Openssl-0.9.7-beta3 applications are not being built s_server.exe etc.

2002-09-24 Thread mlcarey59
Where are the applications in OpenSSL-0.9.7-beta3 30 Jul 2002? The applications in the apps directory are not being built. The package compiles and passes all test but it does not build the applications, only the object files are being built. Marcus

How to turn off the certificate purpose check while ssl handshakes?

2002-09-24 Thread Jung-Ho Cha
Hello, When I tested the OpenSSL SSL handshake process, I found that it is might be impossible to turn off some certificate extended usage checks while verifying certificate, I investigate the following part of source: In openssl/ssl/ssl_cert.c of OpenSSL 0.9.7 beta-2. int

the g value is not a generator???

2002-09-24 Thread deokwu, kim
Hi... I want to use a fixed prime in the DH(generator=2). So, I comment out the random prime generator... then... DH(key exchange) is successful, but exception(error?) output is remained about generator... the g value is not a generator. Ref) variable used fixed DH G(generator) = 2 N(prime) =

Openssl Engine

2002-09-24 Thread Michiels Olivier
Hi, Currently I've an application that creates keys, certificate requests and certificates using NFast and openssl-0.9.5. I've updated my code to use the openssl-engine. Everything works perferctly with some modifications. Now, I would like to use the ENGINE concept with my NFast. I've already

RE: Question about auth with client certificates

2002-09-24 Thread Jeffrey Altman
There are two things you need to do: authenticate and then authorize. C-Kermit provides hooks to organizations in the form of two functions: X509_to_user() - who does this certificate represent X509_userok() - may the user gain access with this certificate C-Kermit provides two

Problem with client authentication , apache 2 mod_ssl and java client

2002-09-24 Thread Reddy.Thirumal
Hi All, I have problem with client authentication. I have setup my CA using openssl , created server certificate and client certificate both signed by the CA. I have converted the client certificate to P12 format, imported this into IE6 and ssl communication was successful from Internet explorer

CRYPTO_malloc - segmentation fault on Solaris 2.5.1

2002-09-24 Thread Adrian Petru DIMULESCU
Title: CRYPTO_malloc - segmentation fault on Solaris 2.5.1 Hello, I've just installed openssl-0.9.6g on a sparc Solaris 2.5.1 - (compiler: gcc version 2.95.3 20010315 (release)). I also compiled an program which uses OpenSSL for its libcrypto library. When running this program, I keep

Compiling 0.9.6g on RHat 6.2

2002-09-24 Thread Thomas Gagne
gcc -o openssl -DMONOLITH -I../include -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM openssl.o verify.o asn1pars.o req.o dgst.o dh.o dhparam.o enc.o passwd.o gendh.o errstr.o ca.o pkcs7.o

Re: Question about SSL_CTX_load_verify_locations

2002-09-24 Thread Xperex Tim
You need to SSL_CTX_new() before using the context with SSL_CTX_load_verify_locations(). --- Paul E. Bible [EMAIL PROTECTED] wrote: Hi there, I'm currently working on an application that uses SSL for its Internet communications. In this applications, I am verifying the certificates