Re: How to check one by one the different errors of a certificate

2006-06-09 Thread padma saxena
You can write a callback function to perform specific checks you need and use SSL_CTX_set_verify() to set up the callback mechanism. Hope this helps, Padma --- GUIRY Aroun <[EMAIL PROTECTED]> wrote: > Hi all > > I am doing a https client in C language. And I would > like to know if > there

Re: HTTPS

2005-07-15 Thread padma saxena
Have you looked at libwww from W3C? --- Milan Tomic <[EMAIL PROTECTED]> wrote: > > Where can I find some HTTPS client app example using > OpenSSL? I have > found cli.cpp in the OpenSSL distribution but it > connects to the server > through sockets. > ___

Re: DOD Root Certificates and OpenSSL

2004-10-22 Thread padma saxena
Since your problem is 'client certificates not available', you should set SSLVerifyClient to 'optional' This will let the server to continue the handshake even if the client does not have a certificate. - Padma --- Golub Heath <[EMAIL PROTECTED]> wrote: > Sorry in advance but I am fairly new to

Re: Enforcing a cipher suite

2004-09-30 Thread padma saxena
You could use SSL_CTX_set_cipher_list() --- Michael Fawcett <[EMAIL PROTECTED]> wrote: > Hello all, > > I'm relatively new to using and configuring openssl. > I would like to > enforce the use of one particular cipher suite to > one of our servers. > Is this possible? If so, how do you go abou

Re: SSL_CTX_load_verify_locations

2003-10-30 Thread padma saxena
I modified X509_load_cert_crl_file() (in by_file.c) to invoke BIO_new_mem_buf() rather than BIO_new_file(). This seems to work satisfactorily. I probably have to add a module by_mem.c similar to by_file.c so we can pass a buffer (rather than a filename) to SSL_CTX_load_verify_locations(). I did not