[openssl-users] Self signed cert issues

2016-09-19 Thread shawn wilson
End goal - I don't want the machine (curl, wget, git, etc) to throw errors when accessing a site that I trust (ie, within the company). [root@srwilson-centos7 anchors]# openssl s_client -showcerts -connect site.com:443 /dev/null|openssl x509 -outform PEM > site_git.pem [root@srwilson-centos7

Re: [openssl-users] M_ASN1_D2I_* replacement in OpenSSL 1.1.0

2016-09-19 Thread Dr. Stephen Henson
On Mon, Sep 19, 2016, Aleksandr Konstantinov wrote: > > Thanks. Your answer helped a lot and I'm progressing now. Could You please > also give me a hint what M_ASN1_BIT_STRING_dup/ASN1_BIT_STRING_dup could be > replaced with? > ASN1_STRING_dup should work fine: ASN1_BIT_STRING is actually

[openssl-users] Building OpenSSL Library on ARM Cortex M4 based STM32F4 controller in an RTOS environment

2016-09-19 Thread Jinu Jayachandran
Hi, I am looking at the feasibility of developing an embedded Bluetooth application with OpenSSL-FIPS support on STM32F407 microcontroller(which is ARM Cortex M4 based). The application doesn't run on generic OS like Linux, Windows or android but it runs on CMSIS-RTX RTOS. I am using Keil in

Re: [openssl-users] Self signed cert issues

2016-09-19 Thread Viktor Dukhovni
On Mon, Sep 19, 2016 at 06:55:37AM -0400, shawn wilson wrote: > End goal - I don't want the machine (curl, wget, git, etc) to throw errors > when accessing a site that I trust (ie, within the company). When you add a certificate to the trust store (CAfile or CApath), it will be a trust-anchor

Re: [openssl-users] M_ASN1_D2I_* replacement in OpenSSL 1.1.0

2016-09-19 Thread Aleksandr Konstantinov
Hello, Thanks. Your answer helped a lot and I'm progressing now. Could You please also give me a hint what M_ASN1_BIT_STRING_dup/ASN1_BIT_STRING_dup could be replaced with? Best regards, A.K. On Fri, Sep 9, 2016 at 2:44 PM, Dr. Stephen Henson wrote: > On Fri, Sep 09,