Re: [openssl-users] PKCS7 signature process

2018-06-12 Thread lists
I'm very sorry for the late reply but I only read the list from time to time. To my knowledge, the PKCS7_sign will init the structure taking data from th BIO, so if you put data in the BIO after the call to PKCS7_Sign, that won't go into the PKCS7 structure. Possibly, by adding the flag PKCS7_

Re: [openssl-users] 2 openssl installed?

2018-06-12 Thread sampe...@tiscali.it
Yes, that’s right. My target is to migrate old server to new one keeping PKI and certificates (included databases). After this search how can I manage these files into new server? I Should to create multiple directory ? Each one for each index.txt files ? My search found several index.txt files I

Re: [openssl-users] openssl-users Digest, Vol 43, Issue 16

2018-06-12 Thread NATAWUT SUKRAT
.1.0) and commit 3984ef0b7 (for 1.0.2) in the > OpenSSL git > repository. > > This issue was reported to OpenSSL on 5th June 2018 by Guido Vranken who > also > developed the fix. > > References > == > > URL for this Security Advisory: > https://www

Re: [openssl-users] Advantech openssl compatibility issue

2018-06-12 Thread Brian . Chou
Subscribe and send again. From: Brian.Chou Sent: Wednesday, June 13, 2018 1:21 PM To: 'openssl-users@openssl.org' Cc: Brian.Ng; Mojo.Huang Subject: Advantech openssl compatibility issue Dear support team We met openssl crash issue on our Intel Atom C3000 SoC platform. Openssl crashes when run

Re: [openssl-users] 2 openssl installed?

2018-06-12 Thread Jan Just Keijser
Hi, On 07/06/18 06:14, Sampei wrote: t’s a server installed many many years ago and there are applications which are no used. Server is too late and I have new server (latest Centos 6) for migrating where I installed latest version. I’d like to take to new server all certificate database (cer

Re: [openssl-users] OpenSSL 1.1.0: How to get X509_STORE from X509_LOOKUP?

2018-06-12 Thread Matt Caswell
On 12/06/18 10:58, Stephan Mühlstrasser wrote: > In OpenSSL 1.0.2 this was no problem as the "X509_STORE *store_ctx" > member of the X509_LOOKUP structure was directly accessible. But in > OpenSSL 1.1.0 the X509_LOOKUP structure is opaque, and as far as I can > see there is no API function availa

[openssl-users] OpenSSL Security Advisory

2018-06-12 Thread OpenSSL
) in the OpenSSL git repository. This issue was reported to OpenSSL on 5th June 2018 by Guido Vranken who also developed the fix. References == URL for this Security Advisory: https://www.openssl.org/news/secadv/20180612.txt Note: the online version of the advisory may be updated with

[openssl-users] OpenSSL 1.1.0: How to get X509_STORE from X509_LOOKUP?

2018-06-12 Thread Stephan Mühlstrasser
Hi, I'm migrating from OpenSSL 1.0.2 to OpenSSL 1.1.0. The application attaches additional data to X509 certificate data structures via the X509_set_ex_data()/X509_get_ex_data() functions. A tricky detail is that the additional data must be attached when OpenSSL loads certificates from PEM f