RE: sslv3 alert bad certificate

2013-05-17 Thread Eisenacher, Patrick
From: Mithun Kumar Any pointers why below error is thrown by openssl? error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate:s3_pkt.c:1193:SSL alert number 42 Your peer didn't like your certificate and sent you a fatal bad certificate alert message. HTH, Patrick

Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-17 Thread Johannes Bauer
On 15.05.2013 23:05, Dr. Stephen Henson wrote: On Wed, May 15, 2013, Johannes Bauer wrote: Does this mean that communication with TLS1.2 with curves other than the SEC-curves has actually never worked with OpenSSL (because it couldn't have worked as this would require the explicit curve

Re: sslv3 alert bad certificate

2013-05-17 Thread Mithun Kumar
Adding more info...Looks like the handshake is doesnt stop as soon as the error is added by Openssl. Any inputs in what scenarios such errors are thrown.? On Thu, May 16, 2013 at 11:39 PM, Mithun Kumar mithunsi...@gmail.comwrote: Hello All Any pointers why below error is thrown by openssl?

openssl FIPS build for ce6 arm platform

2013-05-17 Thread Abhijit Ray Chaudhury
Hi, Is there anybody tried FIPS enabled openssl build on wince6 platform. I was able to build fipscanister.lib , now I want to build one dll from it. Anybody has successfully tried it ? Thanking You in advance, -Abhijit __

Openssl build for ce6 on ARM

2013-05-17 Thread Abhijit Ray Chaudhury
Hi, Is there anybody tried Openssl build on wince ce6 ? I am trying to compile openssl-1.0.1-c on ce6 after applying the patch mentioned in http://www.mail-archive.com/openssl-dev@openssl.org/msg26888.html, but my link fails for md4test.exe with unresolved reference for ___iob_func . I am not

Build error with 1.0.1e on Win64 with VC++ 2010 and nasm

2013-05-17 Thread Phillip Hellewell
I'm trying to upgrade from 0.9.8y to 1.0.1e, but I'm getting this linker error. link /nologo /subsystem:console /opt:ref /debug /dll /out:out32dll\libeay32.dll /def:ms/LIBEAY32.def @C:\Users\PHELLE~1\AppData\Local\Temp\nm6C7E.tmp Creating library out32dll\libeay32.lib and object

Re: TLS v1.2 problems with connection establishment No shared ciper

2013-05-17 Thread Dr. Stephen Henson
On Thu, May 16, 2013, Johannes Bauer wrote: On 15.05.2013 23:05, Dr. Stephen Henson wrote: On Wed, May 15, 2013, Johannes Bauer wrote: Does this mean that communication with TLS1.2 with curves other than the SEC-curves has actually never worked with OpenSSL (because it couldn't have

asn1 encoding routines error

2013-05-17 Thread Mithun Kumar
Is anyone aware why below error is thrown by openssl? 33620164:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1294: 33620164:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509_EXTENSION 33620164:error:0D08303A:asn1

Re: Similar issuer dn mod_ssl client authentication issue

2013-05-17 Thread Michele Mase'
Tx. for the response. Now I try to explain what I should do ... What I did: openssl: Commandline for the openssl s_server (sorry for my typo) before starting www server: c_rehash /some/path #where I've put 2 pem encoded CA's certificates start the simple www server openssl s_server -www -key

Cipher sorting: ssl_cipher_apply_rule never processes list with one member?

2013-05-17 Thread Peter Sandelin
Hi, while debugging another thing I discovered what I think is a bug in the CIPHER list handling. Can someone please confirm or disprove that this is a bug? OpenSSL version 1.0.1c. In function ssl_cipher_apply_rule the break criteria (curr == last) is strange. I arrive here with only ONE member

simple https server using openssl

2013-05-17 Thread Indtiny s
Hi, I need to write a simple https server using openssl , I need to just receive https post from the client and return response 201. is it possible use s_server code given in the openssl source to implement a simple https server . ? pls through some light on how to write a simple https server

RE: sslv3 alert bad certificate

2013-05-17 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar Sent: Thursday, 16 May, 2013 14:17 Adding more info...Looks like the handshake is doesnt stop as soon as the error is added by Openssl. Any inputs in what scenarios such errors are thrown.? Possibly the peer made bad_cert a

Re: simple https server using openssl

2013-05-17 Thread Terrell Larson
If you look in the gnu website you will find example code for Unix like based systems. I did this about 12 years ago and it works well. What the problem was back then is if we use the fork() model which to me makes sense then OpenSSL was never designed for this so we have a clash. OpenSSL will

RE: asn1 encoding routines error: x509_extension, from ssl3_get_server_cert

2013-05-17 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar Sent: Friday, 17 May, 2013 08:51 Is anyone aware why below error is thrown by openssl? trimmed 0D0680A8:asn1 :ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1294: 0D07803A:asn1 :ASN1_ITEM_EX_D2I:nested :tasn_dec.c:380:Type=X509_EXTENSION

Intermediate Certificates with Suite B Profile

2013-05-17 Thread Stan Joyner
Hi, Google has let me down on this one. I am sure there is a tutorial in place somewhere for this. I just can't seem to find it. I have the following in place: 1. Certificate Signing Request from a device. 2. Root CA I generated via these openssl commands: openssl ecparam -out ec_param.pem

RE: Similar issuer dn mod_ssl client authentication issue

2013-05-17 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Michele Mase' Sent: Friday, 17 May, 2013 10:04 What I did: openssl: Commandline for the openssl s_server (sorry for my typo) before starting www server: c_rehash /some/path #where I've put 2 pem encoded CA's certificates If these are

RE: Intermediate Certificates with Suite B Profile

2013-05-17 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Stan Joyner Sent: Friday, 17 May, 2013 16:14 I have the following in place: 1. Certificate Signing Request from a device. 2. Root CA I generated via these openssl commands: openssl ecparam -out ec_param.pem -name secp384r1 openssl req -new -x509

RE: simple https server using openssl

2013-05-17 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Indtiny s Sent: Friday, 17 May, 2013 13:34 To: openssl-users@openssl.org; openssl-...@openssl.org Answering users only, this is not a dev question. I need to write a simple https server using openssl , I need to just receive https post

Re: Intermediate Certificates with Suite B Profile

2013-05-17 Thread Stan Joyner
Thanks Dave for the quick response. It helped a lot. One last question and I think I'll have what I need. (And yes I am very new to openssl.) I was able to produce the self signed Root CA, the intermediate CA, and then sign my server device CA with the intermediate CA. I was able to use openssl

Re: Openssl build for ce6 on ARM

2013-05-17 Thread Geoffrey Coram
I was never able to compile any of the 1.x.y series for WinCE; I'm still using the 0.9.8 series. On 05/17/2013 05:50, Abhijit Ray Chaudhury abhijit.ray.chaudh...@gmail.com wrote: Hi, Is there anybody tried Openssl build on wince ce6 ? I am trying to compile openssl-1.0.1-c on ce6 after