Re: openssl-users Digest, Vol 24, Issue 16

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Your query is being processed


On 8 Nov 2016 2:14 p.m., <openssl-users-request@xxxxxxxxxxx> wrote:
Send openssl-users mailing list submissions to
        openssl-users@xxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
        https://mta.openssl.org/mailman/listinfo/openssl-users
or, via email, send a message with subject or body 'help' to
        openssl-users-request@openssl.org

You can reach the person managing the list at
        openssl-users-owner@openssl.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of openssl-users digest..."


Today's Topics:

   1. Re: Retrieving Root CA certificate using "openssl s_client
      -showcerts" command (Salz, Rich)
   2. Re: Problem in compiling OpenSSL on Windows-7-32-bit
      (Michael Wojcik)
   3. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)
   4. Re: (SPAM) Retrieving Root CA certificate using "openssl
      s_client -showcerts" command (Erwann Abalea)
   5. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Jakob Bohm)
   6. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)


----------------------------------------------------------------------

Message: 1
Date: Tue, 8 Nov 2016 12:48:05 +0000
From: "Salz, Rich" <rsalz@xxxxxxxxxx>
To: Mofassir Ul Haque <mofassir_haque@xxxxxxxxx>,
        "openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
Subject: Re: Retrieving Root CA certificate using
        "openssl s_client -showcerts" command
Message-ID:
        <d0d55ec8a95b439ea54af80156934c38@xxxxxxxxxxxxxxxxxxxxxxxx.akamai.com>
Content-Type: text/plain; charset="utf-8"

Yes, just put the entire chain in the server?s PEM file.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20161108/7be62e26/attachment-0001.html>

------------------------------

Message: 2
Date: Tue, 8 Nov 2016 13:24:39 +0000
From: Michael Wojcik <Michael.Wojcik@xxxxxxxxxxxxxx>
To: "openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
Subject: Re: Problem in compiling OpenSSL on
        Windows-7-32-bit
Message-ID:
        <B550B44BF8AF314BB00C4E2AC1C18088015E6B611A@prvxmb03.microfocus.com>
Content-Type: text/plain; charset="utf-8"

[not quoting anything because Outlook can't quote HTML email properly]

I build OpenSSL for static linking (though using a hacked configuration, since it's going to be linked into a DLL, and we do not want the C RTS linked statically). I've not seen any of these problems. We build on a variety of Windows versions, using a number of compiler versions (because inter-version compatibility still eludes Microsoft); we've been doing that since the 0.9.8 days, and now do it with each release of 1.0.2.

My advice, frankly, is to study the OpenSSL build process until you understand it. We've had issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with a wrapper program that corrects paths), and as I noted above, we've had to hack the configuration process (with scripts that run between the OpenSSL configuration step and the actual build). The OpenSSL build is not trivial, and the Windows toolchain is, in a word, terrible.

I would also recommend getting nasm out of the Visual Studio tree, where it most definitely does not belong, and into a normal (non-spacey) path.

Michael Wojcik
Distinguished Engineer, Micro Focus



------------------------------

Message: 3
Date: Tue, 8 Nov 2016 14:44:01 +0100
From: Kim Gr?sman <kim.grasman@xxxxxxxxx>
To: openssl-users@xxxxxxxxxxx
Subject: Re: Problem in compiling OpenSSL on
        Windows-7-32-bit
Message-ID:
        <CANt7B+cAdvnSFaE-AhfY=BXEy+gYiK9267h6LGfFQkA_iV6dtQ@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
<Michael.Wojcik@xxxxxxxxxxxxxx> wrote:
>
> My advice, frankly, is to study the OpenSSL build process until you understand it. We've had
> issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with
> a wrapper program that corrects paths)

Forgot to mention; I'm building with ActiveState Perl from
http://www.ActiveState.com.

- Kim


------------------------------

Message: 4
Date: Tue, 8 Nov 2016 09:26:59 +0000
From: Erwann Abalea <Erwann.Abalea@xxxxxxxxxxxx>
To: Mofassir Ul Haque <mofassir_haque@xxxxxxxxx>,
        "openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
Subject: Re: (SPAM) Retrieving Root CA certificate
        using "openssl s_client -showcerts" command
Message-ID: <E5A79D33-600B-4C85-880C-C09A8109954F@xxxxxxxxxxxx>
Content-Type: text/plain; charset="utf-8"

Bonjour,

The root certificate is not expected to be sent by the server, as it already needs to be known and trusted by the client.
However, you?re free to configure your server to send it, for debugging or informational purposes.

Cordialement,
Erwann Abalea

Le 8 nov. 2016 ? 03:36, Mofassir Ul Haque <mofassir_haque@xxxxxxxxx<mailto:mofassir_haque@yahoo.com>> a ?crit :

Hi All,

The output of "openssl s_client -showcerts -connect ......." command dose not include Root certificate (which is expected behaviour). However, is it possible to configure Server to return Root CA certificate also ?

Thanks,

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20161108/92cdc4fb/attachment-0001.html>

------------------------------

Message: 5
Date: Tue, 8 Nov 2016 15:05:16 +0100
From: Jakob Bohm <jb-openssl@xxxxxxxxxx>
To: openssl-users@xxxxxxxxxxx
Subject: Re: Problem in compiling OpenSSL on
        Windows-7-32-bit
Message-ID: <fd0e5bb3-8b93-9ec9-48b3-849c26051301@xxxxxxxxxx>
Content-Type: text/plain; charset=windows-1252; format=flowed

On 08/11/2016 14:44, Kim Gr?sman wrote:
> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
> <Michael.Wojcik@xxxxxxxxxxxxxx> wrote:
>> My advice, frankly, is to study the OpenSSL build process until you understand it. We've had
>> issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with
>> a wrapper program that corrects paths)
> Forgot to mention; I'm building with ActiveState Perl from
> http://www.ActiveState.com.
>
That is the Perl most often quoted as causing problems.

Try Strawberry Perl from http://strawberryperl.com/(Strawberry Perl
is derived from vanilla Perl, hence the name).

Enjoy

Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 S?borg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded



------------------------------

Message: 6
Date: Tue, 8 Nov 2016 15:13:39 +0100
From: Kim Gr?sman <kim.grasman@xxxxxxxxx>
To: openssl-users@xxxxxxxxxxx
Subject: Re: Problem in compiling OpenSSL on
        Windows-7-32-bit
Message-ID:
        <CANt7B+cU045uE8S9f-f1s2zyZrZXcQm=u=73uEWwDqiANtvjdA@xxxxxxxxxxxxxx>
Content-Type: text/plain; charset=UTF-8

On Tue, Nov 8, 2016 at 3:05 PM, Jakob Bohm <jb-openssl@xxxxxxxxxx> wrote:
> On 08/11/2016 14:44, Kim Gr?sman wrote:
>>
>> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
>> <Michael.Wojcik@xxxxxxxxxxxxxx> wrote:
>>>
>>> My advice, frankly, is to study the OpenSSL build process until you
>>> understand it. We've had
>>> issues in the past with some Windows Perl implementations (currently we
>>> use Cygwin Perl with
>>> a wrapper program that corrects paths)
>>
>> Forgot to mention; I'm building with ActiveState Perl from
>> http://www.ActiveState.com.
>>
> That is the Perl most often quoted as causing problems.
>
> Try Strawberry Perl from http://strawberryperl.com/(Strawberry Perl
> is derived from vanilla Perl, hence the name).

Thanks Jakob. Funny though, it's building successfully here. The OP
hasn't reported his Perl dist yet.

I'll make a note to try with Strawberry Perl moving forward.

- Kim


------------------------------

Subject: Digest Footer

_______________________________________________
openssl-users mailing list
openssl-users@xxxxxxxxxxx
https://mta.openssl.org/mailman/listinfo/openssl-users


------------------------------

End of openssl-users Digest, Vol 24, Issue 16
*********************************************
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux