Cross-Compile openssl-0.9.8j with zlib-dynamic Option give Error

2012-10-04 Thread ashish yadav
Hi , I am cross-compiling openssl-0.9.8j with zlib-dynamic Option. The Options are : ./Configure zlib-dynamic shared threads no-dso no-krb5 Now , I am getting following Error Message : c_zlib.c: In function 'COMP_zlib': c_zlib.c:402: error: too few arguments to function 'CRYPTO_get_ex_new_ind

RE: exception when using Self Signed Certificate

2012-10-04 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar >Sent: Thursday, 04 October, 2012 14:31 >I have a self signed certificate created and i have loaded that >into a trust store of the client. I have also configured the Server >with that self signed certificate. So when i try to esta

Re: simple server with using openssl

2012-10-04 Thread Mithun Kumar
have a look at this thread https://groups.google.com/forum/?fromgroups=#!topic/mailing.openssl.users/-t7KRH-8phs Since this is not related to dev i have removed openssl-dev from list. On Thu, Oct 4, 2012 at 10:14 PM, Indtiny s wrote: > Hi, > > I need a TLS security based server which can h

Re: how to extract O= and OU= from a subject cert

2012-10-04 Thread Dr. Stephen Henson
On Wed, Oct 03, 2012, mclellan, dave wrote: > We know how to extract the subject and issuer from a cert sent by a peer. > Can anyone point out where we get started to look into how to extract the > Organization and organizationalUnit attributes? > > It's not obvious from the API definitions a

[no subject]

2012-10-04 Thread lists
> We know how to extract the subject and issuer from a cert sent by a peer. > Can anyone point out where we get started to look into how to extract > the Organization and organizationalUnit attributes? > It’s not obvious from the API definitions and I’ve been searching > the openssl-users archive b

Re: Documentation for TXT_DB errors?

2012-10-04 Thread lists
On 10/03/2012 05:49 AM, Dave Thompson wrote: >> I deleted index.txt and reset serial.txt to 00 and that >> solved the problem. >> >> Hope that was not a terrible idea. In my opinion, reusing serials is a *very bad* idea in general. It is definitely deprecated and maybe forbidden in some legal cont

Re: Non-Blocking and ENGINE

2012-10-04 Thread Dr. Stephen Henson
On Tue, Oct 02, 2012, Dirk Menstermann wrote: > Hello list, > > is there a way to use ENGINEs in a non-blocking way - meaning for a network > operation (remote HSM) the thread can do something else instead of waiting for > the IO operation to complete? > No there is no way to do that at present

Re: Non-Blocking and ENGINE

2012-10-04 Thread Dirk Menstermann
Anybody? Thanks On 02.10.2012 15:58, Dirk Menstermann wrote: > Hello list, > > is there a way to use ENGINEs in a non-blocking way - meaning for a network > operation (remote HSM) the thread can do something else instead of waiting for > the IO operation to complete? > > Thanks > Jens > ___

Re: Cannot build shared library on Linux with FIPS capable OpenSSL

2012-10-04 Thread O.Shevchenko
Thank you very much! How did you come to this solution? -- View this message in context: http://old.nabble.com/Cannot-build-shared-library-on-Linux-with-FIPS-capable-OpenSSL-tp29946444p34510054.html Sent from the OpenSSL - User mailing list archive at Nabble.com.

how to extract O= and OU= from a subject cert

2012-10-04 Thread mclellan, dave
We know how to extract the subject and issuer from a cert sent by a peer. Can anyone point out where we get started to look into how to extract the Organization and organizationalUnit attributes? It's not obvious from the API definitions and I've been searching the openssl-users archive but I

Add 509v3 certificatePolicies in C

2012-10-04 Thread James Burton
I am trying add certificatePolicies in C code and I got this Error on "certificatePolicies = 2.2.2.2" ** sign1.c:163 Error creating X509 extension object 5432:error:22097088:X509 V3 routines:DO_EXT_NCONF:no config database:.\crypto\x5 09v3\v3_conf.c:156: 5432:error:22098080:X509 V3 routines:X509

Re: Private RANDFILE per CA required?

2012-10-04 Thread Stefan H. Holek
On 02.10.2012, at 15:22, Jakob Bohm wrote: > On 10/2/2012 2:04 PM, Stefan H. Holek wrote: >> When using the openssl command line utility, is a private RANDFILE per CA >> required for security reasons, or is it just fine to use a single RANDFILE >> for everything (i.e. the default ~/.rnd)? Older