Re: How to load CA content in context ??

2007-04-24 Thread Jean Francois HUYNH
Thank you very much for this fast answer ;) jf Dr. Stephen Henson a écrit : On Tue, Apr 24, 2007, [EMAIL PROTECTED] wrote: I try to build a SSL server which performs client authentication. But I cannot use SSL_CTX_load_verify_locations which has a CA file as parameter. (CA file is not loc

Re: Multithreaded application crash

2007-04-24 Thread brajesh tiwari
Hi darry: Thank you very much for your reply. I was looking for some help to resolve the crash issue. I have copied the callback from mttest.c file as below: static pthread_mutex_t *lock_cs; static long *lock_count; void thread_setup(void) { int i; lock_cs=OPENSSL_mallo

Re: Which PGP product for fips validation of the download?

2007-04-24 Thread Kyle Hamilton
The FIPS version of OpenSSL has an external verification mechanism which does not require a PGP signature verification. In the Security Policy, there are keyed HMACs for the source files which go into fipscanister.o. A file inside the distribution mirrors this. During the build process, an HMAC

Clean SSL Error queue

2007-04-24 Thread Dinh, Thao V CIV NSWCDD, K72
Hi all What functions use to clean up SSl Error Queue in Multithread Applications ?? Thank You TD

Which PGP product for fips validation of the download?

2007-04-24 Thread Lee Merrill
Hi everyone,     I expect this has been asked before, but which PGP product is appropriate for the FIPS validation of the FIPS ssl archive (openssl-fips-1.1.1.tar.gz) via the openssl-fips-1.1.1.tar.gz.asc file? I verified it with gpg, per the FIPS instructions ("gpg --verify *.asc *.gz"), but

Re: How to load CA content in context ??

2007-04-24 Thread Dr. Stephen Henson
On Tue, Apr 24, 2007, [EMAIL PROTECTED] wrote: > > I try to build a SSL server which performs client authentication. > But I cannot use SSL_CTX_load_verify_locations which has a CA file as > parameter. > (CA file is not located in the same machine) > Nevertheless, I succeeded having in my server

Extract extension from certificate

2007-04-24 Thread Metalpalo
Hello everbody I have two questions. First: I created certificate with extension a I need to extract these extension(for example) from certificate. Does exist something similar as extracting of the serial number by command: "openssl.exe x509 -in %CERT_SUB_HE% -serial -noout ". Second: I need

How to load CA content in context ??

2007-04-24 Thread jfhuynh
I try to build a SSL server which performs client authentication. But I cannot use SSL_CTX_load_verify_locations which has a CA file as parameter. (CA file is not located in the same machine) Nevertheless, I succeeded having in my server the content of CA file in a buffer through API like PEM_read

Re: openssl pkcs12 don't want to prompt password

2007-04-24 Thread Dr. Stephen Henson
On Mon, Apr 23, 2007, Janet N wrote: > Hi, > > I'm using openssl pkcs12 to export the usercert and userkey PEM files out of > pkcs12. I don't want the openssl pkcs12 to prompt the user for the import > and pem pass phrase. What are the password flags to be used? > > I got an invalid password w

Re: Multithreaded application crash

2007-04-24 Thread Marek Marcola
Hello, > >0 0x3ff805c1ac8 in __nxm_thread_kill(...) > in /usr/shlib/libpthread.so > #1 0x3ff805ba120 in pthread_kill(...) in /usr/shlib/libpthread.so > #2 0x3ff805c62a8 in UnknownProcedure2FromFile100(...) > in /usr/shlib/libpthread.so > #3 0x3ff80633994 in UnknownProcedure16FromFile0(...) > i

Re: openssl pkcs12 don't want to prompt password

2007-04-24 Thread ViSolve Security Consulting Group
Hello Janet, -bash-3.1$ openssl pkcs12 -in janet.p12 -nocerts -out userkey.pem -passin test123 Invalid password argument "test123" Error getting passwords The value for the parameter -passin should be test123:test123 Regards, ViSolve Security Consulting Group. http://www.visolve.com/securi

Re: Multithreaded application crash

2007-04-24 Thread Darryl Miles
brajesh tiwari wrote: Can some one please tell me what may be the problem here. Thank you very much. I think the problem may be a bug in your program. HTH PS - How do you seriously expect help in debugging your program from a mailing list. Yes, it is valid for your application code to cal