[openssl-users] openssl-users Digest, Vol 24, Issue 16

Tue Nov 8 14:47:09 UTC 2016

Your query is being processed

On 8 Nov 2016 2:14 p.m., <openssl-users-request at openssl.org> wrote:

> Send openssl-users mailing list submissions to
>         openssl-users at openssl.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://mta.openssl.org/mailman/listinfo/openssl-users
> or, via email, send a message with subject or body 'help' to
>         openssl-users-request at openssl.org
>
> You can reach the person managing the list at
>         openssl-users-owner at openssl.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of openssl-users digest..."
>
>
> Today's Topics:
>
>    1. Re: Retrieving Root CA certificate using "openssl s_client
>       -showcerts" command (Salz, Rich)
>    2. Re: Problem in compiling OpenSSL on Windows-7-32-bit
>       (Michael Wojcik)
>    3. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)
>    4. Re: (SPAM) Retrieving Root CA certificate using "openssl
>       s_client -showcerts" command (Erwann Abalea)
>    5. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Jakob Bohm)
>    6. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Kim Gr?sman)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 8 Nov 2016 12:48:05 +0000
> From: "Salz, Rich" <rsalz at akamai.com>
> To: Mofassir Ul Haque <mofassir_haque at yahoo.com>,
>         "openssl-users at openssl.org" <openssl-users at openssl.org>
> Subject: Re: [openssl-users] Retrieving Root CA certificate using
>         "openssl s_client -showcerts" command
> Message-ID:
>         <d0d55ec8a95b439ea54af80156934c38 at usma1ex-dag1mb1.msg.corp.
> akamai.com>
> Content-Type: text/plain; charset="utf-8"
>
> Yes, just put the entire chain in the server?s PEM file.
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://mta.openssl.org/pipermail/openssl-users/
> attachments/20161108/7be62e26/attachment-0001.html>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 8 Nov 2016 13:24:39 +0000
> From: Michael Wojcik <Michael.Wojcik at microfocus.com>
> To: "openssl-users at openssl.org" <openssl-users at openssl.org>
> Subject: Re: [openssl-users] Problem in compiling OpenSSL on
>         Windows-7-32-bit
> Message-ID:
>         <B550B44BF8AF314BB00C4E2AC1C18088015E6B611A at prvxmb03.
> microfocus.com>
> Content-Type: text/plain; charset="utf-8"
>
> [not quoting anything because Outlook can't quote HTML email properly]
>
> I build OpenSSL for static linking (though using a hacked configuration,
> since it's going to be linked into a DLL, and we do not want the C RTS
> linked statically). I've not seen any of these problems. We build on a
> variety of Windows versions, using a number of compiler versions (because
> inter-version compatibility still eludes Microsoft); we've been doing that
> since the 0.9.8 days, and now do it with each release of 1.0.2.
>
> My advice, frankly, is to study the OpenSSL build process until you
> understand it. We've had issues in the past with some Windows Perl
> implementations (currently we use Cygwin Perl with a wrapper program that
> corrects paths), and as I noted above, we've had to hack the configuration
> process (with scripts that run between the OpenSSL configuration step and
> the actual build). The OpenSSL build is not trivial, and the Windows
> toolchain is, in a word, terrible.
>
> I would also recommend getting nasm out of the Visual Studio tree, where
> it most definitely does not belong, and into a normal (non-spacey) path.
>
> Michael Wojcik
> Distinguished Engineer, Micro Focus
>
>
>
> ------------------------------
>
> Message: 3
> Date: Tue, 8 Nov 2016 14:44:01 +0100
> From: Kim Gr?sman <kim.grasman at gmail.com>
> To: openssl-users at openssl.org
> Subject: Re: [openssl-users] Problem in compiling OpenSSL on
>         Windows-7-32-bit
> Message-ID:
>         <CANt7B+cAdvnSFaE-AhfY=BXEy+gYiK9267h6LGfFQkA_iV6dtQ at mail.
> gmail.com>
> Content-Type: text/plain; charset=UTF-8
>
> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
> <Michael.Wojcik at microfocus.com> wrote:
> >
> > My advice, frankly, is to study the OpenSSL build process until you
> understand it. We've had
> > issues in the past with some Windows Perl implementations (currently we
> use Cygwin Perl with
> > a wrapper program that corrects paths)
>
> Forgot to mention; I'm building with ActiveState Perl from
> http://www.ActiveState.com.
>
> - Kim
>
>
> ------------------------------
>
> Message: 4
> Date: Tue, 8 Nov 2016 09:26:59 +0000
> From: Erwann Abalea <Erwann.Abalea at docusign.com>
> To: Mofassir Ul Haque <mofassir_haque at yahoo.com>,
>         "openssl-users at openssl.org" <openssl-users at openssl.org>
> Subject: Re: [openssl-users] (SPAM) Retrieving Root CA certificate
>         using "openssl s_client -showcerts" command
> Message-ID: <E5A79D33-600B-4C85-880C-C09A8109954F at docusign.com>
> Content-Type: text/plain; charset="utf-8"
>
> Bonjour,
>
> The root certificate is not expected to be sent by the server, as it
> already needs to be known and trusted by the client.
> However, you?re free to configure your server to send it, for debugging or
> informational purposes.
>
> Cordialement,
> Erwann Abalea
>
> Le 8 nov. 2016 ? 03:36, Mofassir Ul Haque <mofassir_haque at yahoo.com<
> mailto:mofassir_haque at yahoo.com>> a ?crit :
>
> Hi All,
>
> The output of "openssl s_client -showcerts -connect ......." command dose
> not include Root certificate (which is expected behaviour). However, is it
> possible to configure Server to return Root CA certificate also ?
>
> Thanks,
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://mta.openssl.org/pipermail/openssl-users/
> attachments/20161108/92cdc4fb/attachment-0001.html>
>
> ------------------------------
>
> Message: 5
> Date: Tue, 8 Nov 2016 15:05:16 +0100
> From: Jakob Bohm <jb-openssl at wisemo.com>
> To: openssl-users at openssl.org
> Subject: Re: [openssl-users] Problem in compiling OpenSSL on
>         Windows-7-32-bit
> Message-ID: <fd0e5bb3-8b93-9ec9-48b3-849c26051301 at wisemo.com>
> Content-Type: text/plain; charset=windows-1252; format=flowed
>
> On 08/11/2016 14:44, Kim Gr?sman wrote:
> > On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
> > <Michael.Wojcik at microfocus.com> wrote:
> >> My advice, frankly, is to study the OpenSSL build process until you
> understand it. We've had
> >> issues in the past with some Windows Perl implementations (currently we
> use Cygwin Perl with
> >> a wrapper program that corrects paths)
> > Forgot to mention; I'm building with ActiveState Perl from
> > http://www.ActiveState.com.
> >
> That is the Perl most often quoted as causing problems.
>
> Try Strawberry Perl from http://strawberryperl.com/(Strawberry Perl
> is derived from vanilla Perl, hence the name).
>
> Enjoy
>
> Jakob
> --
> Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
> Transformervej 29, 2860 S?borg, Denmark.  Direct +45 31 13 16 10
> This public discussion message is non-binding and may contain errors.
> WiseMo - Remote Service Management for PCs, Phones and Embedded
>
>
>
> ------------------------------
>
> Message: 6
> Date: Tue, 8 Nov 2016 15:13:39 +0100
> From: Kim Gr?sman <kim.grasman at gmail.com>
> To: openssl-users at openssl.org
> Subject: Re: [openssl-users] Problem in compiling OpenSSL on
>         Windows-7-32-bit
> Message-ID:
>         <CANt7B+cU045uE8S9f-f1s2zyZrZXcQm=u=73uEWwDqiANtvj
> dA at mail.gmail.com>
> Content-Type: text/plain; charset=UTF-8
>
> On Tue, Nov 8, 2016 at 3:05 PM, Jakob Bohm <jb-openssl at wisemo.com> wrote:
> > On 08/11/2016 14:44, Kim Gr?sman wrote:
> >>
> >> On Tue, Nov 8, 2016 at 2:24 PM, Michael Wojcik
> >> <Michael.Wojcik at microfocus.com> wrote:
> >>>
> >>> My advice, frankly, is to study the OpenSSL build process until you
> >>> understand it. We've had
> >>> issues in the past with some Windows Perl implementations (currently we
> >>> use Cygwin Perl with
> >>> a wrapper program that corrects paths)
> >>
> >> Forgot to mention; I'm building with ActiveState Perl from
> >> http://www.ActiveState.com.
> >>
> > That is the Perl most often quoted as causing problems.
> >
> > Try Strawberry Perl from http://strawberryperl.com/(Strawberry Perl
> > is derived from vanilla Perl, hence the name).
>
> Thanks Jakob. Funny though, it's building successfully here. The OP
> hasn't reported his Perl dist yet.
>
> I'll make a note to try with Strawberry Perl moving forward.
>
> - Kim
>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> openssl-users mailing list
> openssl-users at openssl.org
> https://mta.openssl.org/mailman/listinfo/openssl-users
>
>
> ------------------------------
>
> End of openssl-users Digest, Vol 24, Issue 16
> *********************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20161108/9cdb622f/attachment.html>