<p dir="ltr">Your query is being processed</p>
<div class="gmail_extra"><br><div class="gmail_quote">On 8 Nov 2016 2:14 p.m., <<a href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl.org</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send openssl-users mailing list submissions to<br>
<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl.<wbr>org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:openssl-users-owner@openssl.org">openssl-users-owner@openssl.<wbr>org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of openssl-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Retrieving Root CA certificate using "openssl s_client<br>
-showcerts" command (Salz, Rich)<br>
2. Re: Problem in compiling OpenSSL on Windows-7-32-bit<br>
(Michael Wojcik)<br>
3. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)<br>
4. Re: (SPAM) Retrieving Root CA certificate using "openssl<br>
s_client -showcerts" command (Erwann Abalea)<br>
5. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Jakob Bohm)<br>
6. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)<br>
<br>
<br>
------------------------------<wbr>------------------------------<wbr>----------<br>
<br>
Message: 1<br>
Date: Tue, 8 Nov 2016 12:48:05 +0000<br>
From: "Salz, Rich" <<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br>
To: Mofassir Ul Haque <<a href="mailto:mofassir_haque@yahoo.com">mofassir_haque@yahoo.com</a>>,<br>
"<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: Re: [openssl-users] Retrieving Root CA certificate using<br>
"openssl s_client -showcerts" command<br>
Message-ID:<br>
<<a href="mailto:d0d55ec8a95b439ea54af80156934c38@usma1ex-dag1mb1.msg.corp.akamai.com">d0d55ec8a95b439ea54af80156934<wbr>c38@usma1ex-dag1mb1.msg.corp.<wbr>akamai.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Yes, just put the entire chain in the server?s PEM file.<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20161108/7be62e26/attachment-0001.html" rel="noreferrer" target="_blank">http://mta.openssl.org/<wbr>pipermail/openssl-users/<wbr>attachments/20161108/7be62e26/<wbr>attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Tue, 8 Nov 2016 13:24:39 +0000<br>
From: Michael Wojcik <<a href="mailto:Michael.Wojcik@microfocus.com">Michael.Wojcik@microfocus.com</a><wbr>><br>
To: "<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: Re: [openssl-users] Problem in compiling OpenSSL on<br>
Windows-7-32-bit<br>
Message-ID:<br>
<<a href="mailto:B550B44BF8AF314BB00C4E2AC1C18088015E6B611A@prvxmb03.microfocus.com">B550B44BF8AF314BB00C4E2AC1C18<wbr>088015E6B611A@prvxmb03.<wbr>microfocus.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
[not quoting anything because Outlook can't quote HTML email properly]<br>
<br>
I build OpenSSL for static linking (though using a hacked configuration, since it's going to be linked into a DLL, and we do not want the C RTS linked statically). I've not seen any of these problems. We build on a variety of Windows versions, using a number of compiler versions (because inter-version compatibility still eludes Microsoft); we've been doing that since the 0.9.8 days, and now do it with each release of 1.0.2.<br>
<br>
My advice, frankly, is to study the OpenSSL build process until you understand it. We've had issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with a wrapper program that corrects paths), and as I noted above, we've had to hack the configuration process (with scripts that run between the OpenSSL configuration step and the actual build). The OpenSSL build is not trivial, and the Windows toolchain is, in a word, terrible.<br>
<br>
I would also recommend getting nasm out of the Visual Studio tree, where it most definitely does not belong, and into a normal (non-spacey) path.<br>
<br>
Michael Wojcik<br>
Distinguished Engineer, Micro Focus<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Tue, 8 Nov 2016 14:44:01 +0100<br>
From: Kim Gr?sman <<a href="mailto:kim.grasman@gmail.com">kim.grasman@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Problem in compiling OpenSSL on<br>
Windows-7-32-bit<br>
Message-ID:<br>
<CANt7B+cAdvnSFaE-AhfY=<a href="mailto:BXEy%2BgYiK9267h6LGfFQkA_iV6dtQ@mail.gmail.com">BXEy+<wbr>gYiK9267h6LGfFQkA_iV6dtQ@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik<br>
<<a href="mailto:Michael.Wojcik@microfocus.com">Michael.Wojcik@microfocus.com</a><wbr>> wrote:<br>
><br>
> My advice, frankly, is to study the OpenSSL build process until you understand it. We've had<br>
> issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with<br>
> a wrapper program that corrects paths)<br>
<br>
Forgot to mention; I'm building with ActiveState Perl from<br>
<a href="http://www.ActiveState.com" rel="noreferrer" target="_blank">http://www.ActiveState.com</a>.<br>
<br>
- Kim<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Tue, 8 Nov 2016 09:26:59 +0000<br>
From: Erwann Abalea <<a href="mailto:Erwann.Abalea@docusign.com">Erwann.Abalea@docusign.com</a>><br>
To: Mofassir Ul Haque <<a href="mailto:mofassir_haque@yahoo.com">mofassir_haque@yahoo.com</a>>,<br>
"<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: Re: [openssl-users] (SPAM) Retrieving Root CA certificate<br>
using "openssl s_client -showcerts" command<br>
Message-ID: <<a href="mailto:E5A79D33-600B-4C85-880C-C09A8109954F@docusign.com">E5A79D33-600B-4C85-880C-<wbr>C09A8109954F@docusign.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Bonjour,<br>
<br>
The root certificate is not expected to be sent by the server, as it already needs to be known and trusted by the client.<br>
However, you?re free to configure your server to send it, for debugging or informational purposes.<br>
<br>
Cordialement,<br>
Erwann Abalea<br>
<br>
Le 8 nov. 2016 ? 03:36, Mofassir Ul Haque <<a href="mailto:mofassir_haque@yahoo.com">mofassir_haque@yahoo.com</a><<wbr>mailto:<a href="mailto:mofassir_haque@yahoo.com">mofassir_haque@yahoo.<wbr>com</a>>> a ?crit :<br>
<br>
Hi All,<br>
<br>
The output of "openssl s_client -showcerts -connect ......." command dose not include Root certificate (which is expected behaviour). However, is it possible to configure Server to return Root CA certificate also ?<br>
<br>
Thanks,<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20161108/92cdc4fb/attachment-0001.html" rel="noreferrer" target="_blank">http://mta.openssl.org/<wbr>pipermail/openssl-users/<wbr>attachments/20161108/92cdc4fb/<wbr>attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Tue, 8 Nov 2016 15:05:16 +0100<br>
From: Jakob Bohm <<a href="mailto:jb-openssl@wisemo.com">jb-openssl@wisemo.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Problem in compiling OpenSSL on<br>
Windows-7-32-bit<br>
Message-ID: <<a href="mailto:fd0e5bb3-8b93-9ec9-48b3-849c26051301@wisemo.com">fd0e5bb3-8b93-9ec9-48b3-<wbr>849c26051301@wisemo.com</a>><br>
Content-Type: text/plain; charset=windows-1252; format=flowed<br>
<br>
On 08/11/2016 14:44, Kim Gr?sman wrote:<br>
> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik<br>
> <<a href="mailto:Michael.Wojcik@microfocus.com">Michael.Wojcik@microfocus.com</a><wbr>> wrote:<br>
>> My advice, frankly, is to study the OpenSSL build process until you understand it. We've had<br>
>> issues in the past with some Windows Perl implementations (currently we use Cygwin Perl with<br>
>> a wrapper program that corrects paths)<br>
> Forgot to mention; I'm building with ActiveState Perl from<br>
> <a href="http://www.ActiveState.com" rel="noreferrer" target="_blank">http://www.ActiveState.com</a>.<br>
><br>
That is the Perl most often quoted as causing problems.<br>
<br>
Try Strawberry Perl from <a href="http://strawberryperl.com/(Strawberry" rel="noreferrer" target="_blank">http://strawberryperl.com/(<wbr>Strawberry</a> Perl<br>
is derived from vanilla Perl, hence the name).<br>
<br>
Enjoy<br>
<br>
Jakob<br>
--<br>
Jakob Bohm, CIO, Partner, WiseMo A/S. <a href="https://www.wisemo.com" rel="noreferrer" target="_blank">https://www.wisemo.com</a><br>
Transformervej 29, 2860 S?borg, Denmark. Direct <a href="tel:%2B45%2031%2013%2016%2010" value="+4531131610">+45 31 13 16 10</a><br>
This public discussion message is non-binding and may contain errors.<br>
WiseMo - Remote Service Management for PCs, Phones and Embedded<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Tue, 8 Nov 2016 15:13:39 +0100<br>
From: Kim Gr?sman <<a href="mailto:kim.grasman@gmail.com">kim.grasman@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Problem in compiling OpenSSL on<br>
Windows-7-32-bit<br>
Message-ID:<br>
<CANt7B+cU045uE8S9f-<wbr>f1s2zyZrZXcQm=u=<a href="mailto:73uEWwDqiANtvjdA@mail.gmail.com">73uEWwDqiANtvj<wbr>dA@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
On Tue, Nov 8, 2016 at 3:05 PM, Jakob Bohm <<a href="mailto:jb-openssl@wisemo.com">jb-openssl@wisemo.com</a>> wrote:<br>
> On 08/11/2016 14:44, Kim Gr?sman wrote:<br>
>><br>
>> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik<br>
>> <<a href="mailto:Michael.Wojcik@microfocus.com">Michael.Wojcik@microfocus.com</a><wbr>> wrote:<br>
>>><br>
>>> My advice, frankly, is to study the OpenSSL build process until you<br>
>>> understand it. We've had<br>
>>> issues in the past with some Windows Perl implementations (currently we<br>
>>> use Cygwin Perl with<br>
>>> a wrapper program that corrects paths)<br>
>><br>
>> Forgot to mention; I'm building with ActiveState Perl from<br>
>> <a href="http://www.ActiveState.com" rel="noreferrer" target="_blank">http://www.ActiveState.com</a>.<br>
>><br>
> That is the Perl most often quoted as causing problems.<br>
><br>
> Try Strawberry Perl from <a href="http://strawberryperl.com/(Strawberry" rel="noreferrer" target="_blank">http://strawberryperl.com/(<wbr>Strawberry</a> Perl<br>
> is derived from vanilla Perl, hence the name).<br>
<br>
Thanks Jakob. Funny though, it's building successfully here. The OP<br>
hasn't reported his Perl dist yet.<br>
<br>
I'll make a note to try with Strawberry Perl moving forward.<br>
<br>
- Kim<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
______________________________<wbr>_________________<br>
openssl-users mailing list<br>
<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of openssl-users Digest, Vol 24, Issue 16<br>
******************************<wbr>***************<br>
</blockquote></div></div>