pkcs7_sign, d2i_PKCS7_bio_stream with OpenSSL 0.9.8

2007-09-12 Thread Vijayekkumaran M
Hello All, This is the first time I am posting to this forum. If I am asking this question in the wrong forum please redirect me. I am using OpenSSL 0.9.8. I need to create a detached pkcs#7 signature of some piece of data and store the signature in BER encoded format. From the man pages I

Re: pkcs7_sign, d2i_PKCS7_bio_stream with OpenSSL 0.9.8

2007-09-12 Thread Dr. Stephen Henson
On Wed, Sep 12, 2007, Vijayekkumaran M wrote: Hello All, This is the first time I am posting to this forum. If I am asking this question in the wrong forum please redirect me. I am using OpenSSL 0.9.8. I need to create a detached pkcs#7 signature of some piece of data and store the

RE: C++ compatability

2007-09-12 Thread Phillips, Justin - ACD
The error is on the header file asn1.h. I have commented out the call to HMAC so the only related code is the include which at this point looks like. extern C { #include openssl/hmac.h } Here is the error... In file included from

RE: SSL Library Error

2007-09-12 Thread Aaron Smith
Well, I recompiled AGAIN with no mention of the 0.9.8 library in any of my environment variables. The resulting httpd binary showed no links to the 0.9.8 libraries, just 0.9.7 (the system OS libraries). THIS one won't even start. I get an error of: /usr/lib/dld.sl: Unresolved symbol: __umoddi3

RE: SSL Library Error

2007-09-12 Thread Marek Marcola
Hello, Well, I recompiled AGAIN with no mention of the 0.9.8 library in any of my environment variables. The resulting httpd binary showed no links to the 0.9.8 libraries, just 0.9.7 (the system OS libraries). THIS one won't even start. I get an error of: /usr/lib/dld.sl: Unresolved

PSK?

2007-09-12 Thread Ken Peirce
Has anyone used the PSK option? Does it seem to work properly? I am looking fora sample application that uses it too. Any help is greatly appreciated. Thanks, k

Timeout error message with OpenSSL

2007-09-12 Thread Frans Verweijen
Hello, We use openssl-0.9.8e-sol10-x86-local on a Sun x86 server with Solaris 5.10 for x86 system, Apache/2.2.6 (Unix) and php-5.2.4. We get the following error messages in the error log file: [Wed Sep 12 12:24:54 2007] [info] (70007)The timeout specified has expired: SSL input filter read

RE: SSL Library Error

2007-09-12 Thread Aaron Smith
I added --with-ssl=/usr/local to the the configure options and recompiled. Although mod_ldap is still unhappy, that corrects the unresolved symbol error if I launch apache without mod_ldap. However, the result is the same problem I've been wrestling with. Piling up child processes in a

How to copy certifivate from SSL_CTX to SSL object

2007-09-12 Thread Kukosa, Tomas
Hi, is there any reasonable way how to copy certificate (and private key) from SSL_CTX to SSL object if certificate in SSL_CTX is changed? I would like to call something like: SSL_use_certificate(ssl, SSL_get_certificate(ctx)); SSL_use_RSAPrivateKey(ssl, SSL_get_key(ctx)); but I can not find

RE: C++ compatibility

2007-09-12 Thread Phillips, Justin - ACD
It turns out the lines that are causing problems (see below) were inserted by a patch from Montavista for compatibility with gcc 4.2. I was using an older version of gcc so the solution is to not install the patch when building the rpm's. I guess this was more of a montavista issue than an

RE: C++ compatability

2007-09-12 Thread Saju Paul
first: the extern C around the hmac.h is not necessary. get rid of it. second: the errors are make no sense at all; these header files you are referencing are Unix/Linux files are they not ? meaning they are not files built in a Windows environment (i hope not) third: a rebuild of openssl is

RE: C++ compatibility

2007-09-12 Thread Saju Paul
sorry ignore my latest post. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Phillips, Justin - ACD Sent: Wednesday, September 12, 2007 11:17 AM To: openssl-users@openssl.org Subject: RE: C++ compatibility It turns out the lines that are causing problems

RE: SSL Library Error

2007-09-12 Thread Marek Marcola
Hello, I've missed that this is on hpux11. Very important is what version you have: hpux1100, hpux, hpux1123ia, hpux1123pa, hpux1131ia or hpux1131pa ? I added --with-ssl=/usr/local to the the configure options and recompiled. Although mod_ldap is still unhappy, that corrects the

RE: SSL Library Error

2007-09-12 Thread Aaron Smith
The system is 11.11. I'm *pretty* sure everything has been compiled with gcc. I'm compiling apache with gcc, but OpenLDAP and Openssl might have been compiled with something different. The apache install that works was definitely also compiled with gcc and uses the same install of OpenSSL and

RE: SSL Library Error

2007-09-12 Thread Marek Marcola
Hello, The system is 11.11. I'm *pretty* sure everything has been compiled with gcc. I'm compiling apache with gcc, but OpenLDAP and Openssl might have been compiled with something different. The apache install that works was definitely also compiled with gcc and uses the same install of

RE: How to copy certifivate from SSL_CTX to SSL object

2007-09-12 Thread David Schwartz
is there any reasonable way how to copy certificate (and private key) from SSL_CTX to SSL object if certificate in SSL_CTX is changed? Are you asking if you can change the key and certificate being used by a session that's already in progress? DS

TLS PSK

2007-09-12 Thread Ken Peirce
Does the latest release include the TLS PSK option? If I look here: www.openssl.org/docs/ssl/ssl.html#DESCRIPTION I see that PSK is supposed to be in the latest release. Is this not the case? Thx K.

IPv6 support?

2007-09-12 Thread lemons_terry
Hi Does OpenSSL support IPv6? Thanks tl Terry Lemons Backup Platforms Group EMC² where information lives 4400 Computer Drive, MS D239 Westboro MA 01580 Phone: 508 898 7312 Email: [EMAIL PROTECTED] __ OpenSSL Project

BIO select problem

2007-09-12 Thread Jim Marshall
I have setup my BIO to be non-blocking in my server. In my server I want to use 'select' to detect when there is a connection available, but for some reason it is not working. either select returns '-1' with errno set to EINTR or select returns 0, but it has not waited for 2 seconds for a

Re: BIO select problem

2007-09-12 Thread Dr. Stephen Henson
On Wed, Sep 12, 2007, Jim Marshall wrote: I have setup my BIO to be non-blocking in my server. In my server I want to use 'select' to detect when there is a connection available, but for some reason it is not working. either select returns '-1' with errno set to EINTR or select returns 0,

Re: BIO select problem

2007-09-12 Thread Jim Marshall
Dr. Stephen Henson wrote: On Wed, Sep 12, 2007, Jim Marshall wrote: I have setup my BIO to be non-blocking in my server. In my server I want to use 'select' to detect when there is a connection available, but for some reason it is not working. either select returns '-1' with errno set to

Re: IPv6 support?

2007-09-12 Thread Victor Duchovni
On Thu, Sep 13, 2007 at 12:01:58AM -0400, Victor Duchovni wrote: On Wed, Sep 12, 2007 at 05:28:01PM -0400, [EMAIL PROTECTED] wrote: Does OpenSSL support IPv6? Not really much excuse for asking, the answer is right there on the main documentation page:

Re: IPv6 support?

2007-09-12 Thread Victor Duchovni
On Wed, Sep 12, 2007 at 05:28:01PM -0400, [EMAIL PROTECTED] wrote: Does OpenSSL support IPv6? Not really much excuse for asking, the answer is right there on the main documentation page: http://www.postfix.org/documentation.html - http://www.postfix.org/IPV6_README.html --

Re: IPv6 support?

2007-09-12 Thread Rodney Thayer
Victor Duchovni wrote: On Thu, Sep 13, 2007 at 12:01:58AM -0400, Victor Duchovni wrote: On Wed, Sep 12, 2007 at 05:28:01PM -0400, [EMAIL PROTECTED] wrote: Does OpenSSL support IPv6? Not really much excuse for asking, the answer is right there on the main documentation page:

Re: IPv6 support?

2007-09-12 Thread Rodney Thayer
Victor Duchovni wrote: On Wed, Sep 12, 2007 at 05:28:01PM -0400, [EMAIL PROTECTED] wrote: Does OpenSSL support IPv6? Not really much excuse for asking, the answer is right there on the main documentation page: http://www.postfix.org/documentation.html -