Freeing the x509 struct.

2004-07-21 Thread sakthi.subramaniam
Do we need to free the X509 structure returned by d2i_X509() and PEM_read_X509() functions after using it? Sakthi S G Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and

Re: OpenSSL in Nucleus

2004-07-21 Thread J Harper
Joe, MatrixSSL might also be an interesting possibility. http://www.matrixssl.org I'd actually be interested in what it takes to port to Nucleus. We'd be happy to consider your port for inclusion in the next release, I imagine it would be pretty straightforward given the other embedded platforms

Re: OpenSSL in Nucleus

2004-07-21 Thread Edson Watanabe
1) Choose a flavor of Nucleus (http://www.acceleratedtechnology.com). For instance, say that you've chosen the Intel StrongARM 1110 processor (http://www.acceleratedtechnology.com/embedded/cpu_nucleus.php) . You need to make OpenSSL compile using the ARM C Compiler and the Metaware Tools. You proba

Re: New to OpenSSL-Need a little help

2004-07-21 Thread Mark Foster
Kevin Eppinger wrote: I have been tasked with a project that involves writing a process (not a CGI invoked from Apache) that sends a secure request to a https website and reads the response back, parses it..blah, blah, blah. Its has to be Consider... LWP::Request part of the libwww perl module.

New to OpenSSL-Need a little help

2004-07-21 Thread Kevin Eppinger
I have been tasked with a project that involves writing a process (not a CGI invoked from Apache) that sends a secure request to a https website and reads the response back, parses it..blah, blah, blah.  Its has to be done this way because this certain third party doesn’t have a Linux/C/C++

OpenSSL in Nucleus

2004-07-21 Thread Joe smith
Hi, I want to try and experiment using openssl on nucleus embedded system. Any idea what type should I use(Windows, Cygwin, UNIX) etc.?   Thanks, Joe Do you Yahoo!? Yahoo! Mail is new and improved - Check it out!

Re: Checking the authkeyid and subkeyid!!

2004-07-21 Thread Dr. Stephen Henson
On Wed, Jul 21, 2004, [EMAIL PROTECTED] wrote: > > I am seeing that akid->keyid as NULL always but i am sure that akid is a > valid structure. It is a valid certificate and authority key identifier is > also present, in that case i am wondering how can i get the akid->keyid as a > NULL? Do i nee

RE: Checking the authkeyid and subkeyid!!

2004-07-21 Thread sakthi.subramaniam
--- Begin Message --- I am seeing that akid->keyid as NULL always but i am sure that akid is a valid structure. It is a valid certificate and authority key identifier is also present, in that case i am wondering how can i get the akid->keyid as a NULL? Do i need to call any function to update ak

Re: TLS wrong version number problem, the correct lib for openssl ?

2004-07-21 Thread Richard Koenning
Lara Adianto wrote: What's the correct libraries for openssl ? Is this okay: [EMAIL PROTECTED] local]# ldd /usr/bin/openssl libdl.so.2 => /lib/libdl.so.2 (0x4001b000) libc.so.6 => /lib/i686/libc.so.6 (0x4001f000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x4000) no libcr

Re: Checking the authkeyid and subkeyid!!

2004-07-21 Thread Dr. Stephen Henson
On Wed, Jul 21, 2004, [EMAIL PROTECTED] wrote: > > I have tried to the following code..it crashes in > ASN1_OCTET_STRING_cmp().. > Any inputs?? > > > > -- > > BOOL SSL_validate_AID_SID(X509 *dev_cert, UCHAR *manu_buffer)

RE: Checking the authkeyid and subkeyid!!

2004-07-21 Thread sakthi.subramaniam
I have tried to the following code..it crashes in ASN1_OCTET_STRING_cmp().. Any inputs?? -- BOOL SSL_validate_AID_SID(X509 *dev_cert, UCHAR *manu_buffer) { X509 *issuer_cert = NULL; AUTHORITY_KEYID

Re: Checking the authkeyid and subkeyid!!

2004-07-21 Thread Dr. Stephen Henson
On Wed, Jul 21, 2004, [EMAIL PROTECTED] wrote: > > I have tried X509_get_ext_d2i > akid = X509_get_ext_d2i(dev_cert, > NID_authority_key_identifier,NULL, NULL) > This returns AUTHORITY_KEYID structure..After that will > ASN1_OCTET_STRING_cmp() serve the purpose? > Call the same function

RE: Checking the authkeyid and subkeyid!!

2004-07-21 Thread sakthi.subramaniam
I have tried X509_get_ext_d2i akid = X509_get_ext_d2i(dev_cert, NID_authority_key_identifier,NULL, NULL) This returns AUTHORITY_KEYID structure..After that will ASN1_OCTET_STRING_cmp() serve the purpose? >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On B

RE: Checking the authkeyid and subkeyid!!

2004-07-21 Thread sakthi.subramaniam
Hi., I had gone thro' the X509_check_issued(). With that only I have created X509 structure for subject and issuers certificate with d2i_X509(). But the subject->akid is NULL . Then I called ASN1_OCTET_STRING_cmp(subject->akid->keyid, issuer->skid);it crashes.. Is there anything I need to do fo

Re: Checking the authkeyid and subkeyid!!

2004-07-21 Thread Dr. Stephen Henson
On Wed, Jul 21, 2004, Amar Desai wrote: > You can use something like this... > > ASN1_OCTET_STRING_cmp(subject->akid->keyid, issuer->skid); > You also need to call X509_check_purpose(cert, -1, 0) just to ensure the fields were filled in if you did things that way though I'd recommend using X509

Re: Checking the authkeyid and subkeyid!!

2004-07-21 Thread Amar Desai
You can use something like this... ASN1_OCTET_STRING_cmp(subject->akid->keyid, issuer->skid); Look into the X509_check_issued() function and see if it satisfies your requirements. Amar [EMAIL PROTECTED] wrote: Is there any function available to compare the Authority key identifier of the certifca

Checking the authkeyid and subkeyid!!

2004-07-21 Thread sakthi.subramaniam
Is there any function available to compare the Authority key identifier of the certifcate with the issuers subject key identifier? Will X509_verify_cert() do the comparision of the above? Actually I have both the certificates in DER format. Confidentiality Notice The information contained in

RE: Checking the critical flags and Key usage extension x509v3 certs.

2004-07-21 Thread sakthi.subramaniam
For the second case it is returning 255. There was a problem in the certificate.. Thanks for your help. Sakthi S G >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Dr. >Stephen Henson >Sent: Tuesday, July 20, 2004 9:47 PM >To: [EMAIL PROTECTED] >Subjec