[openssl.org #1279] OpenSSL 0.9.8a segfaults in SSL_CTX_load_verify_locations()

2006-02-06 Thread Marko Asplund via RT
I'm having problems with the OpenSSL SSL_CTX_load_verify_locations() routine dumping core on Solaris 8 (sparc, 64-bit). I first noticed this problem with Apache mod_ssl but it can be reproduced with a minimal standalone C program which calls SSL_CTX_load_verify_locations (). I've only

RSA 1024 in certificate

2006-02-06 Thread majorsoul (sent by Nabble.com)
why does the DER encoding of public key modulus begins with 02 81 81 00 and not with 02 81 80 ?? View this message in context: RSA 1024 in certificate Sent from the OpenSSL - Dev forum at Nabble.com.

Re: [openssl.org #1279] OpenSSL 0.9.8a segfaults in SSL_CTX_load_verify_locations()

2006-02-06 Thread Dr. Stephen Henson
On Mon, Feb 06, 2006, Marko Asplund via RT wrote: I'm having problems with the OpenSSL SSL_CTX_load_verify_locations() routine dumping core on Solaris 8 (sparc, 64-bit). I first noticed this problem with Apache mod_ssl but it can be reproduced with a minimal standalone C program

Re: RSA 1024 in certificate

2006-02-06 Thread jimmy
majorsoul (sent by Nabble.com) wrote: why does the DER encoding of public key modulus begins with 02 81 81 00 and not with 02 81 80 ?? ASN.1 specifies integers cannot be negative. so the leading zero makes it positive. -jb

servername extension and apache 2.2.0

2006-02-06 Thread Peter Sylvester
Hello, I just have put together the small patch for apache 2.2.0 which allows to use the sernername extension logic in the development snapshot in order to select a different ssl context, and also to renegotiate if the vhost indicated by Host: has a different SSL_ctx (e.g. certificate). The

Re: RSA 1024 in certificate

2006-02-06 Thread Jack Lloyd
On Mon, Feb 06, 2006 at 10:50:18PM +0530, jimmy wrote: majorsoul (sent by Nabble.com) wrote: why does the DER encoding of public key modulus begins with 02 81 81 00 and not with 02 81 80 ?? ASN.1 specifies integers cannot be negative. so the leading zero makes it positive. Not quite;

Re: servername extension and apache 2.2.0

2006-02-06 Thread Oden Eriksson
måndagen den 6 februari 2006 18.13 skrev Peter Sylvester: Hello, I just have put together the small patch for apache 2.2.0 which allows to use the sernername extension logic in the development snapshot in order to select a different ssl context, and also to renegotiate if the vhost

Re: servername extension and apache 2.2.0

2006-02-06 Thread Peter Sylvester
The version of this patch is not one hour old. The development snapshot is related to openssl which is also only there since a few weeks. The patch was done to validate that the openssl servername extension code can be easily used in an application. Both development teams may have opinions

Re: servername extension and apache 2.2.0

2006-02-06 Thread Oden Eriksson
måndagen den 6 februari 2006 19.36 skrev Peter Sylvester: The version of this patch is not one hour old. The development snapshot is related to openssl which is also only there since a few weeks. The patch was done to validate that the openssl servername extension code can be easily used in

Re: servername extension and apache 2.2.0

2006-02-06 Thread William A. Rowe, Jr.
If you want to submit and have considered by the httpd project, perhaps you ment to submit it there? Nice work b.t.w. Bill Peter Sylvester wrote: Hello, I just have put together the small patch for apache 2.2.0 which allows to use the sernername extension logic in the development snapshot