Failed to compile on Solaris 9, 10

Hi. I'm trying to compile oepnssl-1.0.0g with no- option on Solaris 9 and 10. But I have encountered the below trouble, and it may be not successfully build. Please tell me how I should do. - + /bin/bash ./Configure solaris64-spa

client_cert_cb

Regards to everyone I am writing a program for mutual SSL handshake in which client is also authenticated by its certificate. I have setup an IIS Server which asks for certificate whenever any client connects to it. For this, I have done following things at the client end. 1. Defined a callb

Re: HSM used as OpenSSL engine

Thank you for your reply Stephen. In that is the case, then how would you explain the following phenomenon- 1. Start a SSL connection using private key stored on a HSM, protected using a smart-card, 2. Let the SSL connection run for a bit 3. Unplug the smart card from HSM, 4. SSL connection stop

Re: Unknown CA error

On 4/18/2012 8:47 PM, Appaji Yelamarthi wrote: Hi there, I'm facing 'Unkown CA' error during ssl handshake messages between client(a network device) and server (pound). sorry am not much familiar with openssl library usage but setting up the pound reverse proxy which use openssl 0.9.8 on redhat l

Re: Making AES-CCM available as a TLS-negotiated cipher suite

On Wed, Apr 18, 2012, Muschick, Paul wrote: > So, it's ironic that only after I post to the mailing list, I solve my first > problem. For visitors from the future, to fully add a new cipher suite, you > can't forget to add your cipher's EVP_CIPHER* accessor function (generated by > the BLOCK_CI

Unknown CA error

Hi there, I'm facing 'Unkown CA' error during ssl handshake messages between client(a network device) and server (pound). sorry am not much familiar with openssl library usage but setting up the pound reverse proxy which use openssl 0.9.8 on redhat linux. Done a lot of googling but no clear pointe

RE: Making AES-CCM available as a TLS-negotiated cipher suite

So, it's ironic that only after I post to the mailing list, I solve my first problem. For visitors from the future, to fully add a new cipher suite, you can't forget to add your cipher's EVP_CIPHER* accessor function (generated by the BLOCK_CIPHER_custom macro) to SSL_library_init() in ssl_algs.

RE: Please tell me about encryption API of OpenSSL 1.0.1

> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Jeffrey Walton > > On Tue, Apr 17, 2012 at 9:47 PM, Edward Ned Harvey > wrote: > >> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > >> us...@openssl.org] On Behalf Of Ken Goldman > >> >

Re: Selecting certificate to be presented by a given endpoint in establishing an ssl connection

On 4/17/2012 7:00 PM, Nou Dadoun wrote: Quick question regarding certificate usage in an ssl connection; you can associate a number of certificates with a server endpoint - is there any way of deciding at runtime which certificate is presented to the client (depending on the identity of the cl