Re: Building in a engine implementation at buildtime

2014-06-13 Thread Shanku Roy
I have following engine implementation (Android keystore) which can be loaded successfully thru command line:   openssl engine - dynamic -pre SO_PATH:/system/lib/ssl/engines/libkeystore.so -pre ID:keystore -pre LOAD   How to build in this ENGINE implementation thru build process? so that it

Building in a engine implementation at buildtime

2014-06-13 Thread Shanku Roy
I have following engine implementation (Android keystore) which can be loaded  successfully thru command line: openssl engine - dynamic -pre SO_PATH:/system/lib/ssl/engines/libkeystore.so -pre ID:keystore -pre LOAD   How to build in this ENGINE implementation thru build process? so that it ca

Re: 1.0.2 VC-WIN32 build failure?

2014-06-13 Thread John Foley
Tried again using the 20140613 snapshot and it's now working. Thanks for committing the fix yesterday. On 06/12/2014 11:35 AM, John Foley wrote: > Using the 201406012 snapshot on the 1.0.2 branch, I'm seeing an error > while trying to build for the VC-WIN32 target. The co

Donation from VT Enterprise

2014-06-13 Thread Steve Marquess
Yesterday I received a check and a very nice letter from Victor Olex of VT Enterprise LLC (http://vtenterprise.com/). The check was a donation to the OpenSSL project of the proceeds of a T-shirt sale campaign they planned and conducted (http://www.slashdb.com/blog-news/). It was in the amount of 2^

RE: Authority Key ID Extension

2014-06-13 Thread Salz, Rich
Yes, it's definitely optional. The most common keyIdentifier's that I have seen are based, well, on the key :) /r$ -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz _

Re: Authority Key ID Extension

2014-06-13 Thread Dr. Stephen Henson
On Fri, Jun 13, 2014, Carl Young wrote: > > Hi, > > I am looking for advice for an application using openssl, but it's not an > openssl problem. > > We have a situation where an external company has provided us with > authentication certificates from a subCA and we have all the cert's back up

Authority Key ID Extension

2014-06-13 Thread Carl Young
Hi, I am looking for advice for an application using openssl, but it's not an openssl problem. We have a situation where an external company has provided us with authentication certificates from a subCA and we have all the cert's back up to the root - openssl verify works fine. Another appli

Re: [SPAM?] Re : 2 Server certificates

2014-06-13 Thread Peter Sylvester
https://www.openssl.org/docs/ssl/SSL_load_client_CA_file.html Load names of CAs from file and use it as a client CA list: SSL_CTX *ctx; STACK_OF(X509_NAME) *cert_names; ... cert_names = SSL_load_client_CA_file("/path/to/CAfile.pem"); if (cert_names != NULL) SSL_CTX_set_client_CA_list(

Re : 2 Server certificates

2014-06-13 Thread nicolas . kox
Hi, the fact is a server can only send a single certificate, however this one can be signed by multiple CAs on the other side, a client have (in general) a list of trusted CAs, not a single one so there are two options : - either each client knows the two CAs, then the server can send a certifi

Re: Re : Re: Re : Re: 2 Server certificates

2014-06-13 Thread Hafedh TRIMECHE
Hi Nicolas, pit-ca issued another certificate to a client wanting to connect to the same server identified by secure.payerspot.com. I'm looking for a solution allowing two clients to connect to the same server using certificates issued by different CAs. In this case the client forces the serve

Re: Re : Re: Re : Re: 2 Server certificates

2014-06-13 Thread Hafedh TRIMECHE
Hi Nicolas, pit-ca issued another certificate to a client wanting to connect to the same server identified by secure.payerspot.com. I'm looking for a solution allowing two clients to connect to the same server using certificates issued by different CAs. In this case the client forces the server

Issue setting up apache mod proxy over SSL connection for gevent socketio server

2014-06-13 Thread Deepak Rokade
I am running my gevent socketio server on port 8081. My django website is running on port 8443 through https which is accessed by user from port 8080. I want to use proxy SSL connection for socketio server through mod_proxy. Below is what I am trying but when I access socketio URL , it gives me in