smime verify bug???

2011-07-19 Thread Mailing List SVR
Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the one attached, attached is also the binary cert from which I extracted the pem, I have the following: openssl smime -verify -in sod.pem -inform pem -noverify > sod.data Verif

RE: Trying to Link Statically to Libcrypto

2011-07-19 Thread Jeremy Farrell
From: brandon...@aol.com Actually, I was advised to put libssl after libcrypto. I don't recall being told to put libssl after libldap. Also, knowing that order matters is of little use if you don't grasp what the order should be. You were told the right order a few

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread brandonshw
Thanks again. -Original Message- From: Michael S. Zick To: openssl-users Sent: Tue, Jul 19, 2011 2:03 pm Subject: Re: Trying to Link Statically to Libcrypto On Sun July 17 2011, brandon...@aol.com wrote: Although I've been programming on various platforms for quite awhile, I don

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread brandonshw
Thanks. I had eventually succeeded by fixing my list of object files. -Original Message- From: Albrecht Schlosser To: openssl-users Sent: Tue, Jul 19, 2011 12:24 pm Subject: Re: Trying to Link Statically to Libcrypto On 19.07.2011 16:49, brandon...@aol.com wrote: *Okay, it is

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread Michael S. Zick
On Sun July 17 2011, brandon...@aol.com wrote: > > Although I've been programming on various platforms for quite awhile, I don't > know much about the principles involved here - i.e. Linux or static vs > dynamix linking. You are right, it is linking to libldap. > When in doubt, ask Google: h

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread Albrecht Schlosser
On 19.07.2011 16:49, brandon...@aol.com wrote: *Okay, it is acting like my /usr/lib/libssl.a is of no value. First, just for comparison, attempting to link with no reference to libssl at all:* Today at 14:23 you wrote "Thanks for the lesson. Highly informative.", but now you're still doing

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread Michael S. Zick
On Tue July 19 2011, brandon...@aol.com wrote: > > Okay, it is acting like my /usr/lib/libssl.a is of no value. First, just for > comparison, attempting to link with no reference to libssl at all: > > [root@linux Release]# g++ -o"" > /usr/lib/libcrypto.a /usr/lib/libldap.a /usr/lib/libxml2.

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread brandonshw
Okay, it is acting like my /usr/lib/libssl.a is of no value. First, just for comparison, attempting to link with no reference to libssl at all: [root@linux Release]# g++ -o"" /usr/lib/libcrypto.a /usr/lib/libldap.a /usr/lib/libxml2.a /usr/lib/liblber.a -lz -ldl -lm -lsasl2 2>&1 /usr/lib/li

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread Michael S. Zick
On Tue July 19 2011, Albrecht Schlosser wrote: > On 19.07.2011 13:30, Michael S. Zick wrote: > > But a quicker answer to just a symbol or a few: use the toolchain. > > ... > > > Now enter: > > nm /usr/lib/libldap.a > > be rewarded with a listing 1,830 lines long of the symbols defined > > and t

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread brandonshw
Thanks for the lesson. Highly informative. -Original Message- From: Michael S. Zick To: openssl-users Sent: Tue, Jul 19, 2011 7:30 am Subject: Re: Trying to Link Statically to Libcrypto On Tue July 19 2011, Albrecht Schlosser wrote: On 19.07.2011 07:20, brandon...@aol.com w

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread Albrecht Schlosser
On 19.07.2011 13:30, Michael S. Zick wrote: But a quicker answer to just a symbol or a few: use the toolchain. ... Now enter: nm /usr/lib/libldap.a be rewarded with a listing 1,830 lines long of the symbols defined and the external symbols referenced. Of course, entering: nm --help will giv

Re: ECDSA public key token to/from binary

2011-07-19 Thread Kenneth Goldman
owner-openssl-us...@openssl.org wrote on 07/18/2011 09:49:33 AM: > From: Billy Brumley > To: openssl-users@openssl.org > Date: 07/18/2011 10:00 AM > Subject: Re: ECDSA public key token to/from binary > Sent by: owner-openssl-us...@openssl.org > > Dear Ken, > > One way to accomplish this is some

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread Michael S. Zick
On Tue July 19 2011, Albrecht Schlosser wrote: > On 19.07.2011 07:20, brandon...@aol.com wrote: > > Actually, I was advised to put libssl after libcrypto. > > I'm afraid that is the wrong order. See below. > > > I don't recall being told to put libssl after libldap. > > Yep, may be. The rule

Trust Chain Loading and signature verification of a certificate

2011-07-19 Thread brajan
hi i am having 10 Different CA Root certificates and each having depth of 3 intermediate Certificate in a Folder. i want to verify the Signature of the incoming certificate which P7b file which can have certificates need to validate (3 different certificates to validate) or one certificate nee

Re: Trying to Link Statically to Libcrypto

2011-07-19 Thread Albrecht Schlosser
On 19.07.2011 07:20, brandon...@aol.com wrote: Actually, I was advised to put libssl after libcrypto. I'm afraid that is the wrong order. See below. I don't recall being told to put libssl after libldap. Yep, may be. The rule is that libs with objects that are used by another lib must be

Re: [openssl-users] RE: revoking crt

2011-07-19 Thread Erwann ABALEA
Hodie XIV Kal. Aug. MMXI, y...@inbox.lv scripsit: >If that CRL is trying to revoke that root certificate, what in that CRL >could ber forged? If that CRL tells the private key is compromised, how could you trust this CRL (since it was signed by a compromised private key)? >CRL can onl

Re: revoking crt

2011-07-19 Thread yyyy
Revoking CA issued certificate requires CA private key. It is necessary to sign CRL. Maybe on that other machine were located your CA? Citējot *Daniel Spannbauer [1]*: > Am 07/18/2011 08:09 PM, schrieb y...@inbox.lv: > > is that really a self signed certificate? For self signed > certificat