Re: maximum block size in SSL_write()

2002-09-27 Thread Cory Albrecht
--- Xperex Tim [EMAIL PROTECTED] wrote: Personally, I don't consider SSL_ERROR_WANT_WRITE to be an error. If you are going to use non-blocking sockets then you are going to have to expect that sometimes the socket won't be ready for writing. OpenSSL doen't want to busy-wait in that case so

Re: maximum block size in SSL_write()

2002-09-27 Thread Lutz Jaenicke
On Thu, Sep 26, 2002 at 11:36:36PM -0700, Cory Albrecht wrote: --- Xperex Tim [EMAIL PROTECTED] wrote: Personally, I don't consider SSL_ERROR_WANT_WRITE to be an error. If you are going to use non-blocking sockets then you are going to have to expect that sometimes the socket won't be

Validity period of certificates

2002-09-27 Thread Radboud Platvoet
Hi everyone, I would like to know if there is a way to find out for what period a certificate is valid (ie: the start and end date). This is the certificate from which I like to determine the validity period: -BEGIN RSA PRIVATE KEY-

Missing libssl and libcrypto files

2002-09-27 Thread Thomas Tomter
Hello. I am trying to install the openh323gatekeeper (also called GNUgk), which is based upon the openh323- and pwlib-libraries from openh323.org. While trying to install the gatekeeper, these libraries ask for libssl.so.2 and for libcrypto.so.2. I had to let a buddy of mine build the

signer certificate self signed

2002-09-27 Thread Aonzo Emanuele
Hi, I'm Emanuele I'd like to know if is possible to sign a PKCS#7 with a self signed CA certificate because the verify fail. I need to sign a document with this kind of certificate. The signature operation is ok but the verify fail. I want the verify return OK also in case of signer

RE: Validity period of certificates

2002-09-27 Thread Jose Correia (J)
Try openssl x509 -in thiscert -noout -dates do a man x509 for more info. Cheers Jose -Original Message- From: Radboud Platvoet [mailto:[EMAIL PROTECTED]] Sent: 27 September 2002 14:43 To: [EMAIL PROTECTED] Subject: Validity period of certificates Hi everyone, I would like to know

Re: Validity period of certificates

2002-09-27 Thread Michiels Olivier
Hi, take the BEGIN CERTIFICATE to the END CERTIFICATE part, put it in a file, then do : openssl x509 -in yourfile -text. You will see the start and the end date at the beginning of the response. Hope this help, Michiels Olivier Radboud Platvoet wrote: Hi everyone, I would like to know if

RE: Validity period of certificates

2002-09-27 Thread Radboud Platvoet
Thanks guys, That works great. However, I would really like to do it with a call from my C code and not in the shell. -Radboud -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michiels Olivier Sent: Friday, September 27, 2002 3:04 PM To: [EMAIL

RE: Validity period of certificates

2002-09-27 Thread John . Airey
In addition, that was your key and certificate that you sent, not just . So I'd hope you have a pass-phrase on your key or the key and certificate that you sent aren't ones that you intend to use. - John Airey, BSc (Jt Hons), CNA, RHCE Internet systems support officer, ITCSD, Royal National

Re: Validity period of certificates

2002-09-27 Thread Steve Haslam
On Fri, Sep 27, 2002 at 03:39:07PM +0200, Radboud Platvoet wrote: That works great. However, I would really like to do it with a call from my C code and not in the shell. s_client contains code to print notbefore/notafter in case they are the reason for failing verification. In the verify

Re: Missing libssl and libcrypto files

2002-09-27 Thread B. van Ouwerkerk
They say: that's what RPM's are for. Compile with shared libs: Add shared to the config line. Read The Fine Manual, it's explained in the readme file. If it keeps on whining after make install you might need to rename some files. I never tried to copy from another box, I'm just to lazy to do

DH Certificates

2002-09-27 Thread Innokentiy Ivanov
Hi, all! My question is not directly an OpenSSL question, but is related to SSL topic. Please advice me, where can I get X509 certificates with Diffie-Hellman key exchange algorithm (as I know, OpenSSL doesn't support it, but so on). Thank you. Innokentiy

scripting openssl req -new

2002-09-27 Thread Mathieu Arnold
Hi I've been going through the list archive, and I can't find out how to script certificate creation. the ideal thing would be to be able to specify things like : openssl req -new -x509 -days 3650 -text -out cert.pem -keyout cert.pem -passphrase my stupid passphrase -country FR -state Marne

Re: maximum block size in SSL_write()

2002-09-27 Thread Cory Albrecht
--- Lutz Jaenicke [EMAIL PROTECTED] wrote: On Thu, Sep 26, 2002 at 11:36:36PM -0700, Cory Albrecht wrote: With buffer sizes of 8193 bytes or more, after SSL_write() returns an error it NEVER succedes ever again on that socket. My program does it's something else tasks, trying about every

extra info in client certs?

2002-09-27 Thread Noel Burton-Krahn
Title: Message Hi, I'd like to make a client cert which contains some extra information for my application. I've been using "openssl req", but I haven't figured out how the "extensions" and "oid_section" options work. If I put an arbitrary string in the "req_distinguished_name" section of

Re: scripting openssl req -new

2002-09-27 Thread Steve Haslam
On Fri, Sep 27, 2002 at 05:42:56PM +0200, Mathieu Arnold wrote: I've been going through the list archive, and I can't find out how to script certificate creation. the ideal thing would be to be able to specify things like : openssl req -new -x509 -days 3650 -text -out cert.pem -keyout

OpenSSL documentation

2002-09-27 Thread Cory Albrecht
Hello all, In the *.pod files dor the OpenSSL docs, the all the L links appear to be formatted like this one in the See Also section in ssl.pod - LSSL_accept(3)|SSL_accept(3). Now as a Windows user I don't have the man command, but I do have a web browser, except pod2html barfs on that and