_get_verify_result when attempting to setup an SSL/TLS connection to an MS Exchange server using v1.02a. I checked the source code, which shows it's X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE, but I can't find where that is coming from

Re: print result of SSL_get_verify_result

2013-01-20 Thread Dr. Stephen Henson
On Sat, Jan 19, 2013, ask wrote: Is there is a function in ERR_*  that can print the text from code? Not in ERR_* no because the error doesn't come from the ERR library. You can instead use X509_verify_cert_error_string(err) Steve. -- Dr Stephen N. Henson. OpenSSL project core developer.

Re: print result of SSL_get_verify_result

2013-01-19 Thread ask
Thanks, Is there is a function in ERR_*  that can print the text from code? A From: Jeffrey Walton noloa...@gmail.com To: as...@yahoo.com Sent: Thursday, January 17, 2013 8:32 PM Subject: Re: print result of SSL_get_verify_result On Thu, Jan 17, 2013

print result of SSL_get_verify_result

2013-01-17 Thread ask
How can I print out result string from return code of SSL_get_verify_result? For example, for my test, I got 18, ERR_error_string( return_code) does not yield any thing? A

Re: print result of SSL_get_verify_result

2013-01-17 Thread Jeffrey Walton
On Thu, Jan 17, 2013 at 9:17 PM, ask as...@yahoo.com wrote: How can I print out result string from return code of SSL_get_verify_result? For example, for my test, I got 18, ERR_error_string( return_code) does not yield any thing? http://www.openssl.org/docs/ssl/SSL_get_verify_result.html

Re: SSL_get_verify_result() behavior

2011-11-16 Thread Yutaka Takeda
I ran the same test with OpenSSL v0.9.8o on linux. As soon as verifyCallback is returned 0, connect() fails with the CERT_UNTRUSTED error from SSL_get_verify_result() as expected. Here's the log: OpenSSL 0.9.8o 01 Jun 2010 compiler: cc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT

Re: SSL_get_verify_result() behavior

2011-11-16 Thread Yutaka Takeda
After some more investigation, the problem seems to happen only with OpenSSL (v0.9.8r) preinstalled with Mac OS X 10.6.8. If the test program is linked against *locally* built 0.9.8r, CERT_UNTRUSTED is correctly reported by SSL_get_verify_result(). Log: OpenSSL 0.9.8r 8 Feb 2011 compiler: cc

Re: SSL_get_verify_result() behavior

2011-11-16 Thread Yutaka Takeda
, CERT_UNTRUSTED is correctly reported by SSL_get_verify_result(). Log: OpenSSL 0.9.8r 8 Feb 2011 compiler: cc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -fmessage-length=0 -pipe -Wno-trigraphs -fpascal-strings -fasm-blocks -O3 -DOPENSSL_NO_IDEA -DOPENSSL_PIC -DZLIB -mmacosx-version

SSL_get_verify_result() behavior

2011-11-15 Thread Yutaka Takeda
, but SSL_get_verify_results() returns X509_V_OK where I expects X509_V_ERR_CERT_UNTRUSTED to return. Looking at my log, the verifyCallback() detected the error, returning 0 to the caller but the return value from SSL_get_verify_result() did not seem to reflect the error detected in the verifyCallback

SSL_get_verify_result Errorcode 20 ( X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY )

2010-11-10 Thread Michael Biener
Hello All there, i have written an SMTP Proxy using opnessl for the Networkcounication. Now trying to use STATTLS with an SMTP Server, in my case smtp.live.com ( Microsoft Hotmail ) I Set up my my Truststore Directory using SSL_CTX_load_verify_locations. SSL_get_verify_result everytime rsults

SSL_get_verify_result returns X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY (20)

2007-05-04 Thread Christian Graf
!= SSL_CTX_load_verify_locations(m_ctx_p, C:\\openssl\\certs\\thawteCp.pem, NULL)) retVal = GC_SSL_CERT_LOAD_ERROR; else { // check cert long certVerifyResult = SSL_get_verify_result(m_ssl_p); // the only successful return code is X509_V_OK = 0 if((certVerifyResult != X509_V_OK

Re: SSL_get_verify_result returns X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY (20)

2007-05-04 Thread Peter Sylvester
= SSL_get_peer_certificate(m_ssl_p); if (x509cert != NULL) { //load cert if(1 != SSL_CTX_load_verify_locations(m_ctx_p, C:\\openssl\\certs\\thawteCp.pem, NULL)) retVal = GC_SSL_CERT_LOAD_ERROR; else { // check cert long certVerifyResult = SSL_get_verify_result(m_ssl_p

SSL_get_verify_result

2007-03-29 Thread Maria de las Mercedes Iervasi
I need some help with SSL_get_verify_result errors. I use WindowsXP, Visual C++, OpenSll 0.9.8d this is my example program: #include stdio.h #include string.h int main(int argc, char *argv

Re: SSL_get_verify_result(ssl)

2002-04-02 Thread Lutz Jaenicke
, SSL_get_verify_result(ssl) returns code 18. which is : 18 X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: self signed certificate i have the server certificate on the client side and i am using this function in my client code. if (SSL_CTX_load_verify_locations(ctx,CERTF,HOME) = 0

SSL_get_verify_result(ssl)

2002-03-29 Thread biswaksen
Hi, I have written a client/server code using openssl. when i am verifying the server certificate on the client side and also the client certificate on the server side the verification fails. On the client side , SSL_get_verify_result(ssl) returns code 18. which is : 18