Re: Interesting Handshake behaviour

1999-06-29 Thread Bodo Moeller
On Tue, Jun 29, 1999 at 12:42:38PM +0100, Sarah Bateman wrote: >> And I finally found the cause of your problem: You call >> BIO_sock_should_retry with the return value of SSL_accept. You should >> not do that, the BIO library already has done that when BIO_read and >> BIO_write were called by t

Programmatically exporing private key from Netscape

1999-06-29 Thread Allen Hadden
I'd like to programmatically export a user's private key from Navigator. I know the user can export it as a PKCS12 file, but I'd like to make it a little simpler for the user. I know that the private keys are stored in key3.db, which is in Berkeley DB 1.85 format. I suspect that the data is en

Re: rsa_oaep_test

1999-06-29 Thread Holger Reif
Dr Stephen Henson schrieb: > > Holger Reif wrote: > > > > Wouldn't it be a > > good idea to include it as "openssl rsa -verify"? > > > > Hmmm I was thinking of something analagous for some time but never got > round to it. There should be an RSA_check() function that will validate > an RSA priva

Re: CA list for client

1999-06-29 Thread Bodo Moeller
On Tue, Jun 29, 1999 at 12:51:40PM +0200, Oliver Floericke wrote: > is there somebody who can briefly describe how to configure a OpenSSL server > program in that way that it sends a list of acceptible ca's to the client? > I'm using client authentication and would like to decide on the client

Compiling OpenSSL on Win32 (again)

1999-06-29 Thread Ed Eddington
Users, I am having some trouble compiling on Win32's. I think the root of my problem is not having the right utilities to do the job (and/or knowledge!). I got the following tips about installing on Win32 from a previous note to the list... (scan down if this is familiar)

Re: rsa_oaep_test

1999-06-29 Thread Dr Stephen Henson
Holger Reif wrote: > > Hemant Jain schrieb: > > > > Holger, > > Here is the stack trace, if that helps: > > error:0407106B::lib(4) : func(113) : reason(107) > > error:04065072::lib(4) : func(101) : reason(114) > > This means padding check failed (reason 107) in function > private decrypt (func 1

Re: Signing external certs with local CA

1999-06-29 Thread Holger Reif
Dmitry Morozovsky schrieb: > > On Tue, 29 Jun 1999, Holger Reif wrote: > > [skip] > > > BTW why do you think it's wrong to issue completely > > new certs for your users that already have other > > certs? Don't you have more than one oficial id > > document like passport, drivers licence etc. >

Re: Signing external certs with local CA

1999-06-29 Thread Dmitry Morozovsky
On Tue, 29 Jun 1999, Holger Reif wrote: [skip] > BTW why do you think it's wrong to issue completely > new certs for your users that already have other > certs? Don't you have more than one oficial id > document like passport, drivers licence etc. Well, at least i prefer to minimize cases when

Re: Interesting Handshake behaviour

1999-06-29 Thread Sarah Bateman
Bodo Moeller wrote: > > So the callbacks that you mentioned are callbacks on an other level of > the program, not callbacks set inside the OpenSSL library, right? Yep this is correct. > I thought at first that you were using callbacks inside the BIO > sub-library. > > > A little more info... [s

CA list for client

1999-06-29 Thread Oliver Floericke
Hi there, is there somebody who can briefly describe how to configure a OpenSSL server program in that way that it sends a list of acceptible ca's to the client? I'm using client authentication and would like to decide on the client side that the client has the proper certificates for the server

Re: Problems when reusing sessions

1999-06-29 Thread Bodo Moeller
On Wed, Jul 28, 1999 at 06:32:56PM +0100, David J. Palaitis wrote: > i had a problem with session ID reuse and openSSL0.9.2b > i set the verify flags to > SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE | SSL_VERIFY_FAIL_IF_NO_PEER_CERT > but sessions weren't being reused,... [...] > SSL_set_session_id_

Re: error when compile openssl

1999-06-29 Thread Bodo Moeller
On Tue, Jun 29, 1999 at 10:00:57AM +0800, Sun JunXu wrote: > [...] there was an error, I captured it in .jpg in attached file [...] ^ What's that nonsense for? About all errors show in pure ASCII, which makes them readable, grep-a

Re: Signing external certs with local CA

1999-06-29 Thread Pete Chown
Dmitry Morozovsky wrote: > Now i've starring at the very special problem: when user already have > personal cert from one of master CA, it seems to be "Right Thing" to use > this cert for authorization instead of making another local user > certificate. As I understand, the best way to use it --

Re: OpenSSL+Mail

1999-06-29 Thread Holger Reif
This is not possible. Albeit there is some rudimentary support for S/MIME (used by eg. Messenger and Outlook) there is no integration into an email package known. Mr. Nopadon Sae-Han schrieb: > > Dear All, > How can I use mail with openssl like pgp (pine+pgp) > > Thank You, > -Nop > >

[FWD] Question for openssl-0.9.3a problems

1999-06-29 Thread OpenSSL
- Forwarded message from Ae Ja Jo <[EMAIL PROTECTED]> - From: Ae Ja Jo <[EMAIL PROTECTED]> Reply-To: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Question for openssl-0.9.3a problems Date: Tue, 29 Jun 1999 16:52:00 +0900 Importance: Normal Hi ! Let me introduce to you. I am a prog

Re: Signing external certs with local CA

1999-06-29 Thread Holger Reif
Dmitry Morozovsky schrieb: > > Now i've starring at the very special problem: when user already have > personal cert from one of master CA, it seems to be "Right Thing" to use > this cert for authorization instead of making another local user > certificate. As I understand, the best way to use it

Re: no shared cipher?

1999-06-29 Thread Holger Reif
Not: This is a mod_ssl related question. You should use modssl users list to ask this question! Anyway most probably you have restricted the cipherlist to contain only high grade ciphers and you try to connect with an export grade browser. What doesn openssl ciphers -v tell you? What have you se

Re: rsa_oaep_test

1999-06-29 Thread Holger Reif
Hemant Jain schrieb: > > Holger, > Here is the stack trace, if that helps: > error:0407106B::lib(4) : func(113) : reason(107) > error:04065072::lib(4) : func(101) : reason(114) This means padding check failed (reason 107) in function private decrypt (func 101) because of wrong block type (reason

OpenSSL+Mail

1999-06-29 Thread Mr. Nopadon Sae-Han
Dear All, How can I use mail with openssl like pgp (pine+pgp) Thank You, -Nop __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Auto