Can't get PKI Client Authentication Enforcement to work

2007-12-10 Thread Joseph Felten
I'm stumped so I thought I would give this list a try as I believe my problem is an openssl issue. Background: Building an SSL enabled Apache web server on a closed network. Apache under Solaris 8 OS. Need to restrict access to users with ID certificates issued by particular CA's (issued by par

Follow up - Re: Can't get PKI Client Authentication Enforcement to work

2007-12-10 Thread Joseph Felten
server including the one that issued the ID cert on the smart card. Quoting Joseph Felten <[EMAIL PROTECTED]>: > I'm stumped so I thought I would give this list a try as I believe my problem > is > an openssl issue. > > Background: Building an SSL enabled Apache web serv

NEVER MIND - Re: Can't get PKI Client Authentication Enforcement to work

2007-12-10 Thread Joseph Felten
efore posting to this mailing list, and a few hours after doing so, seem to have solved the problem. Sorry to have bothered everyone but maybe if someone else has the same problem in the future, they will find this and give their directory permissions a check. Quoting Joseph Felten <[EMAIL P

Re: AES 128 Counter mode

2007-12-11 Thread Joseph Felten
Perhaps you are using a different version, but if I do a "openssl -enc -ciphers" I just get the help list as there is no command. But if I use the "openssl ciphers" command, I receive the below response.: # openssl version OpenSSL 0.9.8e 23 Feb 2007 # openssl ciphers DHE-RSA-AES256-SHA:DHE-DSS-AE

Re: Upgrade shows wrong version

2008-03-25 Thread Joseph Felten
I just compiled it for SPARC Solaris and it reports the correct version.: # ./openssl version OpenSSL 0.9.8g 19 Oct 2007 But I have to go back and redo it because it dumped the binary in /usr/local/bin and I want it self contained in its own tree so it doesn't conflict with earlier versions. Quo

Problem making shared libraries on Solaris

2008-03-25 Thread Joseph Felten
I am getting an odd error when trying to create the shared libraries under SPARC Solaris 8. If I leave off the "shared" it all seems to build fine, but I need the shared libraries (for ssh). Here is my config command.: ./config --prefix=/usr/local/openssl.0.9.8g --openssldir=/usr/local/openssl.0

Re: Problem making shared libraries on Solaris

2008-03-27 Thread Joseph Felten
io 11 installation guide does say it requires "J2SE 1.4.2_08 technology or J2SE 5.0 Update 3". But as I wrote above, the Sun Sparc compiler did not fix my openssl 0.9.8g shared library link problem. Quoting Joseph Felten <[EMAIL PROTECTED]>: > I am getting an odd error when tryin

Solved - Re: Problem making shared libraries on Solaris

2008-03-28 Thread Joseph Felten
Got it. Using the sun Studio 11 C compiler and manually specifying: ./Configure solaris-sparcv8-cc --prefix=/usr/local/openssl.0.9.8g --openssldir=/usr/local/openssl.0.9.8g shared threads Thanks to those that helped! Quoting Carson Gaspar <[EMAIL PROTECTED]>: > Joseph Felten wrote

Re: AW: Problems about how to store private key safely

2008-03-31 Thread Joseph Felten
Quoting Emre Binisik <[EMAIL PROTECTED]>: > > -Ursprüngliche Nachricht- > > Von: [EMAIL PROTECTED] [mailto:owner-openssl- > > [EMAIL PROTECTED] Im Auftrag von [EMAIL PROTECTED] > > Gesendet: Samstag, 29. März 2008 20:34 > > An: openssl-users@openssl.org > > Betreff: Re: Problems about how

Flaw (IMO) in openssl 0.9.8g make install

2008-04-01 Thread Joseph Felten
"make install" created .../openssl.0.9.8g/include as 744. That means that other non-root build efforts will fail because they can't read the openssl header files. What is worse is that the resulting errors from make may be somewhat misleading. I ran in to this trying to build Apache 2.2.8 with -