Re: CRL bug?

2004-08-17 Thread Dr. Stephen Henson
On Tue, Aug 17, 2004, Joseph Bruni wrote: > I have a server that runs with many (1500) long-duration SSL connections. I am using > CRLs and have the CRL checking enabled when I'm building my SSL_CTX using the > following code: > > X509_STORE* store = SSL_CTX_get_cert_store(ctx); >

RE: publick key

2004-08-17 Thread David Schwartz
You can easily extract the public key from the private key with 'openssl rsa -pubout'. To get the key from the certificate, use 'openssl x509 -pubkey'. DS -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of ULL Lafayette Sent: Tuesday, August 17

SSL_connect returns SSL_ERROR_ZERO_RETURN for SOCKS4/5

2004-08-17 Thread Usman Riaz
Hi *! I have an application (OS MS Windows) that needs to speak https even if it is behind SOCKS4/5 proxy. I am using for OpenSSL for the SSL part & my code for using OpenSSL is taken from the file "\demos\ssl\cli.c". My problem is that when I connect via a SOCKS4/5 proxy (after doing the au

CRL bug?

2004-08-17 Thread Joseph Bruni
I have a server that runs with many (1500) long-duration SSL connections. I am using CRLs and have the CRL checking enabled when I'm building my SSL_CTX using the following code: X509_STORE* store = SSL_CTX_get_cert_store(ctx); if ( !store ) {

publick key

2004-08-17 Thread ULL Lafayette
Hi all,   I am a new user. I have setup a CA as per the documentation in the openssl website. But I don't understand how to display only the public key from the certificate. Is there any command line option to output the public key from the certificate to any file.   Please help. Thanks in advanc

RE: OpenSSL 0.9.7d WIN - IA64 port

2004-08-17 Thread mclellan, dave
Hi Richard. thanks for your reply. In my experiments so far, I have seen the messages about size_t and unsigned long. This is the one that worried me some. How can I watch for news about this work? Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

Re: Any issues with WinXP SP2?

2004-08-17 Thread Rabellino Sergio
Lucius Millinder wrote: Know where I can get the url:// for sp2? Here you can find the download area for XP-SP2 (english only for now...) http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/winxpsp2.mspx Lucius L. Millinder Jr. Security & SAN Systems Specialist -Original Message-

RE: Any issues with WinXP SP2?

2004-08-17 Thread Lucius Millinder
Know where I can get the url:// for sp2? Lucius L. Millinder Jr. Security & SAN Systems Specialist -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Morgan Sent: Tuesday, August 17, 2004 6:54 AM To: [EMAIL PROTECTED] Subject: Any issues with WinXP SP

Any issues with WinXP SP2?

2004-08-17 Thread Scott Morgan
I'm mainly thinking about the data execution prevention (DEP) feature. As far as I can make out it's all okay. Scott Morgan __ OpenSSL Project http://www.openssl.org User Support Mailing List

Windows OpenSSL: Where to put the config file?

2004-08-17 Thread Peter O Sigurdson
Greetings I'm working (on Windows) with the Apache SSL software, Also, with the OpenSSL for Windows (the Apache just bundles that in) I cannot find where the configuration file is - all the documentation seems to reference the Linux  filesystem. Could someone please tell me where to put the confi

Re: OpenSSL 0.9.7d WIN - IA64 port

2004-08-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 16 Aug 2004 17:41:29 +, [EMAIL PROTECTED] said: d.mclellan> Hi: I'm now investigating build OpenSSL -0.9.7d on a WIN d.mclellan> IA64 architecture machine. Has anyone had any experience d.mclellan> with this, or is there any active work in progress to

AW: Generating Test Certificates

2004-08-17 Thread thomas . beckmann
You have to specify a config file using the -config parameter of openssl. Even as "ca" "req" needs a configuration file to get specific information like keylength or the distinguishedName structure. My experience is that openssl does not find the default config file so you have to set either the e