RE: possibly a problem with location of certificates problem

2007-08-03 Thread David Schwartz
command: openssl s_client -connect server.name.ac.uk:636 -verify 5 result: Verify return code: 19 (self signed certificate in certificate chain) command: openssl s_client -connectserver.name.ac.uk:636 -verify 5 -CApath /etc/pki/tls/certs result: Verify return code: 0 (ok) Obviously that

possibly a problem with location of certificates problem

2007-08-03 Thread Silvester Leigh
Have just installed Fedora Core 7. Thought I had not included openssl as intended to download from openssl.org. Anyways, downloaded 0.9.8e and did configure/make. (One of problems MAY be that I have multiple installs) Downloaded and hashed globalsign certificates into well that is where the

What my SSL_CTX_get_timeout() does not work?

2007-08-03 Thread Ian jonhson
Hi, I wrote a function to fetch the lifetime (expire time) of a certificate. But it seems not to work right. The codes are as follows: codes to fetch lifetime - ... meth = SSLv3_method(); /* Create a SSL_CTX structure */ ctx =

Re: What my SSL_CTX_get_timeout() does not work?

2007-08-03 Thread jimmy bahuleyan
Hi, Ian jonhson wrote: Hi, I wrote a function to fetch the lifetime (expire time) of a certificate. But it seems not to work right. I think you've misunderstood what SSL_CTX_get_timeout() does. This timeout is the SSL session timeout which lets you decide how long an SSL session can stay

Windows build of FIPS 1.1.1 is not thread-safe

2007-08-03 Thread John Firebaugh
Following the Windows build instructions in the OpenSSL FIPS Users Guide (using MinGW and MSYS) results in OpenSSL libraries that may crash if used in a multithreaded program. The problem is due to the definition of MS_STATIC in e_os.h: #if defined(OPENSSL_SYS_MSDOS)

Re: What my SSL_CTX_get_timeout() does not work?

2007-08-03 Thread Ian jonhson
Thank you for your answering. I think you've misunderstood what SSL_CTX_get_timeout() does. This timeout is the SSL session timeout which lets you decide how long an SSL session can stay in cache before it becomes non-resumable. The openssl manual pages have sufficient info. According to

Re: What my SSL_CTX_get_timeout() does not work?

2007-08-03 Thread jimmy bahuleyan
Ian jonhson wrote: Thank you for your answering. I think you've misunderstood what SSL_CTX_get_timeout() does. This timeout is the SSL session timeout which lets you decide how long an SSL session can stay in cache before it becomes non-resumable. The openssl manual pages have sufficient