RE: RE : SSL_CTX_set_client_CA_list functions

2005-12-07 Thread Mark
Hi Goetz, Thanks again for replying to my questions ;-) I have read the manual page ;-) However I don't understand the full implications of using or not using this function in a server. If I use it what does the client do with it? Does the client still need a copy of the root

Re: unable to free PROXY_CERT_INFO_EXTENSION

2005-12-07 Thread Matthew Rodriguez DSD staff
Dr. Stephen Henson wrote: Yes I tried lh_free. I call lh_free before I call EXTENSION_free. Using valgrind I still see a memory leak. It seems that in the r2i_pci call there is a PROXY_CERT_INFO_EXTENSION_new call. This memory is not being freed elsewhere. I don't see how the LHASH memory is

Re: RE : SSL_CTX_set_client_CA_list functions

2005-12-07 Thread Goetz Babin-Ebell
Mark wrote: Our application is a client/server application for which we (i.e. the server) need to authenticate the client (users) and hence we are the only CA allowed. This is not a public application so the server and all the client certs are signed by us. Client authorisation is very

OpenSSL 0.9.8a on AIX 5.1

2005-12-07 Thread Tinnerello, Richard
Title: OpenSSL 0.9.8a on AIX 5.1 Hi, I'm having trouble installing 0.9.8a on an AIX 5.1 machine. I ./config with defaults except for a prefix= spec. and the make, make test, and make install all seem to complete normally. But, when I try to run the openssl app, I get: exec(): 0509-036

Enable Client Authentication using [ Openssl s_server ]

2005-12-07 Thread am0ykam0te (sent by Nabble.com)
I am currently testing the ssl client i developed. I need to test it when it connects to a server which requires client authentication. However i do not know how to enable it in openssl's command line server (s_server). How do i enable client authentication in openssl s_server? Sent from the

Enable Client Authentication using [ Openssl s_server ]

2005-12-07 Thread am0ykam0te (sent by Nabble.com)
I am currently testing the ssl client i developed. I need to test it when it connects to a server which requires client authentication. However i do not know how to enable it in openssl's command line server (s_server). How do i enable client authentication in openssl s_server? Sent from the

smart card public key and EVP_PKEY

2005-12-07 Thread Antonio A
hi friends of openssl-users, i would like to know how to form a EVP_PKEY structure with modulus and exponent values generated and already retrieved from a smart card. what i really want is to retrieve a public key from a smart card to a EVP_PKEY. thanks for your help antonio araujo