Hi,
Yes it
is possible to change OpenSSL to do this (I've just done it), but it's a bit
fiddly. Try BIO pairs first though.
Steve
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On
Behalf Of Steve CollinsSent: 30 May 2003 19:53To:
[EMAIL PROTECTED]Sub
Hi folks,
I've been trying to use X509_set_verify() and an associated callback
function to allow me to override the standard verification if necessary.
According to the O'Reilly OpenSSL book, this function gets called on every
connection, and allows the callback to alter the ok value, thus allowin
Actually, I take that back, it does get called whether the chain passes or
fails. However, it still crashes horribly when ok is altered. Any clues?
Steve
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of steve thornton
Sent: 26 June 2003 09:53
To: [EMAIL
Behalf Of Lutz Jaenicke
Sent: 26 June 2003 10:28
To: [EMAIL PROTECTED]
Subject: Re: Problem with X509_set_verify()
On Thu, Jun 26, 2003 at 10:07:08AM +0100, steve thornton wrote:
> Actually, I take that back, it does get called whether the chain passes or
> fails. However, it still crashe
shake.
Can anybody confirm that this happens with standard OpenSSL builds?
Steve
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of steve thornton
Sent: 26 June 2003 11:07
To: [EMAIL PROTECTED]
Subject: RE: Problem with X509_set_verify()
I think I've
verify()
On Thu, Jun 26, 2003 at 12:07:19PM +0100, steve thornton wrote:
> OK, I haven't found the problem. It does appear to be an OpenSSL bug.
>
> I use
>
> SSL_CTX_set_verify ( ctx, SSL_VERIFY_PEER, verifyCallbackProc );
>
> and
>
> int verifyCallbackProc ( int ok,
ult.
thanks again
Steve
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Lutz Jaenicke
Sent: 26 June 2003 13:26
To: [EMAIL PROTECTED]
Subject: Re: Problem with X509_set_verify()
On Thu, Jun 26, 2003 at 01:07:22PM +0100, steve thornton wrote:
> I'm us
OK I've found the problem. I can kluge my way around it, as it is something
to do with the wierd stuff that I am doing, rather than any fault in OSSL.
Thanks for everybodies input. At least it showed up a bug in the docs that
has been corrected.
thanks again
Steve
-Original Message-
From
Hi folks,
I've just sucessfully ported OpenSSL to run on a very small embedded
real-time platform. I am now looking at ways to reduce the code size (more
than I already have done), and am wondering if I can get rid of most of the
entries in the ASN.1 database, as I am only doing the most *basic* c
Jul 2003 14:49:41 +0100, "steve thornton" wrote:
>
> Sorry, can't read - you mean server. If you set up a session caching
sceme,
> then maintaining a pool of connections is cheap (ish) and straightforward.
I
> have code snippets if you need them
>
> Steve
Heh
Hi
I would like to try and reduce the size of the ASN.1 database, but am not
sure how the various files work together - I see that there is a perl script
to generate the necessary files, but I'm not too clear how this works. Can
anybody help me out on how to edit and regenerate this?
Many thanks
Hi
I've been trying to edit and rebuild the ASN.1 database using objects.pl. I
am having problems understanding what is going on. As I understand it, the
file to edit is objects.txt, but if I change this file in any way, then
objects.pl no longer works. Can anybody please tell me what I should be
I *think* I understand it now, but any clarification etc. would still be
most appreciated.
Steve
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of steve thornton
Sent: 23 July 2003 10:09
To: [EMAIL PROTECTED]
Subject: Please help
Hi
I've been tryi
PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Dr. Stephen Henson
Sent: 23 July 2003 12:36
To: [EMAIL PROTECTED]
Subject: Re: Please help
On Wed, Jul 23, 2003, steve thornton wrote:
> Hi
>
> I've been trying to edit and rebuild the ASN.1 database using objects.pl.
I
> am having pro
13:52
To: [EMAIL PROTECTED]
Subject: Re: Please help
On Wed, Jul 23, 2003, steve thornton wrote:
> Yes I've noticed this. Basically I am making an embedded client, and am
> looking for every way possible to reduce code size, and obj_dat is very
big.
> I've more or less concluded
15 matches
Mail list logo
