SSL_renegotiation using non block sockets

Hi, I am using Non Blocking sockets, and would like to know the behaviour wrt SSL_renegotiation. Once I make a call to do_handshake, as the FD is non blocking it will return immediately with a success, but from the application's point of view how will it come to know that the renegotiation in thro

Re: libeay32.lib giving some link errors while using on Windows

Great thanks Rush! This exercise did solve the problems :-) Now I see that this problem with nt.mak has already been pointed out by "Matyas Majzik" in one of his emails to this group. Thanks and regards, -- Qadeer Baig On 6/1/05, Rush Manbert <[EMAIL PROTECTED]> wrote: > Hi Qadeer, > > I just

Re: Getting Cisco 3kvpn to accept openssl signed certs - anyone done it?

Ok finally had time to work on this project again and solve the problem. To fix the problem I upgraded from vpn3000-4.1.5.B-k9.bin to vpn3000-4.1.7.E-k9.bin --- ray v <[EMAIL PROTECTED]> wrote: > Yes, first thing I did was install the CA root > certificate and the sub CA certificate which sign

SSL_CTX_set_verify

Title: SSL_CTX_set_verify Hi, I use the OpenSSL api ver 0.9.7e with Win32 and I have a problem: Is it possible to establish an SSL connection between a client and a server if the client have a certificate (and had to be verified) but the server don't have one? I have already try to chang

Problems in ssltest.c

Hello,       I am new to openssl and am trying to compile libraries for Win32 environment.  I used the "ms\do_ms fips" command as I don't really care right now about recompiling the assembly.  I am getting the following error:       cl /Fotmp32\ssltest.obj -Iinc32 -Itmp32 /MD /W3 /WX /G

Help with Self Signed Cerificates.

Hello There. I wrote Client and Server Programs using SSL. They fail to hand-shake when I use self Signed Certificates and succeed when I use Certificates generated from a CA. The failure I get when using self Signed Certificate is ... 4904:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 aler

timeout vs. SSL_ERROR_WANT_XXXX

Hi everyone I want to use timeout with select and I wonder how to "cancel" operation (SSL_read or SSL_write non-blocking) that caused SSL_ERROR_WANT_READ (or *_WRITE). I've got messages queue to send (and one for received too). If I cannot send whole particular msg within some time (5 sec) I w

Default CApath in Debian (OpenSSL 0.9.6c-2)

Hi, I ran in trouble with the following thing. There is a Debian woody, with OpenSSL 0.9.6c installed. I am trying to set OpenSSL so it per default uses CA certificates in /etc/ssl/certs (I want to force Sylpheed to actually use a CA certificate to verify server certificate). I put the CA files t

Derving the root CA's cert from a given SSL cert

Hi, I was wondering if it's possible to derive (or extract?) the root CA's cert from an given SSL cert using openssl. What I mean by "root CA's cert" is the certficate that would be installed in a browsers list of trusted CAs. For instance if I have an SSL certificate signed by verisign, I

Re: libeay32.lib giving some link errors while using on Windows

Hi Qadeer, I just went through the exercise of building the openssl libraries for Win32 and for the Mac. I also built and installed libxml, libxslt, and xmlsec. This matters because xmlsec links against openssl. I discovered that the generated makefiles for Win32 hard code /MD into the compi

Unusual NMAKE warning.

Hello, Never had this happen before until I tried building 0.9.8 Beta 3, but it could cause problems in the future: NMAKE : warning U4004: too many rules for target 'tmp32\e_4758cca_err.h' copy nul+ .\engines\e_4758cca_err.h tmp32\e_4758cca_err.h nul Microsoft Visual C++ 6 SP5, latest

multiple SSL BIO chain error (regression from 0.9.6?)

Hello, I'd really appreciate help in porting code that works fine with 0.9.6b but fails in newer versions. I'd like to know if something has changed in the way BIOs should be used or is the newer openssl code that is broken. SYNOPSIS I want to create a BIO chain consisting of a socket BIO plus

Re: SMIME decrypt: header too long

On Wed, Jun 01, 2005 at 12:19:11PM +0100, Peter Cope wrote: > Try using the asn1parser (an option with openssl). no problem: asn1parse tells me 0:d=0 hl=2 l=inf cons: SEQUENCE 2:d=1 hl=2 l= 9 prim: OBJECT:pkcs7-envelopedData ... But I'm realy confused because exac

Re: Generate a CRL from an OCSP request

On Wed, Jun 01, 2005, Julien VEHENT wrote: > Hi all, > > I'm having an OCSP Responder on my CA and i want to use it in order to > generate > CRL's on others servers. > > So the idea is: > > +-+ > | CA &|>(3)>\ > |ocsp |...|op

Re: how to sign as per PKCS1 v2.0.

On Wed, Jun 01, 2005, Suram Chandra Sekhar wrote: > Hi, > Thank you very much for the reply. > > I still have some confusion w.r.t to the version of the draft (PKCS#1 v2.0 > and PKCS#1 v2.1 specification). > > I was referring to rfc3447 (PKCS#1 v2.1) and the older draft > PKCS #1: RSA Cryptogra

Re: SMIME decrypt: header too long

Try using the asn1parser (an option with openssl).  If this doesn't complete without an error then you may have a problem with the way your originator is producing ASN.1 (we did here and I had to solve it by producing a bit of code to act as a 'filter' to correct the problem!).   PeterBeat Jucker <

Re: SMIME decrypt: header too long

On 2005.06.01 at 13:07:31 +0200, Beat Jucker wrote: > I have an intermediate SMIME decrypting problem. I'm using following > commandline interface (little bit outdated openssl 0.9.6b @ HPUX-B.11.11): > > cat email | openssl smime -decrypt -inkey mykey -recip mycert > > This works usually with

SMIME decrypt: header too long

I have an intermediate SMIME decrypting problem. I'm using following commandline interface (little bit outdated openssl 0.9.6b @ HPUX-B.11.11): cat email | openssl smime -decrypt -inkey mykey -recip mycert This works usually without problems. But Emails from one particular address I can decryp

libeay32.lib giving some link errors while using on Windows

Hi all, I am having some linking problems while using "libeay32.lib" on windows (see link errors below). I created libeay32.lib on windows by compiling openssl source as described in "INSTALL.W32" by carrying out following steps: 1. > perl Configure VC-WIN32 2. > ms\do_ms 3. > nmake -f ms\nt.m

Generate a CRL from an OCSP request

Hi all, I'm having an OCSP Responder on my CA and i want to use it in order to generate CRL's on others servers. So the idea is: +-+ | CA &|>(3)>\ |ocsp |...|openvpn srv|..(CRL GENERATION) +-+=ocsp response===(2)==>