Re: Question for you all

Ok, since I got no replies, I will now ask "how" to do what I believe is required to make this happen. Basicly I have the follow steps to do. Strip the already PKCS7 signature from the firmware Create a PKCS7 signature of my own of the firmware (this is the easy part) Inject the signature I crea

PKCS12 question

Hi,   Is it possible to have only the certificate in  PKCS12 file.   I do not want to include my private key . I just want my certificate in PKCS12 format. If so Can anyone tell me the command to convert the certificate into PKCS12   Thanks in advance, Babu

Re: Multithreading problem

> > This won't work for a variety of reasons. One is that an SSL_write may fail > because of a negotiation in progress and being able to *read* data from the > socket may allow the write to progress. > Even in my dreams I didn't imagined that you have try to compile it. Of course it won't work

Re: man pages of PKCS12

I found a source code in the openssl examples. But I still don't know how to test the type of the file (X.509 or PKCS#12). Is there a mean to do so? regards Alexis Alexis Lefort a écrit : I have now several other questions: - does PKCS#12 files always have the ".p12" extension in their fi

Re: SSL Client authendication

Hi Bernhard,   Thanks for your response. Thanks for your response.We have already purchased the certificate. But we do not have have private key with us. because we have submitted the csr request from CA's website. My client is not Browser. It is JAVA application. Now, Can I use this certificate w

Re: man pages of PKCS12

On Tue, Oct 31, 2006, Alexis Lefort wrote: > I found a source code in the openssl examples. > But I still don't know how to test the type of the file (X.509 or > PKCS#12). Is there a mean to do so? Don't post in HTML. Easiest option is to call d2i_PKCS12() and friends and see if you get an error

Re: SSL Client authendication

Hello, > My client is not Browser. It is JAVA application. Now, Can I use this > certificate with my JAVA clients with out private key? will client > authendication work without private key? SSL client authentication requires client private key AND certificate. When server requires client authentic

RE: Multithreading problem

> You are doing everything except trying to understand that your > knowlage about something has changed comes from windows, and > windows notifies you about it in special cases. It is possible > that something will change and windows won't notify you. You have > to know about it before you blo

RE: Multithreading problem

> Windows sends FD_WRITE event if writing is possible and previous > invokation of 'send' has failed with WSAEWOULDBLOCK code (only > this code, if it has failed from other reason, FD_WRITE will not > be send and waiting for it will cause deadlock)... Let me try one more time: 1) The code cha

Error accepting connections

  Hello All:   I have a SSL Server application . In a test scenario  20 clients try connecting to the server simultaneously. In most of the test run atleast one connection fails. The server logs the following message for the failed connection:   ** server.c:809 Error accepting SSL connection

Re: SSL Client authendication

Eshwaramoorthy Babu wrote: Hi Bernhard, Thanks for your response. Thanks for your response. We have already purchased the certificate. But we do not have have private key with us. because we have submitted the csr request from CA's website. My client is not Browser. It is JAVA application

RE: SSL Client authendication

> We have already purchased the certificate. > But we do not have have private key with us. > because we have submitted the csr request from > CA's website. > My client is not Browser. It is JAVA application. > Now, Can I use this certificate with my JAVA clients > with out private key? will clien

Re: SSL Client authendication

On Tue, Oct 31, 2006 at 09:20:53PM +0100, Bernhard Froehlich wrote: > >My client is not Browser. It is JAVA application. Now, Can I use this > >certificate with my JAVA clients with out private key? will client > >authendication work without private key? > > > >-Babu > As Marek already said, a p

Re: Error accepting connections

Hello, > I have a SSL Server application .. In a test scenario 20 clients try > connecting to the server simultaneously. In most of the test run > atleast one connection fails. The server logs the following message > for the failed connection: > > ** server.c:809 Error accepting SSL connection >

RE: Error accepting connections

prabhu:   we saw similiar problem (i.e. bad record mac) when i have an ssl client (java implementation, talking tlsv1) try to connect to an ssl server (openssl, talking sslv3 only). we solved the problem by changing "sslv3_server_method" to "sslv23_server_method". i do not know why, but this

Re: CRLDistributionPoints

Dr. Stephen Henson wrote: > On Sun, Oct 29, 2006, Karsten Ohme wrote: > > >>Hello, >> >>The example from: >> >>http://www.openssl.org/docs/apps/x509v3_config.html >> > > > Those docs are for 0.9.9-dev check the docs with your distribution. OK, works better. Almost. But I want to add an base D

Re: PKCS12 question

Hi   A PKCS#12 file will have to contain the private key,you cannot have only the certificate in PKCS#12 format.   regards krish  On 10/31/06, Eshwaramoorthy Babu <[EMAIL PROTECTED]> wrote: Hi,   Is it possible to have only the certificate in  PKCS12 file.   I do not want to include my private key