how to create cert file for windowxp sp3

2009-04-13 Thread shawnlau
Hi all! I have a question that makes me feel so confuse. I have updated OPENSSL.rpm to openssl-0.9.8e-7.el5, and have a little modify to openssl.cnf and CA scripts! The change like below: The OPENSSL.cnf: dir= ./demoCA # Where everything is kept

test

2009-04-13 Thread Chuck Aaron
__ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org

openssl-0.9.8k.tar.gz

2009-04-13 Thread Chuck Aaron
I have saved this file off the openssl site to my documents. I am trying to copy the *.gz file with secure fx from my documents and the Alpha server using vms 8.3 and it will not allow me to transfer the file. Any ideas on how I get it there to unzip it? Thanks, Chuck

Re: (DTLS) Nexuiz needs information on the open-ssl UDP stuff.

2009-04-13 Thread Wes Hardaker
On Sat, 11 Apr 2009 22:49:46 -0700 (PDT), Miguel Ghobangieno mikee...@yahoo.com said: MG They're all multi-treaded. How to do it in a single threaded app MG with multiple users? Here's another documented example of a working hack:

X509_get_serialNumber

2009-04-13 Thread sarym binome
hi all i want to extract the the serial number or the subject name from an X509 certificate i used X509_get_serialNumber but i don't know how can i use it , i can't print it cause it's a struct this is my certificate Certificate: Data: Version: 1 (0x0) Serial Number: 3 (0x3)

OCSP stapling

2009-04-13 Thread Rene Hollan
What, if any, support is there in openssl to support OCSP stapling? I have code that does an OCSP check for received certs, but obviously want to play nice and make use of any stapled OCSP response first,

Re: CMS Structure Access

2009-04-13 Thread Gary Kennedy
Dr. Stephen Henson wrote: On Wed, Apr 08, 2009, Gary Kennedy wrote: Specifically, I'm after the version digestAlgorithms fields of the signed-data CMS structure, (read-only at this stage). How may I go about accessing these fields without 'illegally' including the cms_lcl.h header? You

Re: OCSP stapling

2009-04-13 Thread Dr. Stephen Henson
On Mon, Apr 13, 2009, Rene Hollan wrote: What, if any, support is there in openssl to support OCSP stapling? I have code that does an OCSP check for received certs, but obviously want to play nice and make use of any stapled OCSP response first, It is supported in the latest versions of

Re: Resource temporarily unavailable error with SSL_connect

2009-04-13 Thread Dan Maartens
Thanks for your response Dave. With -state and -msg enabled, it seems to be hanging after SSL_accept:SSLv3 flush data. When I abort the client at this point (as it will retry forever with no success), I get: failed in SSLv3 read client certificate A. Given the stupefying nature of this problem,

Re: Query on OpenSSL for Certificate verification

2009-04-13 Thread Kyle Hamilton
Then don't return from the original SSL_CTX_set_verify callback until you either: a) receive a valid OCSP response that says it's okay, b) receive a valid OCSP response that says it's not okay, c) receive an invalid OCSP response (i.e., OCSP failure), or d) time out. You're perilously close to a

Re: openssl-0.9.8k.tar.gz

2009-04-13 Thread Kyle Hamilton
This is entirely site-specific, and nobody here has any idea what you're talking about. Try talking to your Purdue University helpdesk. -Kyle H On Mon, Apr 13, 2009 at 6:40 AM, Chuck Aaron caa...@ceris.purdue.edu wrote: I have saved this file off the openssl site to my documents. I am trying

openssl smime problem: the output of smime -decrypt is not the same to the original one

2009-04-13 Thread xh
Hi everyone, I find the output of the openssl smime -decrypt is not the same with the original one. My OS is Fedora 10 and the openssl version is 0.9.8g. I use the following command to get the encrypt version of the file a.txt # openssl smime -encrypt -in a.txt -out b.txt mycert.pem and try