X509_CRL_dup() problem ?

2008-08-13 Thread delcour.pierre
Hello everyone, I try to add a certificate in a CRL. To do that, i use a X509* cert, a X509_CRL* crl with this algorithm : X509_REVOKED *r = NULL; r = X509_REVOKED_new(); r-serialNumber = X509_get_serialNumber(cert); if(!crl-crl-revoked) ci-revoked =

Engine not getting registered

2008-08-13 Thread Nanavati, Sitanshu
Hi, I just wrote a sample engine to understand the functionality which is part of built-in engines. To activate the engine I used the following sample code given at www.openssl.org/docs/crypto/engine.html ENGINE *e; const char *engine_id = ACME;

default maximum chain length considered too low

2008-08-13 Thread Maarten.Litmaath
Dear OpenSSL developers, various grid projects have run into the default maximum chain length of 10 being too low. These bug reports show examples: http://bugzilla.globus.org/globus/show_bug.cgi?id=4994 https://savannah.cern.ch/bugs/index.php?37563 The functions

x509_name_cmp for different encodings

2008-08-13 Thread Mohan, Dharmendra
Hi, I had a list of CA certificates, a few with different encoding than PRINTABLE encoding like T61 and UTF8. I am running into the problem of not able to verify some of the certificates issued by CA certificates in cert store despite the fact that they do exist in the store. Deep