Re: Reliable identification by DN (or something else) for commercially-signed certs?

2011-06-28 Thread Andrey Kulikov
On 26 June 2011 22:39, Leo Richard Comerford wrote: > Hello. > > CA? - viz. the cross-signing "spaghetti of doubt" and so on. If the > answer is 'no' - if DN (or DN alone) won't guarantee uniqueness under > those circumstances - is there some other field, or combination of > fields, which would

How much memory leaks for BIO, SSL and SSL_CTX

2011-06-28 Thread Harshvir Sidhu
Hi, Its a very vague question, it will be great if someone can answer? How much memory leak per connection if we do not free BIO, SSL and SSL_CTX. Thanks. // Harshvir

RE: Problems with certificates validity dates

2011-06-28 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Eric Viseur > Sent: Tuesday, 28 June, 2011 11:11 > I'm currently setting up a small PKI using Bash scripts calling > OpenSSL and Apache. However, whatever days of validity I put on the > command line, it remains to it's defa

Problems with certificates validity dates

2011-06-28 Thread Eric Viseur
Hi list, I'm currently setting up a small PKI using Bash scripts calling OpenSSL and Apache. However, whatever days of validity I put on the command line, it remains to it's default, 365 days. - On the CSR generation side, i'm using the following command : $openssl req -config $dossier

strange Problem with Bio_do_connect

2011-06-28 Thread Michael Biener
Hello Everybody, i have very strange problem. I'am trying to write a FTP Client for using with FTPES. so here are the steps i perform 1) Connect to the FTP Server with unsecured BIO on port 21, works fine. 2) Sending AUHT TLS and perform SLL_Connect Get a new BIO and aply the SSL to the BIO wit