Cisco concentrator not accept certificate from openssl

2005-05-12 Thread ray v
Hi All, Hi Steve! Does anyone have documentation on how to get a concentrator to accept certificate signed by openssl? Cisco VPN 3030 4.x On the concentrator I have install both my Root CA certificate and the Sub CA I used to sign request for internal devices. Next I generate a manual request

Re: Callback function in c++ methods

2005-05-12 Thread ahmad hassan
Hello, Thanks, i had a working class already with the list of class objects but i think i maybe switching to this more easy method. Regards, Ahmad. From: Goetz Babin-Ebell [EMAIL PROTECTED] Reply-To: openssl-users@openssl.org To: openssl-users@openssl.org Subject: Re: Callback function in c++

Re: No show errors with ERR_print_errors_fp()

2005-05-12 Thread Angel Martinez Gonzalez
Hello: I tried your advice but I obtain the same result. I have tried the following: ERR_load_crypto_strings(); printf (error: %i\n,ERR_get_error()); printf(ERR_error_string(ERR_get_error(), NULL)); printf(ERR_lib_error_string(ERR_get_error())); printf(ERR_func_error_string(ERR_get_error()));

Re: Cisco concentrator not accept certificate from openssl

2005-05-12 Thread Mark Schoneman
I've had problems with certificates and Cisco if any of the keys in the chain are greater than 2048 This includes the CA ray v [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 05/12/2005 01:16 AM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject

update CRL does not update X509_STORE ?...

2005-05-12 Thread Thomas NOEL
Hello, I have an application with a simple init code : SSL_CTX *ctx; X509_STORE *store; X509_LOOKUP *lookup; (...) store = SSL_CTX_get_cert_store(ctx); lookup = X509_STORE_add_lookup(store, X509_LOOKUP_hash_dir());

ssl and proxy servers

2005-05-12 Thread Rick
Hi. Im trying to use openssl BIO methods that create the sockets and let me read and write. Im curious how to set this up so it will work through a proxy server. I cant find anything relevant in Network Security with OpenSSL or on the web. Are there configuration parameters I need to

custom extension structure

2005-05-12 Thread pana
Hi All, I want add custom extension to my certificate and I try to insert the oid in [new_oids] section and the extension in the [v3_ca] section. That's ok. I want define my custom extension as a string which I can write when I create the certficate. How can I do? Do I need write C code or I only

Re: custom extension structure

2005-05-12 Thread Dr. Stephen Henson
On Thu, May 12, 2005, pana wrote: Hi All, I want add custom extension to my certificate and I try to insert the oid in [new_oids] section and the extension in the [v3_ca] section. That's ok. I want define my custom extension as a string which I can write when I create the certficate. How

Re: Cisco concentrator not accept certificate from openssl

2005-05-12 Thread ray v
Thanks for responding Mark, All certs are 1024 including the one I generated for the concentrator identity. Did you get yours working? --- Mark Schoneman [EMAIL PROTECTED] wrote: I've had problems with certificates and Cisco if any of the keys in the chain are greater than 2048 This

Cert display in 1 line in PEM format

2005-05-12 Thread Jana Nguyen
Hi there, I'm having a certificate format problem with Linux. It strips out the line feeds (see below) when I retrieve a proxy certificate from a portal and write it to a file. linux system put the cert data in just 1 line in a PEM format. Do you know how I can resolve this problem? No line

Re: Cert display in 1 line in PEM format

2005-05-12 Thread Joseph Bruni
What software are you using to retrieve the certificate? On May 12, 2005, at 5:42 PM, Jana Nguyen wrote: Hi there, I'm having a certificate format problem with Linux. It strips out the line feeds (see below) when I retrieve a proxy certificate from a portal and write it to a file. linux system put

Re: Cert display in 1 line in PEM format

2005-05-12 Thread Jana Nguyen
Thank you for the prompt response. I am using a perl api called GridAuth to get the proxy certificate from the portal. My perl script is using the GridAuth api to retrieve the credential. thanks, -Jana - Hide quoted text - On 5/12/05, Joseph Bruni [EMAIL PROTECTED] wrote: What software are

[no subject]

2005-05-12 Thread zdy010
hi,everyone: I have a problem in using openssl. We want to develop a mobile ipv6 system with aaa support.So I choose opendiamter as our base and I choose openssl to support ssl security. And I want to know are: did openssl support ipv6? Did openssl support mobile ipv6? If so, do I need other

[no subject]

2005-05-12 Thread zdy010
hi,here: I have a problem in using openssl. We want to develop a mobile ipv6 system with aaa support.So I choose opendiamter as our base and I choose openssl to support ssl security. And I want to know are: did openssl support ipv6? Did openssl support mobile ipv6? If so, do I need other

how does openssl support mobile ipv6?

2005-05-12 Thread zdy010
hi,here: I have a problem in using openssl. We want to develop a mobile ipv6 system with aaa support.So I choose opendiamter as our base and I choose openssl to support ssl security. And I want to know are: did openssl support ipv6? Did openssl support mobile ipv6? If so, do I need other

does openssl support mobile ipv6

2005-05-12 Thread zdy010
hi,here: I have a problem in using openssl. We want to develop a mobile ipv6 system with aaa support.So I choose opendiamter as our base and I choose openssl to support ssl security. And I want to know are: did openssl support ipv6? Did openssl support mobile ipv6? If so, do I need other