Re: pkcs12 seems to export keys even if -nokeys is used

2001-11-21 Thread Erich Titl

Hi Steve

At 12:48 21.11.2001 +, you wrote:

>You can't use a PKCS#12 file to import a CA certificate only into a
>browser. Read the FAQ for more info.

Sorry if this was pure RTFM

Erich


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



pkcs12 seems to export keys even if -nokeys is used

2001-11-21 Thread Erich Titl

Hi Folks

This refers to openssl 0.9.6b

I try to export a cacert to a pkcs12 file using

openssl pkcs12 -export  -inkey RufCA/private/cakey.pem -out cacerts.p12 
-cacerts -nokeys -name "Ruf CA Certificate" < RufCA/cacert.pem

Maybe I havent fully understood this but the -nokey should prevent the 
private key to be exported.

If I do

openssl pkcs12 -in cacerts.p12

I still get a private key displayed. What am I missing here

Thanks

Erich Titl

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Installation problem with OpenSSL..

2001-11-21 Thread Erich Titl

Hi

At 10:08 21.11.2001 +0100, you wrote:

>PS: I had mounted the sources required for the OpenSSL for my PowerPC from 
>a PC, where already a pre-complied version of openSSH and OpenSSL were 
>existing.
>
>Your's sincerely,
>Suja.
>
>Output:
>  File in wrong format: failed to merge target specific data of file 
> ../libcrypto.a(rc5_skey.o)
>sh: syntax error near unexpected token `../libcrypto.a(r'
>root:/openssh-2.9p1 > /usr/powerpc-hardhat-linux/bin/ld: r586-elf.o: 
>compiled for a little endian system and target is big endian
>sh: /usr/powerpc-hardhat-linux/bin/ld:: No such file or directory
>root:/openssh-2.9p1 > File in wrong format: failed to merge target 
>specific data of file ../libcrypto.a(r586-elf.o)

make clean may help

regards

Erich Titl


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: listening to browser output

2001-11-12 Thread Erich Titl

Hi
At 08:24 12.11.2001 +0100, you wrote:
>I am doing a lot of client programming replacing the browser by a client 
>program.
>To verify my program I look at the browser output with ngrep.
>But in case of SSL I don't see anything. Is there a solution for this need.

maybe ssldump ??

regards

Erich


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: openssl-0.9.6b on solaris-sparcv9-cc

2001-11-11 Thread Erich Titl

Hi

Aslam wrote the following at 19:48 09.11.2001:
>I'm trying to compile openssl-0.9.6b on solaris-sparcv9-cc.. and when I do 
>"make" as per the install in openssl-0.9.6b\.. I get following error message..
>
>$ make
>+ rm -f libcrypto.so.0
>+ rm -f libcrypto.so
>+ rm -f libcrypto.so.0.9.6
>+ rm -f libssl.so.0
>+ rm -f libssl.so
>+ rm -f libssl.so.0.9.6
>making all in crypto...
>cc -I. -I../include -KPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN 
>-DHAVE_DLFCN_H -xta
>rget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN 
>-DBN_DIV2W -DUL
>TRASPARC -DMD5_ASM  -c  cryptlib.c
>/usr/ucb/cc:  language optional software package not installed
>*** Error code 1
>make: Fatal error: Command failed for target `cryptlib.o'
>Current working directory /etc/export/home/openssl/openssl-0.9.6b/crypto
>*** Error code 1
>make: Fatal error: Command failed for target `sub_all'
>
>Could any one tell me what all he is asking about ??

Looks like you are missing some software on your solaris installation, e.g. 
the compiler
You might try to use gcc

regards

Erich Titl

THINK
Püntenstrasse 39
8143 Stallikon
mailto:[EMAIL PROTECTED]
PGP Fingerprint: BC9A 25BC 3954 3BC8 C024  8D8A B7D4 FF9D 05B8 0A16

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]