SSL Verify Peer

Hi All, I have doubt on ssl verify peer option. I am always getting following error even though I have given correct self signed certificate in the CA_INFO option and enabled peer option. * SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL

Issues during Decryption

Hi Users I am using openssl in my Application. It works on 32 bit Linux environment. Now I am porting my application to 64 Bit on HP-UX. I compiled the library with aCC -c +O2 -g +DD64 +Z -D_HPUX_SOURCE -DRW_MULTI_THREAD -D_REENTRANT flags. The shared library got successfully created and the

Getting the peer certificate chain

Hi all, How to get the peer certificate chain during SSL connection establishment ? Any example program is greatly appreciated. Thanks in advance, Cheers, Aravind.

RE: libcrypto.so.0.9.8 (UNCLASSIFIED)

Classification: UNCLASSIFIED Caveats: NONE Viktor, thanks, but I don't know what you mean by: I got in the lib directory of the install tree: lib/engines/libatalla.so lib/engines/libaep.so lib/engines/lib4758cca.so lib/engines/libsureware.so lib/engines/libgmp.so

how to get client certificate on server-side?

Hi, Here, I have a question. How can I get the certificate of the client on server-side?. With the client certificate, I can get detailed information about the client, for example, the subject of the client, based on which I can conduct further authorization. Thanks in advance. Looking

RE: libcrypto.so.0.9.8 (UNCLASSIFIED)

Classification: UNCLASSIFIED Caveats: NONE Victor, your initial assessment seems to be correct. I ask a coworker for some help since I am a newbie to the whole process of building software from source using: configure, make, make test, make install. He had me do a make clean in the source

Re: libcrypto.so.0.9.8 (UNCLASSIFIED)

On Thu, Oct 16, 2008 at 11:26:20AM -0400, French, Warron S CTR DISA NS wrote: Classification: UNCLASSIFIED Caveats: NONE Viktor, thanks, but I don't know what you mean by: I got in the lib directory of the install tree: lib/engines/libatalla.so lib/engines/libaep.so

how to fix bugs in openssl?

Could I commit my patch to openssl source code to fix bug that I found? __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated

Re: openssl on Sun solaris failed

Responding to openssl-users which is the place for this sort of discussion, the openssl-dev list is for development of openssl itself (rather than using openssl or developing external code that uses it). It appears your system (or your PATH) doesn't include the make binary. Compiling source

Getting the peer certificate in a memory buffer

Hi all, How to get the peer certificate in a memory buffer during SSL connection establishment ? Is there any API for this ? Thanks in advance, Waiting for your reply, Aravind.

Re: how to fix bugs in openssl?

On Thursday 16 October 2008 12:32:01 Евгений wrote: Could I commit my patch to openssl source code to fix bug that I found? No, but you're welcome to post details of the bug plus any fixes you have to propose. There is also a request tracker where you could describe the bug and your patch

how do I determine blocking or nonblocking?

Hi, I have an application which exhibits both blocking and non-blocking behavior. I create an SSL structure using SSL_new and a context. I call SSL_set_fd with a file descriptor for a blocking socket and the SSL pointer. Documentation tells me that the SSL pointer should inherit the blocking

Known bug list?

Hello, I see a fixed bugs list. Do you have any database of known but unfixed bugs which I could browse? -- thanks Solveig Viste

Re: Known bug list?

Here you go: http://rt.openssl.org/NoAuth/Buglist.html But I have another question. I would like to go deeper in OpenSSL as topic is interesting for me. I think the best would be to learn by doing. I would like to pick up one bug and try to fix it. The question is - should I inform somebod which

fips 1.2 build on windows VC 9

Hi, Have some doubts on fips build on windows VC9. I followed the userguide for 1.2. 1) Downloaded the openssl-fips-test-1.2.0.tar.gz    * perl Configure no-asm VC-WIN32    * ms\do_fips 2) Downloaded the openssl-0.9.8-fips-test-SNAP-YYMMDD.tar.gz    *perl Configure VC-WIN32 no-asm

Re: fips 1.2 build on windows VC 9

On Thu, Oct 16, 2008, Justin A wrote: My Question is:- 1) I remember when I previously build openssl I used to end up getting libcrypto.lib and libssl.a. Now its ssleay32.lib and libeayfips32.lib instead of libssl.a and libcrypto.a respectively. I ran the dumpbin on these two libraries

Re: fips 1.2 build on windows VC 9

Steve: Thanks for your response.! 1) Will there be an issue if we change the names from ssleay32.lib - ssl.lib and libeayfips32.lib - crypto.lib . I remember reading on some forms that changing the names of the library which are generated by  fips build does cause issue. Is this true..? 2)

Re: fips 1.2 build on windows VC 9

On Thu, Oct 16, 2008, Justin A wrote: Steve: Thanks for your response.! 1) Will there be an issue if we change the names from ssleay32.lib - ssl.lib and libeayfips32.lib - crypto.lib . I remember reading on some forms that changing the names of the library which are generated by  fips

RE: how do I determine blocking or nonblocking?

Documentation tells me that the SSL pointer should inherit the blocking property from the socket passed to SSL_set_fd. Right. However, when I call SSL_shutdown with the SSL handle, the return code I get is not an error or a shutdown completed but a shutdown in progress (return code= 0).