Re: newbie in need for hints

2006-06-13 Thread Marek Marcola
Hello, In particular, having a separate certificate for each of the servers (desktop systems) really could be problematic considering the number of them, although having one for each client (print servers) could be feasible. If you control all this - this may be acceptable. Someone

Re: newbie in need for hints

2006-06-13 Thread Jerome Alet
On Tue, Jun 13, 2006 at 09:20:04AM +0200, Marek Marcola wrote: Hello, In particular, having a separate certificate for each of the servers (desktop systems) really could be problematic considering the number of them, although having one for each client (print servers) could be feasible.

i am confused in PEM_read_PrivateKey

2006-06-13 Thread 孙 金龙
when i use PEM_read_PrivateKey find it work error ,so i look into PEM_read_PrivateKey to find the reason. first i find in #define PEM_read_PrivateKey(fp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read( \ (char *(*)())d2i_PrivateKey,PEM_STRING_EVP_PKEY,fp,(char **)x,cb,u) next i find in void

Re: PEM_read_bio:no start error with OpenSSL0.9.8a

2006-06-13 Thread Jeremiah Foster
Kyle, Steve, and Marek, Thank you very much for your help. When I issued the command; $ openssl s_client -connect secure.incab.se:443/verify/server/click -CAfile /home/andreas/debitech/debitech_CA.pem I made a successful connection to the server as stated by the openssl client; -- [snip] --

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Girish Venkatachalam
bcoz d2i resolves to d2i_X509() , not to d2i_PrivateKey --- �� ���� [EMAIL PROTECTED] wrote: when i use PEM_read_PrivateKey find it work error ,so i look into PEM_read_PrivateKey to find the reason. first i find in #define PEM_read_PrivateKey(fp,x,cb,u) (EVP_PKEY

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Rajeshwar Singh Jenwar
how come ? plz explain. On 6/13/06, Girish Venkatachalam [EMAIL PROTECTED] wrote: bcoz d2i resolves to d2i_X509() , not tod2i_PrivateKey--- �� [EMAIL PROTECTED] wrote: when i use PEM_read_PrivateKey find it work error ,so i look into PEM_read_PrivateKey to find the reason. first i find in

Re: newbie in need for hints

2006-06-13 Thread Marek Marcola
Hello, The problem with this is that from what I understand stunnel still needs a certificate on the server side, so we are back to having to create/purchase/manage possibly thousands of certificates, which is entirely impractical, unless running all servers with the same certificate is

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Girish Venkatachalam
Sorry I was wrong. d2i indeed resolves to d2i_RSAPrivateKey() which takes 3 parameters and passes the first type parameter to d2i_PrivateKey() which takes 4 parameters. But it beats me why I cannot find the definition of d2i_RSAPrivateKey() anywhere. --- Rajeshwar Singh Jenwar [EMAIL PROTECTED]

pkcs7 is null

2006-06-13 Thread František Talavašek
hallo, I have problem with verify sign of mime message. Verifing of the first message is always success, but each next faild. BUF_MEM pkcs7BufMem; pkcs7BufMem.data = (char*)pbPKCS7; pkcs7BufMem.length = cbPKCS7; pkcs7BufMem.max = cbPKCS7; BIO*

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Mikhail Kruk
On Tue, 13 Jun 2006, Girish Venkatachalam wrote: Sorry I was wrong. d2i indeed resolves to d2i_RSAPrivateKey() which takes 3 parameters and passes the first type parameter to d2i_PrivateKey() which takes 4 parameters. But it beats me why I cannot find the definition of

Problem with accents in certificate...

2006-06-13 Thread Bastien Gauthier
Hi, I use OpenSSL to retrieve informations from a certificate, but when an accent is present («é», «è», ) the «openssl x509 text» return the accent in a bad encoding? Stéphan become St\xC3\xA9phanIs there a way to avoid this?Thank you, BASTIEN Gauthier Service Informatique -

Re: Problem with accents in certificate...

2006-06-13 Thread Victor Duchovni
On Tue, Jun 13, 2006 at 05:03:16PM +0200, Bastien Gauthier wrote: I use OpenSSL to retrieve informations from a certificate, but when an accent is present (? ? ?, ? ? ?, ...) the ? openssl x509 -text ? return the accent in a bad encoding ? St?phan become St\xC3\xA9phan... Is there a way

Re: Problem with accents in certificate...

2006-06-13 Thread Peter Sylvester
If your shell is using utf8 you can use -nameopt utf8 Victor Duchovni wrote: On Tue, Jun 13, 2006 at 05:03:16PM +0200, Bastien Gauthier wrote: I use OpenSSL to retrieve informations from a certificate, but when an accent is present (? ? ?, ? ? ?, ...) the ? openssl x509 -text ? return the

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Dr. Stephen Henson
On Tue, Jun 13, 2006, ?? wrote: when i use PEM_read_PrivateKey find it work error ,so i look into PEM_read_PrivateKey to find the reason. first i find in #define PEM_read_PrivateKey(fp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read( \ (char

Re: Problem with accents in certificate...

2006-06-13 Thread Dr. Stephen Henson
On Tue, Jun 13, 2006, Bastien Gauthier wrote: Hi, I use OpenSSL to retrieve informations from a certificate, but when an accent is present (« é », « è », ...) the « openssl x509 -text » return the accent in a bad encoding ? Stéphan become St\xC3\xA9phan... Is there a way

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Dr. Stephen Henson
On Tue, Jun 13, 2006, ?? wrote: when i use PEM_read_PrivateKey find it work error ,so i look into PEM_read_PrivateKey to find the reason. Printing out the error code in human readable form might help more (see FAQ) assuming you haven't done that already. Steve. -- Dr Stephen N. Henson.

valgrind warnings for 0.9.8b

2006-06-13 Thread Erik Leunissen
I've run under valgrind an application which has been linked to libcrypto.a from the openssl0.9.8b release. Valgrind reports some warnings which all relate to uninitialized values. I really do not know whether that's significant, but just in case I attach the valgrind output from that run.

What would cause a seg fault?

2006-06-13 Thread Tuc
Hi, I'm using lwp/libwww(Version 5.805) and Crypt::SSLeay (Version 0.51) with openssl (Version 0.9.8b_1). When I try to execute : lwp-request https://www.nodeworks.com it seg faults, and the backtrace shows : #0 0x2833029d in SSL_CTX_ctrl () from

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread 孙 金龙
thanks! i only want to read ec privatekey my ec privatekey is below -BEGIN EC PRIVATE KEY- MGACAQEEGAu0lmj+Fgurl8m7Tpwi4+wZk9GRSgdyjKALBgkqgRzXYwEBAgGhNAMy AQS0/wY++sZk+W3QERcmJ+5m1l+PKkaFhJelGBfWaDN4vmSZg7ltf8YtRaUVvyaS m1I= -END EC PRIVATE KEY- so i use EVP_PKEY *prikey; FILE

Re: What would cause a seg fault?

2006-06-13 Thread Kyle Hamilton
Is Crypt::SSLeay 0.51 supposed to compile against 0.9.8? The ABI changed quite a bit between 0.9.7 and 0.9.8. -Kyle H On 6/13/06, Scott Tuc Ellentuch at T-B-O-H [EMAIL PROTECTED] wrote: Hi, I'm using lwp/libwww(Version 5.805) and Crypt::SSLeay (Version 0.51) with openssl (Version

Is FIPS 140-2 Validation violated

2006-06-13 Thread Haridharan
Hi, I am running into a serious issue. I need to build OpenSSL with FIPS complaint in HP-UX - 32-bit 64-bit for both PA-RISC IPF platform. According to the Security Policy of FIPS 140-2. The configuration parameter other than the following will violate the FIPS complaint. ./config fips

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Rajeshwar Singh Jenwar
Hi Girish, Can u explain how d2i is indeed getting resolve to d2i_RSAPrivateKey() ? RSJ On 6/13/06, Girish Venkatachalam [EMAIL PROTECTED] wrote: Sorry I was wrong. d2i indeed resolves tod2i_RSAPrivateKey() which takes 3 parameters andpasses the first type parameter to d2i_PrivateKey() which