Re: How to add intermediate certificate chain in SSL_CTX using OpenSSL API

2014-03-08 Thread Harshal Talele
Thank you for your reply Meer. In my case cert.pem file contains private key too. I wan to understand if I have to be use intermediate certificates in SSL handshake is there any specific way in which we have to populate SSL_CTX structure? I have tried using SSL_CTX_use_certificate_chain_file()

Re: Error Using FIPS compliant OpenSSL Library Files in VC++ in Visual Studio 2005

2014-03-08 Thread scott_thomas007
Bonjour, There are many posts that are still unanswered on this forum like some posts of Rajesh Kumar http://openssl.6102.n7.nabble.com/Adding-Hash-to-Application-Static-Build-OpenSSL-With-FIPS-td28035.html#a28036

Help: DecryptFinal error

2014-03-08 Thread Li, David
Hi, I am new to openssl C APIs. So I wrote a simple test to encrypt and decrypt a 15 byte ASCII string using AES128. The encryption seems OK and the encrypted length is 16. But the decryption always failed at EVP_DecryptFinal_ex(). The error code is 0 and means padding error. I have been

Re: Help: DecryptFinal error

2014-03-08 Thread Larry Bugbee
On Mar 8, 2014, at 11:23 AM, Larry Bugbee bug...@mac.com wrote: On Mar 7, 2014, at 11:42 AM, Li, David l...@cloudshield.com wrote: Hi, I am new to openssl C APIs. So I wrote a simple test to encrypt and decrypt a 15 byte ASCII string using AES128. The encryption seems OK and the

Re: How to add intermediate certificate chain in SSL_CTX using OpenSSL API

2014-03-08 Thread Viktor Dukhovni
On Sat, Mar 08, 2014 at 08:26:54PM +0530, Harshal Talele wrote: In my case cert.pem file contains private key too. I wan to understand if I have to be use intermediate certificates in SSL handshake is there any specific way in which we have to populate SSL_CTX structure? I have tried using

Re: Fetch reference count for SSL_CTX?

2014-03-08 Thread Viktor Dukhovni
On Fri, Mar 07, 2014 at 06:16:33PM -0500, Jeffrey Walton wrote: I'm have a cache of SSL_CTX's. When a SSL_CTX reference count drops to 1, I'd like to remove it from the cache. (1 means the cache holds the only copy, so I should be able to remove it and call SSL_CTX_free). Is it possible to