Alternate format for subjectKeyIdentifier and authorityKeyIdentifier

2007-10-18 Thread John Zornig
A question regarding KeyIdentifiers. rfc3280 section 4.2.1.2 describes Two common methods for generating key identifiers from the public key are: (1) The keyIdentifier is composed of the 160-bit SHA-1 hash of the value of the BIT STRING subjectPublicKey (excluding the tag,

Cross-compile error

2007-10-18 Thread Jorge Fernandez
Hi, I'm using openssl-0.9.8e.tar.gz with my application under Linux. Now, i want to cross-compile my app for Windows and i must cross-compile openssl first, under mingw, but i can't. That is what i do: ./Configure mingw no-sha512 shared threads make CC=i586-mingw32msvc-gcc RANLIB=i586-mingw32msvc

Re: [openssl-users] Re: Changing the expiry date of a cert

2007-10-18 Thread Erwann ABALEA
Hodie XVI Kal. Nov. MMVII est, Jim Fox scripsit: > > This was a certificate authority certificate. As such, the renewal has to > have > the same key and DN as the original in order to continue being a CA > for previously signed certificates. You don't have to keep the same key, you just have to

Re: Segmentation fault in application creating too many threads.

2007-10-18 Thread Prabhu S
At times The following traces as well are obtained: (gdb) bt #0 MD5_Init (c=0x0) at md5_dgst.c:75 #1 0x405b2a90 in init (ctx=0x0) at m_md5.c:73 #2 0x405afc91 in EVP_DigestInit_ex (ctx=0x8e29b44, type=0x4061f560, impl=0x0) at digest.c:207 #3 0x403819f5 in ssl3_init_finished_mac (s=0x8e298c8) a

Re: Segmentation fault in application creating too many threads.

2007-10-18 Thread Prabhu S
David, The OpenSSL version that I use is openssl-0.9.8e. Your guess about methods being called is right. It appears to be stack corruption. Gayathri, I don't suspect the gdb. I checked the CTX status in HASH_INIT (SHA_CTX *c) under stress , 'c' was indeed NULL and the application immediately d