Transferring DH public key from server to client

2011-12-03 Thread Odomae Bro
HI I would like to generate my own DH private/public keys and have the client/server exchange these values. The problem I am having is that the openssl build I have is configured to use certificates. Hence the client side is getting the server's DH public value from the certificate. If I need to

RE: Please Help: Certificate Validation using subjectAltName extension

2011-12-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Mr.Rout > Sent: Saturday, 03 December, 2011 02:56 > My TLS client can validate both CN and SN & i need to test both the > scenario. > > I don't know how to create certificate with "subjectAltName > extension" using openssl commands. > > In th

RE: Help in Understanding

2011-12-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Mr.Rout > Sent: Saturday, 03 December, 2011 02:59 Aside: this item was apparently delayed in master.openssl.org from 03.0758Z to 03.1907Z and delivered to my mailhost 03.1914Z. > Can somebody please clarify my silly questions ? I need to > un

Re: Problems with a setting certificates via OpenSSL in C++ (Windows)

2011-12-03 Thread Jeffrey Walton
On Fri, Dec 2, 2011 at 1:55 PM, wrote: > Hi, > > I am trying to make a simple C++ (64-bit) client program that can establish > a SSL connection with a remote server using OpenSSL on windows-7. I can > successfully execute the followings to create a new context block; > > SSL_library_init(); > SSL

stunnel 4.50 released

2011-12-03 Thread Michal Trojnara
Dear Users, I have released version 4.50 of stunnel. The ChangeLog entry: Version 4.50, 2011.12.03, urgency: MEDIUM: * New features - Added Android port. - Updated INSTALL.FIPS. * Bugfixes - Fixed internal memory allocation problem in inetd mode. - Fixed FIPS mode on Microsoft Vista, Se

Help in Understanding

2011-12-03 Thread Mr.Rout
Hi Folks, Can somebody please clarify my silly questions ? I need to understand the behavior of TLS client. 1. How do I verify that TLS Client send connection close without sending Closure alert ? 2. Is there any way to decrypt Application data (HTTP data) on wireshark itself ? 3.

Installing a .pfx wildcard certificate on lunix

2011-12-03 Thread chetanmadaan
Hi - we have a .pfx wildcard certificate we for from godaddy and the website is hosted with rackspace. anyone can shed some light on how this would be possible. i think the only way this can be done is via a .crt or .csr files??? Anyone? -- View this message in context: http://old.nabble.com

Problems with a setting certificates via OpenSSL in C++ (Windows)

2011-12-03 Thread Hamid.Shahid
Hi, I am trying to make a simple C++ (64-bit) client program that can establish a SSL connection with a remote server using OpenSSL on windows-7. I can successfully execute the followings to create a new context block; SSL_library_init(); SSL_load_error_strings(); meth=SSLv23_client_method(); c