Re: SSL_connect problem : bad asn1 object header

2003-01-19 Thread mikecross
the problem seems to be that you use self signed certificates /both sides/. there is a few possible ways to do this: 1. use custom handler for errors in certificates in your server static int SSL_verify_callback(int ok, X509_STORE_CTX *ctx) { charbuf[256]; X509* err_cert; int err, depth,

Re: OpenSSL client/server C code problems

2003-01-12 Thread mikecross
first of all - you can initialize SSL context once per process - and reuse it on every incoming or outgoing connection request. So you can remove : SSL_library_init(); ERR_load_crypto_strings(); SSL_load_error_strings(); ssl_context = SSL_CTX_new( SSLv3_method() ); from your connect functions. 2. N

Re: W2K Installation

2002-12-08 Thread mikecross
I have almost the same problem. However according to me the problem was into PATH constant /missing paths to nmake.exe also to cl and link. the solution is to run it within openssl dir nmake -f ntdll.mak but after I adjust paths - there will be problems with "stdio.h" etc. Also when you are using V

Re: Visual Studio

2002-12-01 Thread mikecross
it's in the same manner as VC 6.0. Compile openSSL /2 dlls - libeay32.dll ssleay32.dll/ add openSSL includes and lib files into VC dirs. if you want there is openSSL .dsw and .dsp files for VC6 which easily can be converted to VC7 project files. http://www.iconsinc.com/~agray/ossldev/ --- Desmon

Re: Converting own CA certificate to pkcs12

2002-11-21 Thread mikecross
Seems to me that you problem is that you didn't supply password. PKCS12 format stores Private + Public key pair encrypted with password. --- Matthew Hall <[EMAIL PROTECTED]> wrote: > > I'm trying to find out how to take my ca.crt file > (signed > by my own CA self) and convert it to pkcs12 format

Re: OpenSSL does not work with IE Win 98/SGC certificates

2002-11-20 Thread mikecross
Better fix your browser - there is a tiny patch which allows MS IE to work with 128 bit strong encryption. --- Konstantin Kladko <[EMAIL PROTECTED]> wrote: > Folks - > > We are trying to use OpenSSL with an RSA signed SGC > certificate and Win > 98 40-bit IE browser, > but it looks like there i

Re: I give up

2002-11-19 Thread mikecross
there are two ways: 1. send the certreq.txt to some CA provider - VeriSign/go to web site/ for example to sign your certificate request. then import their response into IIS /if any :))/ the Bad news - the free one is 14 days trial /testing purposes only/ 2. make yourself CA certificate + key sign