RE: How to shut down or terminate openSSL server other than ctrl-c.

2013-12-08 Thread Jeremy Farrell
In what way is the s_server documentation page "for the openssl s_client"?

 

You can exit s_server by sending it a command over a connection from any 
client, as described in the s_server documentation section which Dave linked to 
below; or you can use any ordinary local method to kill the s_server process 
(such as hitting control-c in common configurations on many OSes).

 

What problem are you trying to solve? Why would typing Shift-Q on the keyboard 
be acceptable when typing Ctrl-C isn't?

 

 

From: Sri Ramya [mailto:ramya.1...@gmail.com] 
Sent: Sunday, December 08, 2013 2:21 PM
To: openssl-users@openssl.org
Subject: Re: How to shut down or terminate openSSL server other than ctrl-c.

 

Thanks for your reply.

What ever u sent is for the openssl s_client.

I need commands to stop the openssl s_server other than ctrl+c

 

On Sat, Dec 7, 2013 at 5:42 AM, Dave Thompson mailto:dthomp...@prinpay.com"; \ndthomp...@prinpay.com> wrote:

Assuming you mean the commandline server 'openssl s_server' 

(there are lots of other things that could be described as 'openssl server'):

 

man s_server or 
http://www.openssl.org/docs/apps/s_server.html#CONNECTED_COMMANDS

except just now when I tried to confirm I got flaky DNS results so if necessary 
use 185.9.166.106 .

 

Although I notice that the manpage says 'neither -www nor -WWW' but the code 
also disables 

this logic if -quiet (apparently because this is considered 'session' output?).

 

 

From: HYPERLINK "mailto:owner-openssl-us...@openssl.org"; 
\nowner-openssl-us...@openssl.org [mailto:HYPERLINK 
"mailto:owner-openssl-us...@openssl.org"; \nowner-openssl-us...@openssl.org] On 
Behalf Of Sri Ramya
Sent: Friday, December 06, 2013 03:45
To: HYPERLINK "mailto:openssl-users@openssl.org"; \nopenssl-us...@openssl.org
Subject: *** Spam *** How to shut down or terminate openSSL server other than 
ctrl-c.

 

hi all,

How can i stop running opesSSL server with out pressing ctrl-c.

Is there a way to terminate it like the way we did for openSSL client preeing 
"Q".

Please help me in this regards.



Thank you

 


Re: How to shut down or terminate openSSL server other than ctrl-c.

2013-12-08 Thread Sri Ramya
Thanks for your reply.

What ever u sent is for the openssl s_client.

I need commands to stop the openssl s_server other than ctrl+c


On Sat, Dec 7, 2013 at 5:42 AM, Dave Thompson  wrote:

> Assuming you mean the commandline server ‘openssl s_server’
>
> (there are lots of other things that could be described as ‘openssl
> server’):
>
>
>
> man s_server or
> http://www.openssl.org/docs/apps/s_server.html#CONNECTED_COMMANDS
>
> except just now when I tried to confirm I got flaky DNS results so if
> necessary use 185.9.166.106 .
>
>
>
> Although I notice that the manpage says ‘neither –www nor –WWW’ but the
> code also disables
>
> this logic if –quiet (apparently because this is considered ‘session’
> output?).
>
>
>
>
>
> *From:* owner-openssl-us...@openssl.org [mailto:
> owner-openssl-us...@openssl.org] *On Behalf Of *Sri Ramya
> *Sent:* Friday, December 06, 2013 03:45
> *To:* openssl-users@openssl.org
> *Subject:* *** Spam *** How to shut down or terminate openSSL server
> other than ctrl-c.
>
>
>
> hi all,
>
> How can i stop running opesSSL server with out pressing ctrl-c.
>
> Is there a way to terminate it like the way we did for openSSL client
> preeing "Q".
>
> Please help me in this regards.
>
>
>
> Thank you
>


RE: How to shut down or terminate openSSL server other than ctrl-c.

2013-12-08 Thread Dave Thompson
Assuming you mean the commandline server 'openssl s_server' 

(there are lots of other things that could be described as 'openssl
server'):

 

man s_server or
http://www.openssl.org/docs/apps/s_server.html#CONNECTED_COMMANDS

except just now when I tried to confirm I got flaky DNS results so if
necessary use 185.9.166.106 .

 

Although I notice that the manpage says 'neither -www nor -WWW' but the code
also disables 

this logic if -quiet (apparently because this is considered 'session'
output?).

 

 

From: owner-openssl-us...@openssl.org
[mailto:owner-openssl-us...@openssl.org] On Behalf Of Sri Ramya
Sent: Friday, December 06, 2013 03:45
To: openssl-users@openssl.org
Subject: *** Spam *** How to shut down or terminate openSSL server other
than ctrl-c.

 

hi all,

How can i stop running opesSSL server with out pressing ctrl-c.

Is there a way to terminate it like the way we did for openSSL client
preeing "Q".

Please help me in this regards.



Thank you



RE: Squid - Proxy certificate

2013-12-08 Thread Dave Thompson
> From: owner-openssl-users On Behalf Of Walter H.
> Sent: Thursday, December 05, 2013 23:42

> can someone give me an example of the certificate, that is used here:
> 
> http_port 3128 ssl-bump cert=/etc/squid/cert/cert.pem
> 
> I'm using the latest CentOS release (6.5) with squid 3.1.10
> 
> I generated one with this:
> 
> openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -subj
> "/CN=dnsname/C=--/O=my Org/OU=my Squid server" -keyout cert.pem -out
> cert.pem
> 
That generates a self-signed cert (and matching key) for your server.

> in case I generate a CA cert and this one and install the CA cert in my
> browser (FF);
> does this help to remove the "The Connection is untrusted" messages of
> my browser (FF)?
> 
Those are different cases.

If you import to Firefox the self-signed server cert created above 
then it will trust a server using that cert.

If you generate a self-signed (root) CA cert & key, and use those 
to sign (issue) another cert or certs such as one for your server, 
and import the CA cert to Firefox, then a server using any cert 
under that CA is trusted.

Pick one.


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


RE: Adding a custom extension to a CSR

2013-12-08 Thread Danyk
I will run a debugger, but this is how I freed:

ASN1_OCTET_STRING_free(os1);
ASN1_PRINTABLESTRING_free(tmp_os);
ASN1_INTEGER_free(int1);

   X509_REQ_add_extensions(x, st_exts);





--
View this message in context: 
http://openssl.6102.n7.nabble.com/Adding-a-custom-extension-to-a-CSR-tp47446p47601.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org