Re: problems with building openssl based plugin

2003-08-04 Thread Cyprian Zawadzki
QM wrote: [cut mu post] A bit scant on the info, but I have some guesses: The shared lib, net.so -- does nm show the function kluczyki() defined in that file? (i.e. is your library missing a .o file?) If so, how was your OpenSSL compiled: shared libs, static libs, both? Try linking against a

problems with libcrypto.so

2003-08-04 Thread Lopez, A.
I am trying to make freeradius 0.8.1 work with EAP-TLS and it is needed openssl 0.9.7 in order to make it work correctly. Openssl 0.9.6 was already installed in the machine I am using freeradius. The problem is that when I install openssl 0.9.7 and run freeradius (as especified in

OpenSSL OCSP interaction

2003-08-04 Thread Werner Johansson
Hi list! (Tried posting this a few days back, but it got lost in the process, trying again...) I have been experimenting with the OCSP client in OpenSSL, using a command line like this: openssl ocsp -issuer level3ca.cer -cert enduser1.cer -url http://ocsp-test -CAfile cafile.pem OpenSSL

Re: OpenSSL OCSP interaction

2003-08-04 Thread Dr. Stephen Henson
Responses inline. On Mon, Aug 04, 2003, Werner Johansson wrote: Hi list! (Tried posting this a few days back, but it got lost in the process, trying again...) I have been experimenting with the OCSP client in OpenSSL, using a command line like this: openssl ocsp -issuer level3ca.cer

RE: OpenSSL OCSP interaction

2003-08-04 Thread Werner Johansson
Thanks for the input! I see now how some of the options to the ocsp command would make sense (as it's being used as a test tool). What I was experimenting with here was the possibility to create a small module for Apache that could make an OCSP check before allowing a client to connect using

Need of client session reuse advice

2003-08-04 Thread Henrik Nordstrom
Hi, I am looking into how to best add client session reuse to Squid when acting as a SSL client. (yes, Squid does SSL these days) The playfield: * A single process * Having a large amount of SSL connections to a large amount of different places (servers), and some prefedined places (peers)

Signing a binary file

2003-08-04 Thread Danny Joseph
I am new in the openssl world so my questions migth be basic. I have a binary code file that I have to sign (using a private key and one or more certificat). It has to be PKCS#7(SHA1 with RSA encryption) DER encoded Signed Data. So : 1- I have to create a PKCS#7 data message from my

BN_mod_exp arguments

2003-08-04 Thread Tal Mozes
Hi, Is it safe to call BN_mod_exp() with the first ('r') argument being also one of the input arguments ('a' or 'p')? Same question about BN_mod_sub_quick and BN_mod_add_quick... Thanks. Tal. __ OpenSSL Project

Re: Need of client session reuse advice

2003-08-04 Thread Geoff Thorpe
Hi Henrik, On August 4, 2003 11:16 am, Henrik Nordstrom wrote: I am looking into how to best add client session reuse to Squid when acting as a SSL client. (yes, Squid does SSL these days) As an avid user of Squid, I'd certainly be chuffed if I can help. I think I have got the SSL_get1_sess

Re: Signing a binary file

2003-08-04 Thread Henrik Nordstrom
mån 2003-08-04 klockan 18.54 skrev Danny Joseph: I am new in the openssl world so my questions migth be basic. I have a binary code file that I have to sign (using a private key and one or more certificat). It has to be PKCS#7(SHA1 with RSA encryption) DER encoded Signed Data. So : 1-

how to copy_extension in 0.9.6?

2003-08-04 Thread Aleix Conchillo Flaque
hi! is there any way to do a copy_extension = copy as in 0.9.7 in version 0.9.6? thanks in advance. regards, aleix __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Need of client session reuse advice

2003-08-04 Thread Henrik Nordstrom
mån 2003-08-04 klockan 19.24 skrev Geoff Thorpe: Yes. There's normally no reason to cache more than one (client) session for any given server, and usually the best strategy is to cache the most recent one (or more correctly, the one that expires last). Question: how are you handling

Re: Signing a binary file

2003-08-04 Thread Dr. Stephen Henson
On Mon, Aug 04, 2003, Danny Joseph wrote: I am new in the openssl world so my questions migth be basic. I have a binary code file that I have to sign (using a private key and one or more certificat). It has to be PKCS#7(SHA1 with RSA encryption) DER encoded Signed Data. So : 1- I

ssl client authentication

2003-08-04 Thread David Mattes
hi, i'm trying to use OpenSSL s_client with OpenSC PKCS#15 engine. the engine works for operations such as key generation and PKCS#1 signatures. i've modified the s_client code to be able to use a private key on the smartcard via the OpenSC engine. i'm running into some problems with

Re: [OpenSC-devel] ssl client authentication

2003-08-04 Thread Nils Larsch
On Monday 04 August 2003 21:15, David Mattes wrote: hi, i'm trying to use OpenSSL s_client with OpenSC PKCS#15 engine. the engine works for operations such as key generation and PKCS#1 signatures. i've modified the s_client code to be able to use a private key on the smartcard via the

Need of FBI surveilence and PC monitoring invasion protection... ie Carnovore, etc....

2003-08-04 Thread buddy fancher
Hi there, I need some help from you guys. My computer mail and disk are constantly being written to and read back from an unknown source. I suggest perhaps Carnavore or something simular (FBI). This is an invasion of my civil rights and my privacy. I have had problems with the FBI trying to

Re: Need of FBI surveilence and PC monitoring invasion protection...ie Carnovore, etc....

2003-08-04 Thread Darya Mazandarany
I would suggest using PGP 8 with the encrypted disk partition. buddy fancher wrote: Hi there, I need some help from you guys. My computer mail and disk are constantly being written to and read back from an unknown source. I suggest perhaps Carnavore or something simular (FBI). This is an

Re: Need of FBI surveilence and PC monitoring invasion protection... ie Carnovore, etc....

2003-08-04 Thread Shawn P. Stanley
Perhaps some simple trepanation. Why is the FBI trying to destroy your life? Perhaps tackling the root of the problem will yield a more effective result. Using encryption will likely only serve to escalate the problem. On 8/4/03 5:49 PM, buddy fancher [EMAIL PROTECTED] wrote: Hi there, I

Re: Need of FBI surveilence and PC monitoring invasion protection... ie Carnovore, etc....

2003-08-04 Thread Louis LeBlanc
On 08/04/03 03:49 PM, buddy fancher sat at the `puter and typed: Hi there, I need some help from you guys. My computer mail and disk are constantly being written to and read back from an unknown source. I suggest perhaps Carnavore or something simular (FBI). This is an invasion of my civil

Re: Need of FBI surveilence and PC monitoring invasion protection...ie Carnovore, etc....

2003-08-04 Thread David Gianndrea
You may also want to scan your machine with PestPatrol. It can be setup to find all sorts of nasty stuff. You can download a eval that will show you what you caught. http://www.pestpatrol.com/ Louis LeBlanc wrote: On 08/04/03 03:49 PM, buddy fancher sat at the `puter and typed: Hi there, I

Re: how to copy_extension in 0.9.6?

2003-08-04 Thread Dr. Stephen Henson
On Mon, Aug 04, 2003, Aleix Conchillo Flaque wrote: hi! is there any way to do a copy_extension = copy as in 0.9.7 in version 0.9.6? Sorry no there isn't. The reason was that the only safe way to do this is if the user can clearly see what extensions they are consenting to add, otherwise

Re: OpenSSL OCSP interaction

2003-08-04 Thread Dr. Stephen Henson
On Mon, Aug 04, 2003, Werner Johansson wrote: Thanks for the input! I see now how some of the options to the ocsp command would make sense (as it's being used as a test tool). What I was experimenting with here was the possibility to create a small module for Apache that could make an OCSP