Problem Regarding of CA certification peer verification..

2008-10-07 Thread Ajeet kumar.S
Dear All; Thank you all of you for your support. When I called SSL_CTX_load_verify_locations() and SSL_CTX_set_verify() to verify the peer certificate but I got fetal error unkown certificate authority. Please let me know what is reason behind it. But I have CA certificate, client certificate and

how to run gdb in openssl

2008-10-07 Thread prashanth s joshi
Hi all, could anyone please tell me how to run the gdb in openssl? Regards, Prashanth

Fwd: how to run gdb in openssl

2008-10-07 Thread prashanth s joshi
Hi all, Could anyone please tell me how to run the gdb in openssl? In gdb I am running the command as path_of_bin/bin/openssl s_client -connect ipaddress:4433. But i get the error as: Undefined command: "". Try "help". why is it so? How do i ensure that the gdb runs correclty? Regards, Prashan

RE: how to run gdb in openssl

2008-10-07 Thread Saju Paul
gdb is a debugger. it is not clear from reading your note why you are trying to debug the openssl command line module. if what you are trying to do is understand why the client is unable to make the connection to ipaddress:4433; try using the -debug option. ex: openssl s_client -connect ipaddres

help regarding random numbers in openssl

2008-10-07 Thread prashanth s joshi
Hi all, In openssl code which part actually handles catching of the random numbers exchanged during the handshake? Regards, Prashanth..

RE: Client Certificates

2008-10-07 Thread Dave Thompson
> From: [EMAIL PROTECTED] On Behalf Of Felix Ingram > Sent: Saturday, 04 October, 2008 10:27 > 2008/10/4 Dave Thompson <[EMAIL PROTECTED]>: > > The actual failure is the alert 48 "unknown ca" from the server. > > Apparently it doesn't like the cert (or chain) s_client is sending, > > but the prot

Re: Year 2038 problem

2008-10-07 Thread Dr. Stephen Henson
To those interested in the year 2038 issues I've just added some experimental code to HEAD (which will be OpenSSL 0.9.9). This should make sensible things happen when longer expiry dates are used during certificate creation. Let me know of any issues. At some point this could be backported.

how to enable debug mode of openssl

2008-10-07 Thread 曹飞
I am using openssl in arm embedded platform. I want to support https, so it will use openssl. But I have encouterd some problem. The application aborted for some unknown reason. I tried to trace the problem and found the it aborted on call "PEM_read_bio_X509" (ssl_rsa.c). And I can't trace deep