Re: Verify x509 certificate

2008-08-03 Thread .:: Francesco la Torre ::.
/2008 alle 18.57 -0700, Sendroiu Eugen ha scritto: > > > I'm not sure you solved that. This works just because your certificate > chain will have only 1 certificate so no signature verification is > done. > > kr, > > Eugen Sendroiu > > > ----- O

Re: Verify x509 certificate

2008-08-02 Thread .:: Francesco la Torre ::.
Solved ! I forgot to call SSLeay_add_all_algorithms(); ... a summer youthful folly :-) Flt Il giorno sab, 02/08/2008 alle 11.43 +0200, .:: Francesco la Torre ::. ha scritto: > On sab, 2008-08-02 at 02:04 -0700, Kyle Hamilton wrote: > > The verify(1ssl) man page has descriptions of th

Re: Verify x509 certificate

2008-08-02 Thread .:: Francesco la Torre ::.
true, but I used the "stange" abjective because if I try to verify the certificate from command line openssl verify -CAfile /home/frank/test/test-CA/calist.pem cert.pem The output is : cert.pem: OK so both certificates are valid. Regards, Flt > -Kyle H > > On Fri, Aug

Re: Verify x509 certificate

2008-08-01 Thread .:: Francesco la Torre ::.
On sab, 2008-08-02 at 00:21 +0200, .:: Francesco la Torre ::. wrote: > self reply :-) > > I've added a callback function like this > > static int cb(int ok, X509_STORE_CTX *ctx){ > char buf[256]; > > X509_NAME_oneline( > X509_ge

Re: Verify x509 certificate

2008-08-01 Thread .:: Francesco la Torre ::.
rn(ok); } and also add this line to the main X509_STORE_set_verify_cb_func(&ca_ctx,cb); but the result is always the same : Verification error: certificate signature failure where are my mistakes ? Thanks Flt On ven, 2008-08-01 at 23:58 +0200, .:: Francesco la Torre ::. wrote: > On

Re: Verify x509 certificate

2008-08-01 Thread .:: Francesco la Torre ::.
reful which text editor > you are using because some may replace spaces with their owns ( eg > CRLF - CR or LF ) in the root_cert_data declaration, and that might > spoil the signature. I'll check also this :-) > > Cheers. Thank you very much ! Flt > > ----- Ori

Re: Verify x509 certificate

2008-08-01 Thread .:: Francesco la Torre ::.
Any help from someone ? :-) Flt Il giorno mer, 30/07/2008 alle 23.57 +0200, Francesco la Torre ha scritto: > Dear all, > I'm new in openssl api and I'm trying to write e simple application to > verify an x509 certificate but I'm facing with some strange problem. > &g

Verify x509 certificate

2008-08-01 Thread Francesco la Torre
I try to verify my certificate by mean command line tool openssl verify -CAfile /home/frank/test/test-CA/calist.pem cert.pem The output is : cert.pem: OK Does anybody know where is the problem ? Thanks in advance, Francesco la Torre _