openssl smime problem: the output of smime -decrypt is not the same to the original one

2009-04-13 Thread xh
Hi everyone, I find the output of the openssl smime -decrypt is not the same with the original one. My OS is Fedora 10 and the openssl version is 0.9.8g. I use the following command to get the encrypt version of the file a.txt # openssl smime -encrypt -in a.txt -out b.txt mycert.pem and try t

Re: openssl-0.9.8k.tar.gz

2009-04-13 Thread Kyle Hamilton
This is entirely site-specific, and nobody here has any idea what you're talking about. Try talking to your Purdue University helpdesk. -Kyle H On Mon, Apr 13, 2009 at 6:40 AM, Chuck Aaron wrote: > I have saved this file off the openssl site to my documents. I am trying to > copy the *.gz file

Re: Query on OpenSSL for Certificate verification

2009-04-13 Thread Kyle Hamilton
Then don't return from the original SSL_CTX_set_verify callback until you either: a) receive a valid OCSP response that says it's okay, b) receive a valid OCSP response that says it's not okay, c) receive an invalid OCSP response (i.e., OCSP failure), or d) time out. You're perilously close to a "

Re: Resource temporarily unavailable error with SSL_connect

2009-04-13 Thread Dan Maartens
Thanks for your response Dave. With -state and -msg enabled, it seems to be hanging after SSL_accept:SSLv3 flush data. When I abort the client at this point (as it will retry forever with no success), I get: failed in SSLv3 read client certificate A. Given the stupefying nature of this problem, I'

Re: OCSP stapling

2009-04-13 Thread Dr. Stephen Henson
On Mon, Apr 13, 2009, Rene Hollan wrote: > What, if any, support is there in openssl to support OCSP stapling? > > I have code that does an OCSP check for received certs, but obviously > want to "play nice" and make use of any stapled OCSP response first, > It is supported in the latest version

Re: CMS Structure Access

2009-04-13 Thread Gary Kennedy
Dr. Stephen Henson wrote: On Wed, Apr 08, 2009, Gary Kennedy wrote: Specifically, I'm after the version & digestAlgorithms fields of the signed-data CMS structure, (read-only at this stage). How may I go about accessing these fields without 'illegally' including the cms_lcl.h header? You

OCSP stapling

2009-04-13 Thread Rene Hollan
What, if any, support is there in openssl to support OCSP stapling? I have code that does an OCSP check for received certs, but obviously want to "play nice" and make use of any stapled OCSP response first,

X509_get_serialNumber

2009-04-13 Thread sarym binome
hi all i want to extract the the serial number or the subject name from an X509 certificate i used X509_get_serialNumber but i don't know how can i use it , i can't print it cause it's a struct this is my certificate Certificate: Data: Version: 1 (0x0) Serial Number: 3 (0x3)

Re: (DTLS) Nexuiz needs information on the open-ssl UDP stuff.

2009-04-13 Thread Wes Hardaker
> On Sat, 11 Apr 2009 22:49:46 -0700 (PDT), Miguel Ghobangieno > said: MG> They're all multi-treaded. How to do it in a single threaded app MG> with multiple users? Here's another documented example of a working hack: http://www.net-snmp.org/wiki/index.php/DTLS_Implementation_Notes

openssl-0.9.8k.tar.gz

2009-04-13 Thread Chuck Aaron
I have saved this file off the openssl site to my documents. I am trying to copy the *.gz file with secure fx from my documents and the Alpha server using vms 8.3 and it will not allow me to transfer the file. Any ideas on how I get it there to unzip it? Thanks, Chuck __

test

2009-04-13 Thread Chuck Aaron
__ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org

how to create cert file for windowxp sp3

2009-04-13 Thread shawnlau
Hi all! I have a question that makes me feel so confuse. I have updated OPENSSL.rpm to openssl-0.9.8e-7.el5, and have a little modify to openssl.cnf and CA scripts! The change like below: The OPENSSL.cnf: dir= ./demoCA # Where everything is kept private_key