smime and adding a cert to re-encrypt against

2013-02-23 Thread Dirk-Willem van Gulik
Folks, I am struggling to find a clean way to add a pub-key to encrypt against to an existing pkcs7/smime file. Without having to change the existing entries. The use case is that of a key rollover (on for example a very long term backup) where one would want to add an extra decryption key

Re: OCSP stapling

2013-02-23 Thread Jeremy Harris
On 02/19/2013 02:33 PM, Dr. Stephen Henson wrote: On Tue, Feb 19, 2013, Jeremy Harris wrote: On 18/02/2013 22:32, Dr. Stephen Henson wrote: That's fine except that we're using SSL_CTX_set_verify() callback already and the docs say it and SSL_CTX_set_cert_verify_callback() should not be mixed.