RE: RAND_load

2001-08-09 Thread Alex Cosic
On Fri, Aug 03, 2001 at 05:34:09PM +1000, Alex Cosic wrote: I have problem in understanding the command RAND_load_file(RANDOM, 64*1024); where RANDOM is randomfile.pem. I do not know how to design that particular file. Second, is it necessary that this file is changed on each time I run

Re: SSL versus Blowfish etc.

2001-08-09 Thread Martin Sjögren
On Wed, Aug 08, 2001 at 09:56:05AM -0700, Eric Rescorla wrote: Blowfish is an encryption algorithm. SSL is a communications security protocol that can use a number of encryption algorithms (including Blowfish in an experimental mode). Hmmm... Is it possible to use Blowfish with the SSL

LDAP+Delta CRL

2001-08-09 Thread Olivier Michiels
Hi, I have to publish Delta CRL on a ldap. Is there anything special to do to publish delta CRL ? Thanks Michiels Olivier __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Kenneth R. Robinette
Date sent: Wed, 8 Aug 2001 19:05:53 -0700 (PDT) From: Michael Shanzer [EMAIL PROTECTED] Subject:Re: Problems with SSL V3 and IIS To: [EMAIL PROTECTED] Send reply to: [EMAIL PROTECTED] Mike Yes, it does support pkcs-12

Bad request or OpenSSL bug

2001-08-09 Thread Hellan,Kim KHE
Below is an PKCS#10 request generated by a MS IIS 5 webserver. This request crashes OpenSSL (0.9.6) with an access violation on a Windows 2000 platform. I'm using: openssl req -inform PEM -in myreq.req -text I think I have an idea of what the problem is. This request contains an ST object in

WORLDS NO.1 .. MEGA EXPERIENCES!

2001-08-09 Thread MEGAHOT
Dear Ladies Gentlemen, Welcome to the GREATEST SEX SHOW on the ENTIRE NET ! We now offer you to ENTER the world´s No.1 voted SEX-SERVER on the WEB ! By far the largest and most incredible content of LIVE SEX is now served to users WORLDWIDE! EVERYTHING is offered 100% ANONOMOUSLY you

ocsp command

2001-08-09 Thread Yu Tang
Dear all, I download the openssl-0.9.6b software from the web. Now I try to use the ocsp command to generate a request on-line. Now I get an error: command not found Why?? Any help? Thanks very much in advance.RoseGet your FREE download of MSN Explorer at http://explorer.msn.com

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- Kenneth R. Robinette [EMAIL PROTECTED] wrote: Yes, it does support pkcs-12 but Microsoft refers to them as .pfx. Simple use the openssl command Eric referenced and use a filename such as out.pfx or rename a .p12 to .pfx Ken From the IIS key manager menu, there is a option to

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Kenneth R. Robinette
Date sent: Thu, 9 Aug 2001 06:00:17 -0700 (PDT) From: Michael Shanzer [EMAIL PROTECTED] Subject:Re: Problems with SSL V3 and IIS To: [EMAIL PROTECTED] Send reply to: [EMAIL PROTECTED] You must be running a version I have

RE: ocsp command

2001-08-09 Thread Olivier Michiels
Verify if the libcrypto.a in the folder /usr/lib is the same as the one in the openssl folder. I've had this problem also, because I've had the openssl RPM installed on my Linux. The ocsp command was not in the lib from the RPM then I've had to copy the lib myself in the good folder. I

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- Kenneth R. Robinette [EMAIL PROTECTED] You must be running a version I have never seen or a real old one. IIS 4.0 which is the latest version that runs under NT4. The behavior you are describing sounds like IE, which is much nicer about letting you export keys. Mike

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- Greg Stark [EMAIL PROTECTED] wrote: It would be easier to help you if you can get output from ssldump (www.rtfm.com/ssldump) for the failing connection attempt. Attached is the output of ssldump. Since I can not get the keys out of IIS All the data is still encrypted. Thanks for anyhelp!

How to generate a certificate request from HTML page

2001-08-09 Thread Yu Tang
I write a HTML page for collecting user information. Now I want to generate a private key and a certificate request file from a data file. How can I use Unix and Perl to do this job? I can only use req on Unix to generate a certificate request file by inputting data from the keyboard. I have

qcStatements

2001-08-09 Thread Benjamin Hille
Hello everyone, I am trying to use qcStatements with the x509 application. The object exists in the object defenition, but i don't seem to be able to use it in the extensions mechanism. Has anyone got a clue ? Thank you, Benjamin Hille

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Kenneth R. Robinette
Date sent: Thu, 9 Aug 2001 06:47:32 -0700 (PDT) From: Michael Shanzer [EMAIL PROTECTED] Subject:Re: Problems with SSL V3 and IIS To: [EMAIL PROTECTED] Send reply to: [EMAIL PROTECTED] Mike I missed the part about key

Re: Support for hardware

2001-08-09 Thread C Gould
SSL accelerator support is built in the engine code but you need to actually use the appropriate library calls in your code to utilize the hardware. The following code should get you started. ENGINE *e; ERR_load_ENGINE_strings; // load engine error strings e = ENGINE_by_id(cswift); //

SSL_writev()?

2001-08-09 Thread Miles Sabin
I've seen Tony Rogvall's post on this topic from a few months ago, http://marc.theaimsgroup.com/?l=openssl-usersw=2r=1s=writevq=b and I'd like to raise it again. I have excactly Tonys problem: I want to be able to accumulate several independent buffers worth of write data, HTTP headers and

When is it safe to renegotiate?

2001-08-09 Thread Martin Sjögren
It sounds and feels like a stupid question, but when is it actually safe to do a renegotiation? Here's my problem: A client and server exchange lots of messages asynchronously and since the messages are quite large from time to time, there's a buffering mechanism that only sends data after a

Re: How to generate a certificate request from HTML page

2001-08-09 Thread Jason Aras
there is a OpenSSL perl module that is just a front end to the openssl binary (i dont remember the url check CPAN), it should let you do it all. You can also just 'do it yourself' by passing all the arguments to openssl directly, it might not be a solution, but could be a starting point.

Re: SSL_writev()?

2001-08-09 Thread Eric Rescorla
Miles Sabin [EMAIL PROTECTED] writes: I've seen Tony Rogvall's post on this topic from a few months ago, http://marc.theaimsgroup.com/?l=openssl-usersw=2r=1s=writevq=b and I'd like to raise it again. I have excactly Tonys problem: I want to be able to accumulate several independent

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Eric Rescorla
Michael Shanzer [EMAIL PROTECTED] writes: [1 text/plain; us-ascii (7bit)] --- Greg Stark [EMAIL PROTECTED] wrote: It would be easier to help you if you can get output from ssldump (www.rtfm.com/ssldump) for the failing connection attempt. Attached is the output of ssldump. Since I

Client authentication succeeds with Netscape but failes with IE

2001-08-09 Thread Ori Yosefi
Hi all, I'm trying to write an application (an SSL server) that does client authentication. My application sends the certificate request using a renegotiate on an already open connection. When I connect to my applicatio with either an OpenSSL s_client or with Netscape, everything wroks fine.