Your query is being processed
On 8 Nov 2016 2:14 p.m., <openssl-users-request@xxxxxxxxxxx> wrote:
Send openssl-users mailing list submissions to
openssl-users@xxxxxxxxxxx
To subscribe or unsubscribe via the World Wide Web, visit
https://mta.openssl.org/mailman/listinfo/openssl-users
or, via email, send a message with subject or body 'help' to
openssl-users-request@openssl.org
You can reach the person managing the list at
openssl-users-owner@openssl.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of openssl-users digest..."
Today's Topics:
1. Re: Retrieving Root CA certificate using "openssl s_client
-showcerts" command (Salz, Rich)
2. Re: Problem in compiling OpenSSL on Windows-7-32-bit
(Michael Wojcik)
3. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)
4. Re: (SPAM) Retrieving Root CA certificate using "openssl
s_client -showcerts" command (Erwann Abalea)
5. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Jakob Bohm)
6. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)
------------------------------------------------------------ ----------
Message: 1
Date: Tue, 8 Nov 2016 12:48:05 +0000
From: "Salz, Rich" <rsalz@xxxxxxxxxx>
To: Mofassir Ul Haque <mofassir_haque@xxxxxxxxx>,
"openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
Subject: Re: Retrieving Root CA certificate using
"openssl s_client -showcerts" command
Message-ID:
<d0d55ec8a95b439ea54af80156934c38@xxxxxxxxxxxxxxxxxxxxxxxx. >akamai.com
Content-Type: text/plain; charset="utf-8"
Yes, just put the entire chain in the server?s PEM file.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/ >attachments/20161108/7be62e26/ attachment-0001.html
------------------------------
Message: 2
Date: Tue, 8 Nov 2016 13:24:39 +0000
From: Michael Wojcik <Michael.Wojcik@xxxxxxxxxxxxxx>
To: "openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
Subject: Re: Problem in compiling OpenSSL on
Windows-7-32-bit
Message-ID:
<B550B44BF8AF314BB00C4E2AC1C18088015E6B611A@prvxmb03. >microfocus.com
Content-Type: text/plain; charset="utf-8"
[not quoting anything because Outlook can't quote HTML email properly]
I build OpenSSL for static linking (though using a hacked configuration, since it's going to be linked into a DLL, and we do not want the C RTS linked statically). I've not seen any of these problems. We build on a variety of Windows versions, using a number of compiler versions (because inter-version compatibility still eludes Microsoft); we've been doing that since the 0.9.8 days, and now do it with each release of 1.0.2.
My advice, frankly, is to study the OpenSSL build process until you understand it. We've had issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with a wrapper program that corrects paths), and as I noted above, we've had to hack the configuration process (with scripts that run between the OpenSSL configuration step and the actual build). The OpenSSL build is not trivial, and the Windows toolchain is, in a word, terrible.
I would also recommend getting nasm out of the Visual Studio tree, where it most definitely does not belong, and into a normal (non-spacey) path.
Michael Wojcik
Distinguished Engineer, Micro Focus
------------------------------
Message: 3
Date: Tue, 8 Nov 2016 14:44:01 +0100
From: Kim Gr?sman <kim.grasman@xxxxxxxxx>
To: openssl-users@xxxxxxxxxxx
Subject: Re: Problem in compiling OpenSSL on
Windows-7-32-bit
Message-ID:
<CANt7B+cAdvnSFaE-AhfY=BXEy+gYiK9267h6LGfFQkA_iV6dtQ@mail. >gmail.com
Content-Type: text/plain; charset=UTF-8
On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
<Michael.Wojcik@xxxxxxxxxxxxxx> wrote:
>
> My advice, frankly, is to study the OpenSSL build process until you understand it. We've had
> issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with
> a wrapper program that corrects paths)
Forgot to mention; I'm building with ActiveState Perl from
http://www.ActiveState.com.
- Kim
------------------------------
Message: 4
Date: Tue, 8 Nov 2016 09:26:59 +0000
From: Erwann Abalea <Erwann.Abalea@xxxxxxxxxxxx>
To: Mofassir Ul Haque <mofassir_haque@xxxxxxxxx>,
"openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
Subject: Re: (SPAM) Retrieving Root CA certificate
using "openssl s_client -showcerts" command
Message-ID: <E5A79D33-600B-4C85-880C-C09A8109954F@xxxxxxxxxxxx >
Content-Type: text/plain; charset="utf-8"
Bonjour,
The root certificate is not expected to be sent by the server, as it already needs to be known and trusted by the client.
However, you?re free to configure your server to send it, for debugging or informational purposes.
Cordialement,
Erwann Abalea
Le 8 nov. 2016 ? 03:36, Mofassir Ul Haque <mofassir_haque@xxxxxxxxx<mailto:mofassir_haque@yahoo. com >> a ?crit :
Hi All,
The output of "openssl s_client -showcerts -connect ......." command dose not include Root certificate (which is expected behaviour). However, is it possible to configure Server to return Root CA certificate also ?
Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/ >attachments/20161108/92cdc4fb/ attachment-0001.html
------------------------------
Message: 5
Date: Tue, 8 Nov 2016 15:05:16 +0100
From: Jakob Bohm <jb-openssl@xxxxxxxxxx>
To: openssl-users@xxxxxxxxxxx
Subject: Re: Problem in compiling OpenSSL on
Windows-7-32-bit
Message-ID: <fd0e5bb3-8b93-9ec9-48b3-849c26051301@xxxxxxxxxx >
Content-Type: text/plain; charset=windows-1252; format=flowed
On 08/11/2016 14:44, Kim Gr?sman wrote:
> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
> <Michael.Wojcik@xxxxxxxxxxxxxx> wrote:
>> My advice, frankly, is to study the OpenSSL build process until you understand it. We've had
>> issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with
>> a wrapper program that corrects paths)
> Forgot to mention; I'm building with ActiveState Perl from
> http://www.ActiveState.com.
>
That is the Perl most often quoted as causing problems.
Try Strawberry Perl from http://strawberryperl.com/(Strawberry Perl
is derived from vanilla Perl, hence the name).
Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com
Transformervej 29, 2860 S?borg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
------------------------------
Message: 6
Date: Tue, 8 Nov 2016 15:13:39 +0100
From: Kim Gr?sman <kim.grasman@xxxxxxxxx>
To: openssl-users@xxxxxxxxxxx
Subject: Re: Problem in compiling OpenSSL on
Windows-7-32-bit
Message-ID:
<CANt7B+cU045uE8S9f-f1s2zyZrZXcQm=u=73uEWwDqiANtvj dA@xxxxxxxxxxxxxx >
Content-Type: text/plain; charset=UTF-8
On Tue, Nov 8, 2016 at 3:05 PM, Jakob Bohm <jb-openssl@xxxxxxxxxx> wrote:
> On 08/11/2016 14:44, Kim Gr?sman wrote:
>>
>> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
>> <Michael.Wojcik@xxxxxxxxxxxxxx> wrote:
>>>
>>> My advice, frankly, is to study the OpenSSL build process until you
>>> understand it. We've had
>>> issues in the past with some Windows Perl implementations (currently we
>>> use Cygwin Perl with
>>> a wrapper program that corrects paths)
>>
>> Forgot to mention; I'm building with ActiveState Perl from
>> http://www.ActiveState.com.
>>
> That is the Perl most often quoted as causing problems.
>
> Try Strawberry Perl from http://strawberryperl.com/(Strawberry Perl
> is derived from vanilla Perl, hence the name).
Thanks Jakob. Funny though, it's building successfully here. The OP
hasn't reported his Perl dist yet.
I'll make a note to try with Strawberry Perl moving forward.
- Kim
------------------------------
Subject: Digest Footer
_______________________________________________
openssl-users mailing list
openssl-users@xxxxxxxxxxx
https://mta.openssl.org/mailman/listinfo/openssl-users
------------------------------
End of openssl-users Digest, Vol 24, Issue 16
*********************************************
-- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
