RE: Signature validation in certificates

2008-07-10 Thread Geetha_Priya
Thanks Dominique. I guess the openssl verify does these steps to actually verify if an incoming server certificate compares to a root certificate. Regards Geetha -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dominique Lohez Sent: Wednesday, July 09,

OpenSSL link problem (MacOSX 10.4 - 10.5)

2008-07-10 Thread Igor Lorents
Good day! I'm developing an application for MacOSX and want to use the OpenSSL library (latest one - 0.9.8h) in it. My application has MacOSX 10.4 as minimal target OS, but I'm developing on 10.5 (gcc 4.0) While I was compiling the OpenSSL library, I had to change the CFLAG value for

OpenSSL link problem (MacOSX 10.4 - 10.5)

2008-07-10 Thread Igor Lorents
Good day! I'm developing an application for MacOSX and want to use the OpenSSL library (latest one - 0.9.8h) in it. My application has MacOSX 10.4 as minimal target OS, but I'm developing on 10.5 (gcc 4.0) While I was compiling the OpenSSL library, I had to change the CFLAG value for

templates and cert chain validity

2008-07-10 Thread Christian Weber
Hi there, I'm just about verification of certs. Since X509v3 there are many extensions with their own types. Some of them are known to the current implementation, many aren't. To implement a validity checking which is aware of different models shell as of RFC 3280 or chain as af ISIS-MTT.

PKCS12_parse Issue?

2008-07-10 Thread Christopher Ivory
Hello all, I'm trying to run a loop to parse the same p12 multple times to take some metrics. However, after the loop completes twice succesfully, PKCS12_parse fails. Any suggestions as to why this is happening? -Chris while(count 0){ /* Parse the PKCS

Errors while building OpenSSL in Windows

2008-07-10 Thread Panthers Rock
I am trying to do a default build of OpenSSL on Windows. The compiler does not like building with ASM files and complains the following: ml /Cp /coff /c /Cx /Focrypto\sha\asm\s1_win32.obj .\crypto\sha\asm\s1_win32.asm Assembling: .\crypto\sha\asm\s1_win32.asm Microsoft (R) Macro

Re: Errors while building OpenSSL in Windows

2008-07-10 Thread Mounir IDRASSI
Hi, This error have been already reported. Check the following link : http://www.mail-archive.com/[EMAIL PROTECTED]/msg24173.html I'm not sure if my fix have been put into cvs. Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr On Thu, July 10, 2008 10:50 pm, Panthers Rock wrote: I am

BN_is_prime_fasttest_ex() goes into an infinite loop because of witness()'s return value

2008-07-10 Thread Yuliya Shulman
Hello! We've been successfully using openssl for a while on various platforms, but now have a problem with FreeBSD sparc 64. in BN_is_prime_fasttest_ex() calls witness(), which always returns 1 at the line line of the function, and that causes BN_is_prime_fasttest_ex() to go into an infinite

BN_is_prime_fasttest_ex() goes into an infinite loop because of witness()'s return value

2008-07-10 Thread Yuliya Shulman
Hello! We've been successfully using openssl for a while on various platforms, but now have a problem with FreeBSD sparc 64. in BN_is_prime_fasttest_ex() calls witness(), which always returns 1 at the line line of the function, and that causes BN_is_prime_fasttest_ex() to go into an infinite

Re: PKCS12_parse Issue?

2008-07-10 Thread Dr. Stephen Henson
On Thu, Jul 10, 2008, Christopher Ivory wrote: Hello all, I'm trying to run a loop to parse the same p12 multple times to take some metrics. However, after the loop completes twice succesfully, PKCS12_parse fails. Any suggestions as to why this is happening? -Chris

x509 bug? unable to load certificate

2008-07-10 Thread Frank J. Iannarilli
Hi, I tried using both the Win32 v0.9.8g and v0.9.8h (along with Shining Light's Visual C++ 2008 Redistributable install) binaries, to no avail. Here's the problem: openssl x509 -inform DER -in smime.p7s -text unable to load certificate 1036:error:0D0680A8:asn1 encoding

Website correction request: only subscribers can post to openssl-users

2008-07-10 Thread Frank J. Iannarilli
Hi, On the following page: http://www.openssl.org/support/ it declares that anybody can post to the openssl-users. But evidently (from my experience), that's not true; only subscribers can. Unfortunately, browsing the website doesn't unambiguously indicate whom I should notify about this.

Re: x509 bug? unable to load certificate

2008-07-10 Thread Thomas J. Hruska
Frank J. Iannarilli wrote: Hi, I tried using both the Win32 v0.9.8g and v0.9.8h (along with Shining Light's Visual C++ 2008 Redistributable install) binaries, to no avail. Here's the problem: openssl x509 -inform DER -in smime.p7s -text unable to load certificate

Regenerating a p7s file?

2008-07-10 Thread Frank J. Iannarilli
Hi, Thanks to Thomas Hruska, responding to my previous post, for straightening out my newbie understanding. Let me try to reframe my how-to question. I have an S/MIME signed_signature .p7s file, that contains certificates. From using: openssl pkcs7 -print_certs -inform DER -in