Re: Certificate Problem :)

2002-04-23 Thread Ales Privetivy
Hello, AFAIK by default client does not sends its certificate. You should do something like this: SSL_CTX_set_verify(context, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); Maybe this should help. Regards Ales Privetivy Dear fellow developers,

Re: Please Help!!!

2002-04-23 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Mon, 22 Apr 2002 19:16:13 -0700, Paul Mallary [EMAIL PROTECTED] said: pmallary I have been trying to figure this out on my own for the past day or so and am stumped. I have installed all of the necessary stuff for openssl to compile but I keep getting these

Re: Please Help!!!

2002-04-23 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Mon, 22 Apr 2002 22:38:47 -0700, Aleksey Sanin [EMAIL PROTECTED] said: aleksey IMHO it's bad idea to use gcc 3.0 on Solaris now. I had very aleksey bad expirience with it in the past. If it is possible, try aleksey gcc 2.95.3. Is that just on Solaris, or a

Re: Please Help!!!

2002-04-23 Thread Aleksey Sanin
I've tried it on Solaris and Linux. IMHO, in both cases it is not polished as well as it should be. Probably there exist projects there you have to use 3.0 because of its new features. But it's not the case for me. Aleksey. Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on

gcc 3 (was Re: Please Help!!!)

2002-04-23 Thread Joe Orton
On Tue, Apr 23, 2002 at 10:06:41AM +0200, Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Mon, 22 Apr 2002 22:38:47 -0700, Aleksey Sanin [EMAIL PROTECTED] said: aleksey IMHO it's bad idea to use gcc 3.0 on Solaris now. I had very aleksey bad expirience with it in the

Re: Please Help!!!

2002-04-23 Thread Jean-Marc Desperrier
Aleksey Sanin wrote: IMHO it's bad idea to use gcc 3.0 on Solaris now. I had very bad expirience with it in the past. If it is possible, try gcc 2.95.3. I've had recently the occasion to compiles openssl 0.9.6 out of the box without problem with both 2.95.3 and 3.0.3 under Solaris. But

trustway pkcs11 engine for openssl

2002-04-23 Thread afchine madjlessi
Based on openssl-engine-0.9.6c, we have developed a new engine which allowsopenssl applications and Apache-mod_ssl servers to use through a PKCS#11interface the security functions provided by the Bull trustway cc2000 cryptographiccard, taking advantage of key storage in secure memory and

Help---Install problem

2002-04-23 Thread Chuo HUANG(CMS)
Hello! I encountered a problem (might be a silly one you think) when I install 0.9.6c. My system is windows 2000, ActivePerl-5.6.1.631-MSWin32-x86, and MSVC++ 6. Please see below. C:\cd C:\openssl-engine-0.9.6c C:\openssl-engine-0.9.6cperl Configure VC-WIN32 'perl' is not recongnized as

openssl - memory module

2002-04-23 Thread Jeffrey Schupp
All: In reading up on the notes I have read about a memory module that can be installed to help out the openssl. However the only one that I can find information about is mod_mm which I have compiled for apache. Is there another memory module that can be installed for openssl? Jeff

RE: CRL PROBLEM-CRL CANNOT WORK IN WINDOWS!

2002-04-23 Thread Aslam
Hi, It does workfine in microsoft internet explorer or microsoft crypto api, I have verified it also. Take a look at link: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/prodtech/dbsql/tshtcrl.aspfor better understanding of how CRL checking done by microsoft.

RE: Certificate Problem / get_peer_certificate + ssldump

2002-04-23 Thread Andrew T. Finnell
Ok I have some ssldump information for the amchine that doesn't work. I am trying to get the dump on a machine That does work now. The client and server are our own applications. As one other person stated, we already do use SSL_CTX_set_verify (context, SSL_VERIFY_PEER, 0).