Re: Problems with Sample Win32 client

2000-09-23 Thread Lutz Jaenicke
On Sat, Sep 23, 2000 at 09:56:58PM +, Robert Brown wrote: > #define CHK_SSL(err) if ((err)==-1) { ERR_print_errors_fp(stderr); exit(2); ... > SSL_set_fd (ssl, sd); (Return value not checked) > err = SSL_connect (ssl); > CHK_SSL(err); This one is not sufficient, because SSL_connect() ca

How can I create a "x509v3" certificate signed by the root??

2000-09-23 Thread Zhang Jianyu
First, I created the key and self-signed "x509v3" certificate of my CA Root using the command as follow: openssl req -new -nodes -x509 -keyout root.pem -out root.crt -days 365 So I got the private key and "x509v3" certificate for my CA Root. Then, I wanted to create the sub-keys&certificates s

Re: Problems with Sample Win32 client

2000-09-23 Thread Dr S N Henson
Robert Brown wrote: > > Hi folks, > > I am new to OpenSSL stuff. > > I configured and compiled SSL build 0.9.5a. I used VC++ (6.0) to tinker and > build the cli.c program. I could get it to compile OK. Then I > copied the *.dll files to the execution path and then started stepping > through t

Re: CryptoAPI and OpenSSL compatibility

2000-09-23 Thread Dr S N Henson
Dicky Liu wrote: > > Thanks for the info... but was there anything obviously wrong with that test > application that I wrote?? > It looks OK to me but I haven't tried running it myself. In the latest beta you can use the new -sign and -verify options on the digest commands to generate and che

Problems with Sample Win32 client

2000-09-23 Thread Robert Brown
Hi folks, I am new to OpenSSL stuff. I configured and compiled SSL build 0.9.5a. I used VC++ (6.0) to tinker and build the cli.c program. I could get it to compile OK. Then I copied the *.dll files to the execution path and then started stepping through the code. I started seeing problems with

RE: Extending validity period of expired certificate?

2000-09-23 Thread Arne Borkowski (borko.net)
IMHO you need to create a new certificate, as the validity period has been "signed" by your authority also. ANY changes invalidate the certificate. Arne > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Peter Stieglecker > Sent: Saturday, September

Extending validity period of expired certificate?

2000-09-23 Thread Peter Stieglecker
Hi List, is it possible to extend the validity period of a certificate or do I have to create new certificates when they expire? Thank you in advance Peter PS: if this is a FAQ, please give me a hint where to look for it... :-) ___