Problem with client certificate authentication.

2002-04-05 Thread Kevin Regan
I get the following error on the client: 24611:error:1409441B:SSL routines:SSL3_READ_BYTES:tlsv1 alert decrypt error:s3_pkt.c:985:SSL alert number 51 24611:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226: and on the server: 24610:error:0407006A:rsa routines:RSA_padd

Re: Problems installing openssl-0.9.6c on Windows 2000 box

2002-04-05 Thread Sean O'Riordain
Andrew, -> make[1]: gcc: Command not found it seems to me that make is trying to use the command "gcc"... but this is not available... as a double check try typing "gcc" at the command line... if that works double check your PATH... cheers, Sean Andrew Plata wrote: > Can anyone help me, > >

Problems installing openssl-0.9.6c on Windows 2000 box

2002-04-05 Thread Andrew Plata
Can anyone help me,   I am trying to install openssl-0.9.6c through cygwin on a Windows 2000 box. Here is the error message I receive when I run the make command.   Devon Jones@CR718118-A /tmp/openssl-0.9.6c$ make+ rm -f libcrypto+ rm -f libsslmaking all in crypto...make[1]: Entering direct

To: Francesco Dal Bello Re: R: need help

2002-04-05 Thread Red
thanks for help but nothing is still change now errors are: what can I do now? cl /Fotmp32\hw_aep.obj -Iinc32 -Itmp32 /MD /W3 /WX /G5 /Ox /O2 /Ob2 /Gs 0 /GF /Gy /nologo -DWIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DDSO_WIN32 /Fdout32 -c .\crypto\engine\hw_aep.c hw_aep.c C:\PROGRA~1\M

Re: Re: Exception With Attachment this time

2002-04-05 Thread Cameron Morris
Here is the sample I promised. Cameron Morris Novell, Inc., the leading provider of Net business solutions http://www.novell.com >>> "Cameron Morris" <[EMAIL PROTECTED]> 04/05/02 10:14AM >>> If you are using Sun's implementation of JSSE then you can set the "javax.net.debug=all" property and

Re: Exception

2002-04-05 Thread Cameron Morris
If you are using Sun's implementation of JSSE then you can set the "javax.net.debug=all" property and it will give you a lot more information. I've found it very usefull in figuring out problems like this. My guess would be that the program doesn't know where your keystore is. The keystore is

questions/RFEs about X509_NAME

2002-04-05 Thread Aleksey Sanin
Hi, All! I have few questions/RFEs to OpenSSL developers about X509 and X509_NAME structures. I run into some problems when I've tried to use some low-level functions and I wonder is it worth to patch OpenSSL instead writing custom functions in my library. I am not absolutelly sure that all my po

install SSLftp in Solaris 8 SPARC

2002-04-05 Thread Carlos Alberto Pelaez
Hello everybody. I try to install SSLftp 0.13 verison in a Solaris 8 SPARC box and i found problems. I edit the file Makefile and uncomment the line of SunOS 5 and make CC = gcc . etc. But, when i try to compile, appear errors with inet_addr.c, cmds.c, etc . Something can help me with th

Re: imaps/pop3s certificates

2002-04-05 Thread Sage
Mark, Thank you! I followed your suggestion and it works like a charm, so the problem itself is solved... of course, I'm not particularly sure why this works when the regular CA.pl signing script doesn't. What is being done here that isn't being done by the CA script? Sage - Original Mes

Problems installing openssl-0.9.6c on Windows 2000 box

2002-04-05 Thread [EMAIL PROTECTED]
Can anyone help me,   I am trying to install openssl-0.9.6c through cygwin on a Windows 2000 box. Here is the error message I receive when I run the make command.   Devon Jones@CR718118-A /tmp/openssl-0.9.6c$ make+ rm -f libcrypto+ rm -f libsslmaking all in crypto...make[1]: Entering directo

Re: Apache/OpenSSL Handshake timeout

2002-04-05 Thread Gary W
Jeremy, Server runs Solaris 2.6, client uses Netscape 4.79 and IE5 on W2k Gary Walton wrote: > > Question is this for winxp running IE5 or IE6? > > Jeremy Walton > DICE Corporation > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Gary W > S

RE: Apache/OpenSSL Handshake timeout

2002-04-05 Thread Jeremy Walton
Question is this for winxp running IE5 or IE6? Jeremy Walton DICE Corporation -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gary W Sent: Friday, April 05, 2002 11:44 AM To: [EMAIL PROTECTED] Subject: Apache/OpenSSL Handshake timeout I am getting a t

Apache/OpenSSL Handshake timeout

2002-04-05 Thread Gary W
I am getting a timeout error, from not reading all the bytes from the client(?). The client can talk to retrieve the jar file, but when it sends an RMI, it balks. I obviously have 8443 open for SSL, and my certs must be OK. Is it a client problem? Server: Apache/1.3.14, Interface: mod_ssl/2.7.1,

Re: Is OpenSSL Production Ready?

2002-04-05 Thread Lutz Jaenicke
On Fri, Apr 05, 2002 at 08:15:04AM -0500, Mark H. Wood wrote: > On Thu, 4 Apr 2002, Lutz Jaenicke wrote: > > To be precise: according to the OpenSSL license every program that uses > > the library and advertises its SSL capabilities also must advertise the > > use of OpenSSL. > > Actually this is

Exception

2002-04-05 Thread Zamangoer, Ferruh
Hi all, the following error occurs when I want make a search querie from Java ==> slapd. I have copy my selfsigned root certificate to client side and use the keytool to import the certificate into the keystore. Java output: Root exception is javax.net.ssl.SSLException: untrusted server cert ch

Re: FTP with SSL

2002-04-05 Thread Richard Koenning
At 01:55 05.04.2002 +0200, you wrote: >heh, i didn't mean to insult anyone of the great ppl who put a lot of effort >into the ftp-tls specs. i'm currently working on a client-side implemenation >myself. i spent lots of time to get the command & data encryption to work. it >was pretty hard for m

Re: Is OpenSSL Production Ready?

2002-04-05 Thread Mark H. Wood
On Thu, 4 Apr 2002, Lutz Jaenicke wrote: > To be precise: according to the OpenSSL license every program that uses > the library and advertises its SSL capabilities also must advertise the > use of OpenSSL. Actually this is a problem -- it means you can't link OpenSSL libraries with any GPLed cod

Re: Is OpenSSL Production Ready?

2002-04-05 Thread Mark H. Wood
On Thu, 4 Apr 2002, Michael Kobar wrote: [snip] > Perhaps OpenSSL.org should accept and post commercial product names > and/or start a voluntary "OpenSSL Inside" type branding program (like > the "powered by Apache" logo). Watch out for that "xxx Inside". I hear that Intel is suing some nonprofi

Re: About OpenSSL 0.9.7 release

2002-04-05 Thread Kenneth R. Robinette
Date sent: Fri, 5 Apr 2002 14:03:03 +0200 From: Lutz Jaenicke <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject:Re: About OpenSSL 0.9.7 release Organization: BTU Cottbus, Allgemeine Elektrotechnik Send reply to:

To: Francesco Dal Bello Re: R: need help

2002-04-05 Thread Alberto Isais
Thanks for replying again. Now, i have these error messages. Please help me again. Sorry for disturbing you again.   C:\openssl>nmake -f ms\nt.mak Microsoft (R) Program Maintenance Utility   Version 6.00.8168.0Copyright (C) Microsoft Corp 1988-1998. All rights reserved. Building OpenSSL    cl

Re: About OpenSSL 0.9.7 release

2002-04-05 Thread Lutz Jaenicke
On Fri, Apr 05, 2002 at 12:27:34PM +0200, Francesco Dal Bello wrote: > I'm planning my activity, and so I like to know (if possible) what is the >approximately time for 0.9.7 release. Nobody will give you a timeframe. (This is not meant as an offense. We are more or less waiting for one or two b