[openssl-users] SubjectAltName syntax in openssl.cnf

2018-09-28 Thread DUPALUT, Benjamin
Hello, i Have to set a SubjectAltName for a server certificate but documentations on the web does not provide the same syntax. Is this syntax correct ? subjectAltName=DNS:test.example.com Also, does it belong in the [ usr_cert ] section ? Thank you for your help. Regards, *Benjamin Dupalut*

Re: [openssl-users] SSL routines:ssl3_read_bytes:tlsv1 alert internal error

2018-09-28 Thread DUPALUT, Benjamin
Hi Matt, Thank you for your answer. I don't the Wi-Fi controler that initiate the connection but i can try to ask for logs. I will come back to you if i manage to get those logs. Cordialement, *Benjamin Dupalut* Ingénieur système et réseau Service Informatique, Télécommunications, Audiovisuel

[openssl-users] Same dir with different type in X509_LOOKUP_hash_dir

2018-09-28 Thread Jan Burgmeier
Hi, during setup of my X509_STORE I use X509_LOOKUP_hash_dir with same dir but different type X509_FILETYPE_PEM and X509_FILETYPE_ASN1. But only certificates of the first type are looked up. I dig into the code and made a little change to fix my problem, see attached patched. Is this behavior by d

Re: [openssl-users] SSL routines:ssl3_read_bytes:tlsv1 alert internal error

2018-09-28 Thread Matt Caswell
On 28/09/18 07:06, DUPALUT, Benjamin wrote: > Hello, > > First of all, sorry if my english isn't very good. > > I'm using freeradius server to authenticate users on Eduroam Wi-Fi. I > set up a local certification authority et signed the freeradius server > certificate using openssl. > > Users 

Re: [openssl-users] openssl-users Digest, Vol 46, Issue 46

2018-09-28 Thread Matt Caswell
On 28/09/18 04:21, Richard Levitte wrote: > Ah, I forgot... we changed the requirements to compile that code, > from this: > > # if defined(__GNUC__) && (__GNUC__ > 3 || (__GNUC__ == 3 && > __GNUC_MINOR__ >= 1)) > > to this: > > # if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==

Re: [openssl-users] Certificate format question?

2018-09-28 Thread Steffen Nurpmeso
Scott Neugroschl wrote in : |Steffen Nurpmeso, Tuesday, September 25, 2018 11:57 AM |> The RFC 7468 term "parsers SHOULD ignore whitespace and other non- |>base64 characters" makes me wonder. | |The relevant clause is a few sentences up: "Data before the encapsulation \ |boundaries are |pe

Re: [openssl-users] openssl-users Digest, Vol 46, Issue 46

2018-09-28 Thread Richard Levitte
Ah, I forgot... we changed the requirements to compile that code, from this: # if defined(__GNUC__) && (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 1)) to this: # if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16 the latter denotes official support while the former was mo