Re: Error reading Cert X509_V_ERR_CERT_SIGNATURE_FAILURE

--- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Fri, Jun 06, 2003, rajagopalan ramanujam wrote: > > > > > hi, > > > > I have defined SSL_library_init rather then > > openSSL_add_all_algorithms to save memory. > > > >

Re: Error reading Cert X509_V_ERR_CERT_SIGNATURE_FAILURE

I tried to openSSL_add_all_algotithms instead of SSL_library_init but i am still seeing the same issue. --- rajagopalan ramanujam <[EMAIL PROTECTED]> wrote: > > hi, > > I have defined SSL_library_init rather then > openSSL_add_all_algorithms to save memory. > >

Re: Error reading Cert X509_V_ERR_CERT_SIGNATURE_FAILURE

selfsigned certificate which are working too. For Ex: www.google.com:443 i cannot connect, i get error (7). --- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Fri, Jun 06, 2003, rajagopalan ramanujam wrote: > > > hi, > > > > I exported thawte server

Error reading Cert X509_V_ERR_CERT_SIGNATURE_FAILURE

hi, I exported thawte server CA and verisign class3 certificates from the browser for testing and converted to C structure using x509 -C -in xxx.cer > xxx.C and added to my SSL client. Following is the code below. I am calling this function in a loop to load the certificates: unsigned char thawt

Re: Hard-coded trusted CA-cert

can you tell the what Cleanup procedure am i missing here? thankyou, raj --- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Wed, Mar 26, 2003, rajagopalan ramanujam wrote: > > > hi, > > > > I have tested the SSL handshake but f

Hard-coded trusted CA-cert

hi, I have tested the SSL handshake but failing when verifying server certificate X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY. I generated the self signed CA and used the same CAcert to verify using openssl verify and also using openssl s_client -verify 1 -CAfile and it seems to be working perfec

Re: "PRNG_NOT_SEEDED", Even after calling RAND_add() in client

hi brian, Thanks for your response. Here is how i use RAND_seed in my client : while (RAND_status() == 0) { int rnd = rand(); RAND_seed(&rnd, sizeof(rnd)); } Now Serverhello and certificate is accepted but when the client tries to generate a RSA key, the control does not seem to be

"PRNG_NOT_SEEDED", Even after calling RAND_add() in client

hi, I get a PRNG_NOT_SEEDED error even after i call RAND_add() function. I am calling the function at the begining before SSL initialization. Here is my sample client running on embedded board (ThreadX os). void ssl_client (void) { int err; int sd; struct sockaddr_in sa; SSL_CTX* ctx;

Re: Handshake Failure due to "bad record mac"

default: printf("SSL read problem"); goto end; } --- rajagopalan ramanujam <[EMAIL PROTECTED]> wrote: > hi, > > I am using a sample client appli on an embedded > platform trying to connect to s_server on the linux. >

Handshake Failure due to "bad record mac"

hi, I am using a sample client appli on an embedded platform trying to connect to s_server on the linux. client code has set cipher("ALL"); there is no client certificate. client side SSL_connect() return -1; Its very strange, some times client sends Alert message with bad mac code and some

SSL_AD_HANDSHAKE_FAILURE??

I am not setting the server certi and key files. But Set_chiper_list is called with "ALL" both on the server and client side. even then handshake fails when the server extracts the chiper. al=SSL_AD_HANDSHAKE_FAILURE; SSLer(SSL_F_SSL3_GET_CLIENT_HELLO,SSL_R_NO_SHARED_CIPHER); ssl_server () { : :

Re: Reading certificate from structure using d2i_X509??

Thanks steve!! Can i use these to function calls to convert? PEM_read_bio_X509 PEM_read_bio_PrivateKey --- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Tue, Mar 11, 2003, rajagopalan ramanujam wrote: > > > > > hi, > > > > I a

Reading certificate from structure using d2i_X509??

hi, I am having a problem when reading a certificate and private key from a memory buffer instead of a file. i am using d2i_X509(NULL,&cert,strlen(cert)) to read the certificate string which was defined in one of .pem file. Should i use SSL_CTX_use_certificate_ASN1 instead??? Please help me.