Re: Mutual Authentication

2009-01-05 Thread Itay Dagan
Thanks Kyle Just want to make sure I understand this i will do on the server side. But in the client side, I still need to upload certificate to X509 sturct or give path to a file right ? is there a function that upload my certificate - as client - The code below is for the client to upload the s

[openssl.org #1807] [patch] docs on SPKAC in 'ca' manpage - document default DER rather than PEM output emitted in special circumstances

2009-01-05 Thread Dirk-Willem van Gulik via RT
Folks, Recently was helping Henry Story with his foaf+ssl* code (folks on this list may well be interested; and ran into something I've been totally relying on for years - but never knew that was happening: 'ca' (but not x509 or req) are clever enough to magically output as DER when SPKAC

[openssl.org #1806] Issues cross-compiling on 64-bit platform

2009-01-05 Thread Philip Prindeville via RT
I'm running FC9 on a Phenom platform, and I'm trying to cross-compile openssl as part of the Astlinux distro for a GeodeLX platform (-march=k6-2). However, there seem to be some issues with doing this. I get the following: gunzip -c /home/philipp/trunk2/dl/openssl-0.9.8i.tar.gz | tar -C /home

Mutual Authentication

2009-01-05 Thread Itay Dagan
Hi Guys I have a question about Mutual authentication. After big help from your side (Thanks Shahin and Patrick) I secseeded to upload the server certificate from memory and it works great verifying the server certificate in the second fase I configure my server to verify client certificate. I am

Re: Mutual Authentication

2009-01-05 Thread Kyle Hamilton
SSL_get_peer_certificate(3ssl), SSL_get_peer_cert_chain(3ssl) will get the certificate and certificate chain, respectively. To control the verification process, you can use SSL_set_verify(3ssl) and/or SSL_CTX_set_verify(3ssl). Note that the server must present a certificate if it wants to ask for