Build static openssl

2008-10-13 Thread Prathima Dandapani -X (pdandapa - HCL at Cisco)
Hello All, Can anyone tell me how to create statically linked openssl? I have used no-shared option to Configure script,but invain. Please share your suggestions. Thanks, Prathima.

Re: how to enable debug mode of openssl

2008-10-13 Thread joshi chandran
Is this bug memory leak with mod_ssl and zlib compression (CVE-2008-1678) is resolved in openssl 0.9.8h Please help Thanks Joshi On Thu, Oct 9, 2008 at 4:09 PM, Kyle Hamilton [EMAIL PROTECTED] wrote: You would probably need a FIPS_mode_set(1) somewhere after the openssl library

RE: RE: RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-13 Thread Ray Casterline
The calls you suggest already are in the rand_win.c file. i.e. we would be double dipping if we added another set of calls. Basically, the problem is that with out Workstation Services running on a WinNT 4.0 box, we lose out on entropy. Which, when it comes time to check for ok we end up with

Re: Microsoft Visual C++

2008-10-13 Thread Dan_Mitton
Mike, I believe you also need to add the libraries to your link statement configuration. Dan Please respond to openssl-users@openssl.org Sent by:[EMAIL PROTECTED] To: openssl-users@openssl.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Microsoft Visual C++ LSN: Not

RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-13 Thread Ray Casterline
The calls you suggest already are in the rand_win.c file. i.e. we would be double dipping if we added another set of calls. Basically, the problem is that with out Workstation Services running on a WinNT 4.0 box, we lose out on entropy. Which, when it comes time to check for ok we end up

Re: Microsoft Visual C++

2008-10-13 Thread Michael Luich
On Fri, Oct 10, 2008 at 9:25 PM, Thomas J. Hruska [EMAIL PROTECTED] wrote: Michael Luich wrote: Hello, I'm trying to compile in Microsoft Visual C++ Express and I'm getting linker errors like: error LNK2019: unresolved external symbol _BIO_gets referenced in function char * __cdecl

Put certificate on hold

2008-10-13 Thread Martin Schneider
Dear all, I'm new to openssl and I've got a question about putting a certificate on hold. Maybe someone can please confirm or correct my thoughts please? As far as I understand things, you can either revoke a cert (which is not reversible) and you can put a cert on hold. Holding a cert is a

Re: [openssl-users] Put certificate on hold

2008-10-13 Thread Erwann ABALEA
Hello Martin, Hodie III Id. Oct. MMVIII est, Martin Schneider scripsit: As far as I understand things, you can either revoke a cert (which is not reversible) and you can put a cert on hold. Right. Holding a cert is a reversible process; meaning you can un-hold the cert and use the SAME cert

Getting the peer certificate encoding

2008-10-13 Thread Aravinda babu
Hi All, I am new to OpenSSL.We have one application which will verify the peer certificate. Problem is our application will verify only DER format certificates. So if i get the peer certificate in PEM format , i will convert that into DER and i will verify the peer certificate. Is there any

Re: how to enable debug mode of openssl

2008-10-13 Thread joshi chandran
Is there any patches to resolve the bug memory leak with mod_ssl and zlib compression (CVE-2008-1678) . Please help Thanks Joshi 2008/10/13 joshi chandran [EMAIL PROTECTED] Is this bug memory leak with mod_ssl and zlib compression (CVE-2008-1678) is resolved in openssl 0.9.8h Please help

Re: Dynamic loading openSSL BIO_ functions - compilation error

2008-10-13 Thread Tim Hudson
Raymond Zhou wrote: Hi there, I was trying to load a function from openSSL libeay32.dll using LoadLibrary and GetProcAddress, the function is the following: BIO* BIO_new_fp(File*, int). You'll need to at least change File* to FILE * - C is case sensitive. Tim.

OpenSSL for Win CE

2008-10-13 Thread Jonas Wetz
Hi, I need to use openssl for Windows CE (5.0) on an ARM platform. To save some time, I would be interested if there are also precompiled DLLs available for Windows CE as I couldn't find them anywhere? Regards, Jonas

RE: creating public RSA key and verifying signature

2008-10-13 Thread David Schwartz
btw, when i try to get the error code by printf(Error code: %d, ERR_get_error()); i get Error code: 67567722 Your code says: result = RSA_public_decrypt(pValidationData.ulValidationDataLength, pValidationData.rgbValidationData, outputPlaintext, publicKey,

RE: [FWD] DNS Error while doing SSL handshake - bad gethostbyaddr

2008-10-13 Thread Byju Joy
Thank you Dave and Lutz. Good to know that I can ignore the error message bad gethostbyaddr. Real problem is that Client hello B is not coming through. Yes, there is a firewall in between client and server. Since the SSL client was able to send in a few bytes (cient hello A?) successfully,

Runtime error if dynamically loading SSL_library_init()

2008-10-13 Thread Raymond Zhou
Hello there,   Need your help again.   I am developing an application in which I use openSSL for https support. My application load openSSL function dynamically (using LoadLibrary(ssleay32.dll) for example). It calls a lot of functions starting with SSL_ and BIO_.   What I noticed that I can

Re: Runtime error if dynamically loading SSL_library_init()

2008-10-13 Thread Raymond Zhou
Just to add to my earlier message, the error message I was getting is Access violation.   Thanks! --- On Tue, 10/14/08, Raymond Zhou [EMAIL PROTECTED] wrote: From: Raymond Zhou [EMAIL PROTECTED] Subject: Runtime error if dynamically loading SSL_library_init() To: openssl-users@openssl.org Date:

RE: Getting the peer certificate encoding

2008-10-13 Thread David Schwartz
Aravinda Babu wrote: Problem is our application will verify only DER format certificates. So if i get the peer certificate in PEM format , i will convert that into DER and i will verify the peer certificate. Is there any openSSL API which will tell me a'out the peer certificate encoding ?

Re: Getting the peer certificate encoding

2008-10-13 Thread Victor Duchovni
On Mon, Oct 13, 2008 at 09:35:03PM -0700, David Schwartz wrote: Aravinda Babu wrote: Problem is our application will verify only DER format certificates. What protocol exchange is secured by the certificate (private/public key pair, with the public key encased in a CA certificate)? In