ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂð£¿

2001-12-04 Thread ÄãµÄÅóÓÑ





  
  

  

  


  
  
  
  

  


  
  
  

  
  

  


  

  
  

  ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂ𣿡ª¡ªÏêϸ×ÊÁÏÇëµã»÷ 
  ÕâÁ½Ä꣬µ½´¦¶¼ÔÚ¸ãÉÏÍø¹¤³Ì£¬Ì¸ÂÛÈý´óÒªËØ£ºInfrastructure»ù´¡ÉèÊ©¡¢ApplicationÓ¦Óá¢InformationÐÅÏ¢£¬ÕâÈý´óÒªËر»ÐÎÏóµØ±ÈÓ÷ΪÐÅÏ¢¸ßËÙ¹«Â·¡¢³µºÍ»õ¡£µ«ÊÇ£¬ÓÐÒ»¸ö·Ç³£ÖØÒªµÄÒªËر»ºöÂÔÁË£¬ÄǾÍÊǹÜÀí¡£¸ù¾ÝFBIµÄÑо¿±íÃ÷£ºÓÉÓÚÉÏÍøδʵʩ¹ÜÀí¶øÒý·¢µÄ²ÆÎñºÍ°²È«ÎÊÌâÖУ¬97%ÊÇÓÉÓÚÄÚ²¿ÈËÔ±ÀÄÓÃÍøÂç·ÃÎÊ£¬55%ÊÇÄÚ²¿ÈËÔ±·Ç·¨·ÃÎÊ¡£ÔÚʵʩÉÏÍø¹ÜÀíµÄ»ú¹¹£¬³É±¾·ÑÓÃÖ§³öºÍ°²È«ÎÊÌⶼµÃµ½ÓÐЧµÄ¿ØÖÆ£¬Ð§ÂÊ´ó·ù¶ÈÌá¸ß¡£¡­¡­ 
  
  ÄúÒѾ­ÔÚ¿¼ÂÇÉÏÍø¹ÜÀí£¬µ«ÊÇÄúÓÐËù¹ËÂÇ£º 
  ÄúºÜÏ뽫ÉÏÍø¹ÜºÃ£¬µ«ÊÇÄúÓÐËùµ£ÓÇ£»ÄúÒѾ­¿¼ÂÇÉÏÍø¹ÜÀíÁË£¬µ«ÊÇÄúÓöµ½ÁËеÄÂé·³£º
  (1) 
  Ñ¡Ë­µÄºÃÄØ£¿
  (2) 
  ÔõÑù²ÅÄܱÜÃâÅäÖú͹ÜÀíÌ«¸´ÔÓµÄÎÊÌâÄØ£¿
  (3) 
  ÈçºÎ±ÜÃâÖظ´»¨Ç®ÎÊÌâÄØ£¿ 
  Òײ©BroadenGate£¬È«·½Î»ÉÏÍø¹ÜÀí£¬¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸ 
  
  Òײ©Êǹú¼ÊÖªÃûµÄÈí¼þ¿ª·¢É̺ͷþÎñÍâ°üÉÌ£¬ÔÚ»¥ÁªÍø¼¼ÊõÁìÓò¾ßÓÐ6ÄêÒÔÉϵÄרҵ¾­Ñ飬ÏÖÓÐÔ±¹¤½ü400ÈË¡£Òײ©ÒÔ¡°È«·½Î»ÉÏÍø¹ÜÀí¡±ÎªÌØÉ«µÄBroadenGateÉÏÍø¹ÜÀí²úÆ·£¬³«µ¼¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸£¬ÒýÓò¿Êð»¥ÁªÍøÓ¦ÓÃÕâһз½·¨£¬ÈÃÄúµÄÉÏÍø¹ÜÀíʡʱ¡¢Ê¡Á¦¡¢Ê¡ÐÄ¡¢Ê¡Ç®¡£
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ²úÆ·Ïß 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ·þÎñÌåϵ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»¿Í»§µÄÊ¢Óþ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»ºÏ×÷»ï°éµÄÖ§³Ö
  ¡¡
  ÈçÓûÁ˽â²úÆ·ºÍ·þÎñÏêϸÐÅÏ¢£¬ÇëÁªÏµ£º
  ×îвúÆ·ÏêϸÐÅÏ¢£º²úÆ·¾­Àí£º¶Å°®Æ¼[EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת300
  ÖйúÇøÓò²úÆ·×Éѯ£ºÏúÊÛЭÀí£ºÐ¤½Ý [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת118
  Öйú±±·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÌÆÀö [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת127
  ÖйúÄÏ·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£º·ë½¨Ó [EMAIL PROTECTED] 
  µç»°£º0755-6716652/54ת
  Öйú¶«²¿ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÐ¤Ô½Éî [EMAIL PROTECTED] 
  µç»°£º021-64383414/3854ת
  ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾
  µØÖ·£º£¨15£©±±¾©¶«ËÄÄÏ´ó½Ö249ºÅ±±¼Æ´óÂ¥7²ã
  µç»°£º010-65224665/67 65239715/17/35/36/37/39 
  ´«Õ棺010-65239897 
  


  
  
·µ»Ø

  
  

  
°æȨËùÓÐ ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾ 

  
  

  


  ¹ØÓÚBroadenGate
  |
  ºÏ×÷»ï°é
  |
  ÍøÕ¾µ¼º½ 
  |
  ÁªÏµ·½Ê½ 
  |
  °æȨÉùÃ÷ 

  ¡¶µçÐÅÓëÐÅÏ¢·þÎñÒµÎñ¾­ÓªÐí¿ÉÖ¤¡·±àºÅ£º¾©ICPÖ¤000109 




ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂð£¿

2001-12-04 Thread ÄãµÄÅóÓÑ





  
  

  

  


  
  
  
  

  


  
  
  

  
  

  


  

  
  

  ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂ𣿡ª¡ªÏêϸ×ÊÁÏÇëµã»÷ 
  ÕâÁ½Ä꣬µ½´¦¶¼ÔÚ¸ãÉÏÍø¹¤³Ì£¬Ì¸ÂÛÈý´óÒªËØ£ºInfrastructure»ù´¡ÉèÊ©¡¢ApplicationÓ¦Óá¢InformationÐÅÏ¢£¬ÕâÈý´óÒªËر»ÐÎÏóµØ±ÈÓ÷ΪÐÅÏ¢¸ßËÙ¹«Â·¡¢³µºÍ»õ¡£µ«ÊÇ£¬ÓÐÒ»¸ö·Ç³£ÖØÒªµÄÒªËر»ºöÂÔÁË£¬ÄǾÍÊǹÜÀí¡£¸ù¾ÝFBIµÄÑо¿±íÃ÷£ºÓÉÓÚÉÏÍøδʵʩ¹ÜÀí¶øÒý·¢µÄ²ÆÎñºÍ°²È«ÎÊÌâÖУ¬97%ÊÇÓÉÓÚÄÚ²¿ÈËÔ±ÀÄÓÃÍøÂç·ÃÎÊ£¬55%ÊÇÄÚ²¿ÈËÔ±·Ç·¨·ÃÎÊ¡£ÔÚʵʩÉÏÍø¹ÜÀíµÄ»ú¹¹£¬³É±¾·ÑÓÃÖ§³öºÍ°²È«ÎÊÌⶼµÃµ½ÓÐЧµÄ¿ØÖÆ£¬Ð§ÂÊ´ó·ù¶ÈÌá¸ß¡£¡­¡­ 
  
  ÄúÒѾ­ÔÚ¿¼ÂÇÉÏÍø¹ÜÀí£¬µ«ÊÇÄúÓÐËù¹ËÂÇ£º 
  ÄúºÜÏ뽫ÉÏÍø¹ÜºÃ£¬µ«ÊÇÄúÓÐËùµ£ÓÇ£»ÄúÒѾ­¿¼ÂÇÉÏÍø¹ÜÀíÁË£¬µ«ÊÇÄúÓöµ½ÁËеÄÂé·³£º
  (1) 
  Ñ¡Ë­µÄºÃÄØ£¿
  (2) 
  ÔõÑù²ÅÄܱÜÃâÅäÖú͹ÜÀíÌ«¸´ÔÓµÄÎÊÌâÄØ£¿
  (3) 
  ÈçºÎ±ÜÃâÖظ´»¨Ç®ÎÊÌâÄØ£¿ 
  Òײ©BroadenGate£¬È«·½Î»ÉÏÍø¹ÜÀí£¬¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸ 
  
  Òײ©Êǹú¼ÊÖªÃûµÄÈí¼þ¿ª·¢É̺ͷþÎñÍâ°üÉÌ£¬ÔÚ»¥ÁªÍø¼¼ÊõÁìÓò¾ßÓÐ6ÄêÒÔÉϵÄרҵ¾­Ñ飬ÏÖÓÐÔ±¹¤½ü400ÈË¡£Òײ©ÒÔ¡°È«·½Î»ÉÏÍø¹ÜÀí¡±ÎªÌØÉ«µÄBroadenGateÉÏÍø¹ÜÀí²úÆ·£¬³«µ¼¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸£¬ÒýÓò¿Êð»¥ÁªÍøÓ¦ÓÃÕâһз½·¨£¬ÈÃÄúµÄÉÏÍø¹ÜÀíʡʱ¡¢Ê¡Á¦¡¢Ê¡ÐÄ¡¢Ê¡Ç®¡£
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ²úÆ·Ïß 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ·þÎñÌåϵ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»¿Í»§µÄÊ¢Óþ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»ºÏ×÷»ï°éµÄÖ§³Ö
  ¡¡
  ÈçÓûÁ˽â²úÆ·ºÍ·þÎñÏêϸÐÅÏ¢£¬ÇëÁªÏµ£º
  ×îвúÆ·ÏêϸÐÅÏ¢£º²úÆ·¾­Àí£º¶Å°®Æ¼[EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת300
  ÖйúÇøÓò²úÆ·×Éѯ£ºÏúÊÛЭÀí£ºÐ¤½Ý [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת118
  Öйú±±·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÌÆÀö [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת127
  ÖйúÄÏ·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£º·ë½¨Ó [EMAIL PROTECTED] 
  µç»°£º0755-6716652/54ת
  Öйú¶«²¿ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÐ¤Ô½Éî [EMAIL PROTECTED] 
  µç»°£º021-64383414/3854ת
  ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾
  µØÖ·£º£¨15£©±±¾©¶«ËÄÄÏ´ó½Ö249ºÅ±±¼Æ´óÂ¥7²ã
  µç»°£º010-65224665/67 65239715/17/35/36/37/39 
  ´«Õ棺010-65239897 
  


  
  
·µ»Ø

  
  

  
°æȨËùÓÐ ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾ 

  
  

  


  ¹ØÓÚBroadenGate
  |
  ºÏ×÷»ï°é
  |
  ÍøÕ¾µ¼º½ 
  |
  ÁªÏµ·½Ê½ 
  |
  °æȨÉùÃ÷ 

  ¡¶µçÐÅÓëÐÅÏ¢·þÎñÒµÎñ¾­ÓªÐí¿ÉÖ¤¡·±àºÅ£º¾©ICPÖ¤000109 




ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂð£¿

2001-12-04 Thread ÄãµÄÅóÓÑ





  
  

  

  


  
  
  
  

  


  
  
  

  
  

  


  

  
  

  ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂ𣿡ª¡ªÏêϸ×ÊÁÏÇëµã»÷ 
  ÕâÁ½Ä꣬µ½´¦¶¼ÔÚ¸ãÉÏÍø¹¤³Ì£¬Ì¸ÂÛÈý´óÒªËØ£ºInfrastructure»ù´¡ÉèÊ©¡¢ApplicationÓ¦Óá¢InformationÐÅÏ¢£¬ÕâÈý´óÒªËر»ÐÎÏóµØ±ÈÓ÷ΪÐÅÏ¢¸ßËÙ¹«Â·¡¢³µºÍ»õ¡£µ«ÊÇ£¬ÓÐÒ»¸ö·Ç³£ÖØÒªµÄÒªËر»ºöÂÔÁË£¬ÄǾÍÊǹÜÀí¡£¸ù¾ÝFBIµÄÑо¿±íÃ÷£ºÓÉÓÚÉÏÍøδʵʩ¹ÜÀí¶øÒý·¢µÄ²ÆÎñºÍ°²È«ÎÊÌâÖУ¬97%ÊÇÓÉÓÚÄÚ²¿ÈËÔ±ÀÄÓÃÍøÂç·ÃÎÊ£¬55%ÊÇÄÚ²¿ÈËÔ±·Ç·¨·ÃÎÊ¡£ÔÚʵʩÉÏÍø¹ÜÀíµÄ»ú¹¹£¬³É±¾·ÑÓÃÖ§³öºÍ°²È«ÎÊÌⶼµÃµ½ÓÐЧµÄ¿ØÖÆ£¬Ð§ÂÊ´ó·ù¶ÈÌá¸ß¡£¡­¡­ 
  
  ÄúÒѾ­ÔÚ¿¼ÂÇÉÏÍø¹ÜÀí£¬µ«ÊÇÄúÓÐËù¹ËÂÇ£º 
  ÄúºÜÏ뽫ÉÏÍø¹ÜºÃ£¬µ«ÊÇÄúÓÐËùµ£ÓÇ£»ÄúÒѾ­¿¼ÂÇÉÏÍø¹ÜÀíÁË£¬µ«ÊÇÄúÓöµ½ÁËеÄÂé·³£º
  (1) 
  Ñ¡Ë­µÄºÃÄØ£¿
  (2) 
  ÔõÑù²ÅÄܱÜÃâÅäÖú͹ÜÀíÌ«¸´ÔÓµÄÎÊÌâÄØ£¿
  (3) 
  ÈçºÎ±ÜÃâÖظ´»¨Ç®ÎÊÌâÄØ£¿ 
  Òײ©BroadenGate£¬È«·½Î»ÉÏÍø¹ÜÀí£¬¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸ 
  
  Òײ©Êǹú¼ÊÖªÃûµÄÈí¼þ¿ª·¢É̺ͷþÎñÍâ°üÉÌ£¬ÔÚ»¥ÁªÍø¼¼ÊõÁìÓò¾ßÓÐ6ÄêÒÔÉϵÄרҵ¾­Ñ飬ÏÖÓÐÔ±¹¤½ü400ÈË¡£Òײ©ÒÔ¡°È«·½Î»ÉÏÍø¹ÜÀí¡±ÎªÌØÉ«µÄBroadenGateÉÏÍø¹ÜÀí²úÆ·£¬³«µ¼¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸£¬ÒýÓò¿Êð»¥ÁªÍøÓ¦ÓÃÕâһз½·¨£¬ÈÃÄúµÄÉÏÍø¹ÜÀíʡʱ¡¢Ê¡Á¦¡¢Ê¡ÐÄ¡¢Ê¡Ç®¡£
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ²úÆ·Ïß 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ·þÎñÌåϵ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»¿Í»§µÄÊ¢Óþ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»ºÏ×÷»ï°éµÄÖ§³Ö
  ¡¡
  ÈçÓûÁ˽â²úÆ·ºÍ·þÎñÏêϸÐÅÏ¢£¬ÇëÁªÏµ£º
  ×îвúÆ·ÏêϸÐÅÏ¢£º²úÆ·¾­Àí£º¶Å°®Æ¼[EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת300
  ÖйúÇøÓò²úÆ·×Éѯ£ºÏúÊÛЭÀí£ºÐ¤½Ý [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת118
  Öйú±±·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÌÆÀö [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת127
  ÖйúÄÏ·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£º·ë½¨Ó [EMAIL PROTECTED] 
  µç»°£º0755-6716652/54ת
  Öйú¶«²¿ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÐ¤Ô½Éî [EMAIL PROTECTED] 
  µç»°£º021-64383414/3854ת
  ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾
  µØÖ·£º£¨15£©±±¾©¶«ËÄÄÏ´ó½Ö249ºÅ±±¼Æ´óÂ¥7²ã
  µç»°£º010-65224665/67 65239715/17/35/36/37/39 
  ´«Õ棺010-65239897 
  


  
  
·µ»Ø

  
  

  
°æȨËùÓÐ ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾ 

  
  

  


  ¹ØÓÚBroadenGate
  |
  ºÏ×÷»ï°é
  |
  ÍøÕ¾µ¼º½ 
  |
  ÁªÏµ·½Ê½ 
  |
  °æȨÉùÃ÷ 

  ¡¶µçÐÅÓëÐÅÏ¢·þÎñÒµÎñ¾­ÓªÐí¿ÉÖ¤¡·±àºÅ£º¾©ICPÖ¤000109 




ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂð£¿

2001-12-04 Thread ÄãµÄÅóÓÑ





  
  

  

  


  
  
  
  

  


  
  
  

  
  

  


  

  
  

  ÉÏÍø£¬Äú¿¼ÂǹÜÀíÁËÂ𣿡ª¡ªÏêϸ×ÊÁÏÇëµã»÷ 
  ÕâÁ½Ä꣬µ½´¦¶¼ÔÚ¸ãÉÏÍø¹¤³Ì£¬Ì¸ÂÛÈý´óÒªËØ£ºInfrastructure»ù´¡ÉèÊ©¡¢ApplicationÓ¦Óá¢InformationÐÅÏ¢£¬ÕâÈý´óÒªËر»ÐÎÏóµØ±ÈÓ÷ΪÐÅÏ¢¸ßËÙ¹«Â·¡¢³µºÍ»õ¡£µ«ÊÇ£¬ÓÐÒ»¸ö·Ç³£ÖØÒªµÄÒªËر»ºöÂÔÁË£¬ÄǾÍÊǹÜÀí¡£¸ù¾ÝFBIµÄÑо¿±íÃ÷£ºÓÉÓÚÉÏÍøδʵʩ¹ÜÀí¶øÒý·¢µÄ²ÆÎñºÍ°²È«ÎÊÌâÖУ¬97%ÊÇÓÉÓÚÄÚ²¿ÈËÔ±ÀÄÓÃÍøÂç·ÃÎÊ£¬55%ÊÇÄÚ²¿ÈËÔ±·Ç·¨·ÃÎÊ¡£ÔÚʵʩÉÏÍø¹ÜÀíµÄ»ú¹¹£¬³É±¾·ÑÓÃÖ§³öºÍ°²È«ÎÊÌⶼµÃµ½ÓÐЧµÄ¿ØÖÆ£¬Ð§ÂÊ´ó·ù¶ÈÌá¸ß¡£¡­¡­ 
  
  ÄúÒѾ­ÔÚ¿¼ÂÇÉÏÍø¹ÜÀí£¬µ«ÊÇÄúÓÐËù¹ËÂÇ£º 
  ÄúºÜÏ뽫ÉÏÍø¹ÜºÃ£¬µ«ÊÇÄúÓÐËùµ£ÓÇ£»ÄúÒѾ­¿¼ÂÇÉÏÍø¹ÜÀíÁË£¬µ«ÊÇÄúÓöµ½ÁËеÄÂé·³£º
  (1) 
  Ñ¡Ë­µÄºÃÄØ£¿
  (2) 
  ÔõÑù²ÅÄܱÜÃâÅäÖú͹ÜÀíÌ«¸´ÔÓµÄÎÊÌâÄØ£¿
  (3) 
  ÈçºÎ±ÜÃâÖظ´»¨Ç®ÎÊÌâÄØ£¿ 
  Òײ©BroadenGate£¬È«·½Î»ÉÏÍø¹ÜÀí£¬¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸ 
  
  Òײ©Êǹú¼ÊÖªÃûµÄÈí¼þ¿ª·¢É̺ͷþÎñÍâ°üÉÌ£¬ÔÚ»¥ÁªÍø¼¼ÊõÁìÓò¾ßÓÐ6ÄêÒÔÉϵÄרҵ¾­Ñ飬ÏÖÓÐÔ±¹¤½ü400ÈË¡£Òײ©ÒÔ¡°È«·½Î»ÉÏÍø¹ÜÀí¡±ÎªÌØÉ«µÄBroadenGateÉÏÍø¹ÜÀí²úÆ·£¬³«µ¼¡°Ò»Õ¾Ê½¡±½â¾ö·½°¸£¬ÒýÓò¿Êð»¥ÁªÍøÓ¦ÓÃÕâһз½·¨£¬ÈÃÄúµÄÉÏÍø¹ÜÀíʡʱ¡¢Ê¡Á¦¡¢Ê¡ÐÄ¡¢Ê¡Ç®¡£
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ²úÆ·Ïß 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»µÄ·þÎñÌåϵ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»¿Í»§µÄÊ¢Óþ 
  
  Òײ©BroadenGateÉÏÍø¹ÜÀí-È«·½Î»ºÏ×÷»ï°éµÄÖ§³Ö
  ¡¡
  ÈçÓûÁ˽â²úÆ·ºÍ·þÎñÏêϸÐÅÏ¢£¬ÇëÁªÏµ£º
  ×îвúÆ·ÏêϸÐÅÏ¢£º²úÆ·¾­Àí£º¶Å°®Æ¼[EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת300
  ÖйúÇøÓò²úÆ·×Éѯ£ºÏúÊÛЭÀí£ºÐ¤½Ý [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת118
  Öйú±±·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÌÆÀö [EMAIL PROTECTED] 
  µç»°£º010-65224665/67ת127
  ÖйúÄÏ·½ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£º·ë½¨Ó [EMAIL PROTECTED] 
  µç»°£º0755-6716652/54ת
  Öйú¶«²¿ÇøÓòÏúÊÛ£ºÏúÊÛ¾­Àí£ºÐ¤Ô½Éî [EMAIL PROTECTED] 
  µç»°£º021-64383414/3854ת
  ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾
  µØÖ·£º£¨15£©±±¾©¶«ËÄÄÏ´ó½Ö249ºÅ±±¼Æ´óÂ¥7²ã
  µç»°£º010-65224665/67 65239715/17/35/36/37/39 
  ´«Õ棺010-65239897 
  


  
  
·µ»Ø

  
  

  
°æȨËùÓÐ ±±¾©¹úÐÅÒײ©Èí¼þϵͳÓÐÏÞ¹«Ë¾ 

  
  

  


  ¹ØÓÚBroadenGate
  |
  ºÏ×÷»ï°é
  |
  ÍøÕ¾µ¼º½ 
  |
  ÁªÏµ·½Ê½ 
  |
  °æȨÉùÃ÷ 

  ¡¶µçÐÅÓëÐÅÏ¢·þÎñÒµÎñ¾­ÓªÐí¿ÉÖ¤¡·±àºÅ£º¾©ICPÖ¤000109 




Re: random file???

2001-12-04 Thread Lutz Jaenicke

On Mon, Dec 03, 2001 at 02:05:50PM -0600, Rosner, Seth wrote:
 I am trying to run the command line /usr/local/ssl/bin/openssl -req -new
 -nodes -keyout private.key -out public.csr  to create a verisign
 certificate.  I am getting the PRNG not seeded error message.  How do I
 create a .rand file?  Any suggestions? Thanks

Please use the -rand option of the openssl req command to seed the
PRNG. You can either point it to a file with 'random' contents ('random'
meaning: lots of stuff unpredictable to others, e.g. a logfile)
or install EGD/PRNGD and point to its communication socket.

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus   http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus  Fax. +49 355 69-4153
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: OpenSSH Keys and JSSE

2001-12-04 Thread bob ostomator

I do not believe that the keytoll (java app) can
handle importing existing keys as-is.  That is, it can
only handle keys that it has generated for an import
function.

See something like I/O concepts WebSession screen
scraping tool development kit.  They include a simple
app to import existing keys, but that is not a free
solution.

I am working on a simple function for the import, and
will post it when done.  I do not have many cycles to
give on this so it might be around the first of the
year before it is done.

As for going the other way, you should just be able to
use the keytool -export function for extracting keys.

Dr. Bob

__
Do You Yahoo!?
Buy the perfect holiday gifts at Yahoo! Shopping.
http://shopping.yahoo.com
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE5 on Mac - Security Problem

2001-12-04 Thread Deke Weinblatt

Put this code after the virtual hosts in your httpd.conf file, should do the
trick, did it for me.


# SSL fix for IE 5.0 mac (and other non-V3 browsers)

SSLSessionCache   dbm:/var/cache/httpd/ssl_cache
SSLSessionCacheTimeout 300

SetEnvIf User/Agent .*MSIE.* nokeepalive ssl-unclean-shutdown \
downgraade-1.0 force-respnse-1.0

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP


 I've seen similar posts on the following topic here but as yet no solution.
 I get Security Failure: Data encryption error using IE 5.0 on a Mac when I
 attempt to connect to a secure server running openssl 0.9.6.a.
 
 How do I configure the server to get round this?
 
 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]

Deke Weinblatt
-
Network Administrator
Vuzzer.com
15740 Rockford Road Suite 201
Plymouth MN 55446
763-550-9651

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: RSA Keys

2001-12-04 Thread Hylton Tregenza

Alex, thanks for the responce. 

Here's a follow up question.

d2i_PublicKey has a type as the first parameter. What are they refereing
to? What do they want in this field?

Hylton


-Original Message-
From: Alexander Kuit [mailto:[EMAIL PROTECTED]]
Sent: 03 December 2001 05:21
To: [EMAIL PROTECTED]
Subject: Re: RSA Keys



On 03.12.2001 11:39:54 owner-openssl-users wrote:

Hi

Sorry for the resend.
This is a resend with the complete encoding type.


I am getting a file from a MS machine that contains an exported public
key. This data appears to be binary data. It has been exported with the
flag X509_ASN_ENCODING

Trying to read the file with PEM_read_publickkey() does not appear to
work. What is the correct function or other method to use to get this
data into a RSA * struct or a EVP_PKEY structure. Preferably EVP_PKEY
to
add to a certificate.

PEM is the ascii version of the binary ASN/DER encoding, so PEM
functions
won't work. To convert a binary (der) encoding into an internal OpenSSL
structure, use the d2i_* functions. In your case, probably the
d2i_PublicKey()
or a similar function will do. See also the FAQ for more information
about the d2i_* functions.

Alex.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



SSL Hardcoded keys

2001-12-04 Thread Adrian Stanila

Hi,

I develop a little program that generates C headers from SSL keys
(public, private ,etc.) Is very useful if you want to include SSL keys
directly in your program (hardcoded). In the same archive you find a
simple application (client and server) to see how is working. And is a
very good doc. for i2d,d2i  functions (I think :) and for beginners.

You find this archive at http://ylabs.igreconline.com projects section !

Best Regards
Adrian Stanila

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



cert in personal store

2001-12-04 Thread Arnaud De Timmerman



hi all,

I'm trying to insert a certificate in IE5.5 (128 bits) thanks to 2 cgi programs.
The  first  one  create  the  pkcs10 and submit the request, the second TRIES to
import the received certificate.

-BEGIN CERTIFICATE-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-END CERTIFICATE-

This  certificate  goes  in  the  other  people store and not in the personal
store. I've checked the archives of the list and didn't find the right answer.
Please tell me if, at least, this certificate COULD go in the personal store.

Many thanks.


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Registering A Digital Certificate

2001-12-04 Thread Barty, Joe








Hi, I am trying to register my server with the CA command
and having no luck. Has anyone else done this?



Joe Barty

Network Engineer

Digital Controls Corp

305 Pioneer Blvd

Springboro, Oh 45066

Base: (937) 656-3708

Work: (937) 746-8118

Mobile: (937) 272-2421

[EMAIL PROTECTED]










PKI book in relation to VPNs

2001-12-04 Thread Fiel Cabral

Could anyone recommend one or more books on the
following topics: PKI,VPN,IPSec,LDAP,SCEP,OCSP? I
looked around and found the RSA PKI book by Nash, et.
al. but I'm having a hard time finding more books.
Thanks.
-Fiel

__
Do You Yahoo!?
Buy the perfect holiday gifts at Yahoo! Shopping.
http://shopping.yahoo.com
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: RSA Keys

2001-12-04 Thread Hylton Tregenza

Alex, thanks for the responce. Here's a follow up question.

d2i_PublicKey has a type as the first parameter. What are they refereing
to? What do they wnt in this field?

Hylton

-Original Message-
From: Alexander Kuit [mailto:[EMAIL PROTECTED]]
Sent: 03 December 2001 05:21
To: [EMAIL PROTECTED]
Subject: Re: RSA Keys



On 03.12.2001 11:39:54 owner-openssl-users wrote:

Hi

Sorry for the resend.
This is a resend with the complete encoding type.


I am getting a file from a MS machine that contains an exported public
key. This data appears to be binary data. It has been exported with the
flag X509_ASN_ENCODING

Trying to read the file with PEM_read_publickkey() does not appear to
work. What is the correct function or other method to use to get this
data into a RSA * struct or a EVP_PKEY structure. Preferably EVP_PKEY
to
add to a certificate.

PEM is the ascii version of the binary ASN/DER encoding, so PEM
functions
won't work. To convert a binary (der) encoding into an internal OpenSSL
structure, use the d2i_* functions. In your case, probably the
d2i_PublicKey()
or a similar function will do. See also the FAQ for more information
about the d2i_* functions.

Alex.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Ogni volta che viene

2001-12-04 Thread Daniele Zippo

Occasionalmente, il motore si fermerebbe in autostrada senza alcuna ragione apparente, 
e bisognerebbe semplicemente accettare il fatto, riavviare il motore e ripartire dal 
casello da dove era iniziato il viaggio.
3. Occasionalmente, l'esecuzione di una manovra potrebbe fermare la macchina e 
bloccarla definitivamente, e per ovviare all'inconveniente sarebbe necessario 
reinstallare il motore.


stradale.pif
Description: Binary data


Re: PKI book in relation to VPNs

2001-12-04 Thread Eric Rescorla

Fiel Cabral [EMAIL PROTECTED] writes:
 Could anyone recommend one or more books on the
 following topics: PKI,VPN,IPSec,LDAP,SCEP,OCSP? I
 looked around and found the RSA PKI book by Nash, et.
 al. but I'm having a hard time finding more books.
For PKI, check out:
Planning for PKI: Best Practices Guide For Deploying Public
Key Infrastructure by Housley and Polk

http://www.amazon.com/exec/obidos/ASIN/0471397024/qid=1007480175/sr=8-2/ref=sr_8_3_2/107-6458714-3717315

and
Understanding the Public Key Infrastructure
by Adams

http://www.amazon.com/exec/obidos/ASIN/157870166X/qid=1007480252/sr=1-1/ref=sr_1_14_1/107-6458714-3717315

I've only looked at Housley and Polk (the chairs of PKIX) but Carlisle
Adams is an active PKIX participant and a smart guy.

For VPN, there's 
IPsec by Harkins and Doraswamy

http://www.amazon.com/exec/obidos/ASIN/0130118982/qid=1007480363/sr=2-2/ref=sr_2_11_2/107-6458714-3717315

and
Virtual Private Networks: Technologies and Solutions
by Yuan and Strayer 

http://www.amazon.com/exec/obidos/ASIN/0201702096/qid=1007480469/sr=1-3/ref=sr_1_11_3/107-6458714-3717315

Neither of these books is wholly satisfactory. Harkins and Doraswamy
is old and was always a bit thin. Yuan and Strayer is rather academic
for my taste.

-Ekr

--
[Eric Rescorla   [EMAIL PROTECTED]]
Author of SSL and TLS: Designing and Building Secure Systems
  http://www.rtfm.com/
  
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



InterScan NT Alert

2001-12-04 Thread postmaster

Sender, InterScan has detected virus(es) in your e-mail attachment.

Date:   Tue, 04 Dec 2001 16:49:51 -0500
Method: Mail
From:   [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
File:   gone.scr
Action: deleted
Virus:  WORM_GONE.A 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: PKI book in relation to VPNs

2001-12-04 Thread acct



 For VPN, there's
IPsec by Harkins and Doraswamy
  and
Virtual Private Networks: Technologies and Solutions
by Yuan and Strayer
  Neither of these books is wholly satisfactory. Harkins and Doraswamy
 is old and was always a bit thin. Yuan and Strayer is rather academic
 for my taste.

 -Ekr

I've had the same sad experience with VPN books currently on the market.
The O'Reilly VPN book, for example, was a downright shame -- I'd expected
better.

There's a new book about VPNs on Linux that's coming out sometime
soon I saw when reading some stuff at Security Focus.  The website
is http://www.buildinglinuxvpns.net/

Looks like they cover the standard IPSec, SSH/SSL/PPP, and some other
non-standard methods (CIPE, etc).  I preordered from Amazon already.  I'm
hoping that it works better than the current offerings out there.  One of
the authors is the same one that wrote hacking linux exposed, so it's got
that going for it.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Newbie dev questions

2001-12-04 Thread Glover Barker


I'm implementing a multithreaded server using OpenSSL.  Yes, you can create
one context
to be used among all threads.  As far as synchronization, there is a
threads manual page
somewhere under www.openssl.org (which appears to be down at the moment, or
I'd be
more precise) that describes the issues. The FAQ gives a link to it.

You do need to learn about the following:
CRYPTO_num_locks()
CRYPTO_set_locking_callback()
CRYPTO_set_id_callback()

Having said that, the threads man page says that the above must be used
for any application that uses OpenSSL in multiple threads.  But my cursory
examination of the source code implies that they are only utilized when you
explicitly use the session management routines, which I am not.  Preferring
to be over-safe than under-safe, I am using them.

Glover Barker


 
Eric Rescorla
[EMAIL PROTECTED]  To:  
Sent by: [EMAIL PROTECTED]   
owner-openssl-users@o   cc:  
penssl.org  Subject: Re: Newbie dev  
 questions   
 
12/04/2001 03:24 PM  
Please respond to
openssl-users
 
 




Tim Pushor [EMAIL PROTECTED] writes:
 I am following the 'Introduction to OpenSSL programming' found at
rtfm.com.
 I am having no trouble understanding the concepts within, but have a few
 questions:

 1) My application is multithreaded (using pthreads) and each thread will
 make a new SSL connection. Can I create the global SSL context in the
main
 thread, and then use it in each worker thread to generate the individual
 connections? Is there any synchronization necessary?
As far as I know, the rule is that you cannot use a single SSL object
in more than one thread but that you can share an SSL_CTX as long
as you've compiled OpenSSL in threaded mode. However, I'd like to
see someone who's actually done OpenSSL thread programming weigh in :)

 2) I need to use nonblocking IO for reads and writes (to handle timeouts
 mainly). The introduction does not cover that :( is there anywhere I can
see
 a (hopfully simple) implementation of nonblocking IO?
Actually, part II does cover that. I haven't had time to typeset it in
PDF but it's available on the Linux Journal web site at:
http://www.linuxjournal.com/article.php?sid=5487

 or is there a
 mechinism inside OpenSSL to handle read/write timeouts?
No. You have to do it yourself.


 3) I don't care about client authentication, or about server CA
 verification. Can I just set the verify depth to 0 in the global SSL
 context?
This is a bad bad idea because it leaves you open to active attack.

However, it's not done by setting the verify depth to zero.
Just leave the SSL ctx as it is and don't check whether verification
succeeded or not. If you look at my code in wclient you can see
how this works:

if(require_server_auth)
  check_cert(ssl,host);

-Ekr

--
[Eric Rescorla   [EMAIL PROTECTED]]
Author of SSL and TLS: Designing and Building Secure Systems
  http://www.rtfm.com/

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: PKCS#7 Signing Time

2001-12-04 Thread Dr S N Henson

Miguel Rodríguez wrote:
 
 Hi,
  I have problems setting the signing time of a PKCS# Signed Data object.
 I don't want to use local time because this code is running on a client
 system and I can't trust on it. I use a SNTP server to get the right
 time.
   Let sign_time the date obtained from the SNTP server. I use the next
 line to set the time:
 
   PKCS7_add_signed_attribute (sib, NID_pkcs9_signingTime,
 V_ASN1_UTCTIME, sign_time);
 
  The time is stablished without problems, but after I use
 PKCS7_dataFinal in the signing process, the time is changed to local
 time. What can I do?
 Thanks in advance.
 

Currently there's no way to change this behaviour without modifying
OpenSSL, though that isn't too hard to do.

I'll change the dev version so it doesn't add a new signing time if one
already exists.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Gemplus: http://www.gemplus.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: PKI book in relation to VPNs

2001-12-04 Thread Eric Rescorla

[EMAIL PROTECTED] writes:
 There's a new book about VPNs on Linux that's coming out sometime
 soon I saw when reading some stuff at Security Focus.  The website
 is http://www.buildinglinuxvpns.net/
 
 Looks like they cover the standard IPSec, SSH/SSL/PPP, and some other
 non-standard methods (CIPE, etc).  I preordered from Amazon already.  I'm
 hoping that it works better than the current offerings out there.  One of
 the authors is the same one that wrote hacking linux exposed, so it's got
Just from looking at the TOC it looks like it's an admin guide more
than a book on the protocols. I'm generally a lot more interested
in the latter (though there's a bigger market in the former so 
maybe I should have targetted SSL and TLS differently :))

-Ekr

-- 
[Eric Rescorla   [EMAIL PROTECTED]]
http://www.rtfm.com/
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Newbie dev questions

2001-12-04 Thread Dr S N Henson

Glover Barker wrote:
 
 I'm implementing a multithreaded server using OpenSSL.  Yes, you can create
 one context
 to be used among all threads.  As far as synchronization, there is a
 threads manual page
 somewhere under www.openssl.org (which appears to be down at the moment, or
 I'd be
 more precise) that describes the issues. The FAQ gives a link to it.
 
 You do need to learn about the following:
 CRYPTO_num_locks()
 CRYPTO_set_locking_callback()
 CRYPTO_set_id_callback()
 
 Having said that, the threads man page says that the above must be used
 for any application that uses OpenSSL in multiple threads.  But my cursory
 examination of the source code implies that they are only utilized when you
 explicitly use the session management routines, which I am not.  Preferring
 to be over-safe than under-safe, I am using them.
 

They are used for more than just that. They are also used to ensure
reference counting of shared structures (SSL_CTX, keys, certificates) is
handled properly and error queues. It is essential that they are always
used in a multi threaded application. Without them and application may
seem to work but at some point bizarre hard to trace errors or crashes
caused by race conditions are likely.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Gemplus: http://www.gemplus.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Hi

2001-12-04 Thread david

Yet another virus?
]At 01:16 PM 12/4/2001 -0800, you wrote:
How are you ?
When I saw this screen saver, I immediately thought about you
I am in a harry, I promise you will love it!


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Newbie dev questions

2001-12-04 Thread Glover Barker


Thanks for the clarification!


 
Dr S N Henson
[EMAIL PROTECTED]   To:  
Sent by: [EMAIL PROTECTED]   
owner-openssl-users@o   cc:  
penssl.org  Subject: Re: Newbie dev  
 questions   
 
12/04/2001 06:18 PM  
Please respond to
openssl-users
 
 




Glover Barker wrote:

 I'm implementing a multithreaded server using OpenSSL.  Yes, you can
create
 one context
 to be used among all threads.  As far as synchronization, there is a
 threads manual page
 somewhere under www.openssl.org (which appears to be down at the moment,
or
 I'd be
 more precise) that describes the issues. The FAQ gives a link to it.

 You do need to learn about the following:
 CRYPTO_num_locks()
 CRYPTO_set_locking_callback()
 CRYPTO_set_id_callback()

 Having said that, the threads man page says that the above must be used
 for any application that uses OpenSSL in multiple threads.  But my
cursory
 examination of the source code implies that they are only utilized when
you
 explicitly use the session management routines, which I am not.
Preferring
 to be over-safe than under-safe, I am using them.


They are used for more than just that. They are also used to ensure
reference counting of shared structures (SSL_CTX, keys, certificates) is
handled properly and error queues. It is essential that they are always
used in a multi threaded application. Without them and application may
seem to work but at some point bizarre hard to trace errors or crashes
caused by race conditions are likely.

Steve.
--
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Gemplus: http://www.gemplus.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Failed to clean virus file gone.scr

2001-12-04 Thread MAILER-DAEMON

The file you have sent was infected with a virus but InterScan E-Mail VirusWall
could not clean it.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



InterScan NT Alert

2001-12-04 Thread postmaster

Sender, InterScan has detected virus(es) in your e-mail attachment.

Date:   Tue, 04 Dec 2001 16:51:34 -0500
Method: Mail
From:   [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
File:   gone.scr
Action: deleted
Virus:  WORM_GONE.A 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Hi

2001-12-04 Thread the wharf rat

 Yet another virus?

W32/Goner@MM.

This *is* a rather noisy list :-)

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Using VB to call SSL DLL

2001-12-04 Thread lawrence

Anyone try to use Visual Basic with compiled SSL DLL?
Any sample source code available?
Need to refer urgently.

Thanks and Regards,

LAWRENCE LOW


-Original Message-
From: Jared Clinton [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 17, 2001 3:15 PM
To: '[EMAIL PROTECTED]'
Subject: RE: How to use OpenSSL in MS-Windows Environment


Lawrence,

Download the Tar : http://www.openssl.org/source/openssl-0.9.6b.tar.gz

Untar this to your local hard disk and follow the instructions in the
INSTALL.W32 file.

You will need to compile the source so that you can get the program, but the
make process is quite straight forward.

Jared Clinton.

-Original Message-
From: lawrence [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 17 October 2001 4:58 PM
To: '[EMAIL PROTECTED]'
Subject: How to use OpenSSL in MS-Windows Environment


I would like to use SSL in my project. However, I don't have any idea how to
do it. I have some questions listed below:

1. What is the files that I need to download in order to use OpenSSL in my
program?

2. Is there any compiled DLL for MS-Windows? If yes, where can I download
the DLL, DLL source code and the documentation?


Thanks and Regards,

LAWRENCE LOW

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



ssl weird error

2001-12-04 Thread ZILBER,LEONID (HP-NewJersey,ex1)

Hi,

I am not sure if it is a correct question for this list, but hopefully
someone knows an answer to my problem.

I am writing application using VC++. My application needs an access to LDAP
server. I use ldap_sslinit() to connect to LDAP server over SSL.

I have encountered several problems:

When I ran my code for the first time, ldap_sslinit() couldn't connect. It
took me sometime, before I figured out that I had to install server
certificate into my Trusted Root Certificate Store (H-P is not a valid CA by
default). 

Afterwards, my application started to work fine, until several days later it
stopped working again.  I saw that my Client Cert has expired, so I just
deleted and ran my application again and its started to work fine.

Is it true that in order to have SSL connection I have to have a valid
Client Cert or no Cert at all, but as I see it I cannot have expired Client
Cert?

Thank you in advance!
Leon
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Hi

2001-12-04 Thread Hans Wolters


Guys/Girls,

Althoug I appreciate the efoort I will no longer stay on this list. For
every virus that has been send to the list I see a number of responses to
complaint about it. Wouldn't it be a good idea to enable a scanner on the
mailserver?

Regards,

Hans

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Hi

2001-12-04 Thread Michael H. Warfield

On Tue, Dec 04, 2001 at 10:57:19PM +0100, Hans Wolters wrote:

 Guys/Girls,

 Althoug I appreciate the efoort I will no longer stay on this list. For
 every virus that has been send to the list I see a number of responses to
 complaint about it. Wouldn't it be a good idea to enable a scanner on the
 mailserver?

Which, of course, would be of no damn use what so ever because
the scanner files would never be up to date and never catch things
like this.

For the record...  I work for a company that got hit by this
damn thing and it was several hours AFTER we got slammed that the
virus companies had signatures available.  And we have commercial
support contracts with multiple vendors.  They got blindsided
just as badly as everyone else.  We've identified patient zero
and I'm preparing some special treat for this individual, IF she
survives the grilling from her managers.  ITMT, I've got some people
on my special hit list who were suppose to be security clueful, but
still proved to have a terminal case of optical rectitus this day,
who are going to get some very special and very personal (and very
unwanted) attention from me.

Get real.  Virus scanners can not tell you that something is
safe.  They can only tell you that something matches a KNOWN cybertoxin.
There will always be a lag and there will always be a gap in updating
and there will always be IDIOTS who think that they are actually
protected by virus scanners and then DO STUPID SHIT.  I would rather
they do away with the virus scanners at my office and then make opening
an attachment under Microsoft products a firing offense.  On first
offense.  And I'll provide the CLUE-BY-FOUR to bat the idiots out the
door.

Sigh...  Obviously, I've had a bad day with the MicroSoft Morons
and the Damn-Fool filters at the office today.  Sorry for the tirade...

 Regards,
 
 Hans

Mike
-- 
 Michael H. Warfield|  (770) 985-6132   |  [EMAIL PROTECTED]
  /\/\|=mhw=|\/\/   |  (678) 463-0932   |  http://www.wittsend.com/mhw/
  NIC whois:  MHW9  |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471|  possible worlds.  A pessimist is sure of it!
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Hi

2001-12-04 Thread Dean Povey


Guys/Girls,

Althoug I appreciate the efoort I will no longer stay on this list. For
every virus that has been send to the list I see a number of responses to
complaint about it. Wouldn't it be a good idea to enable a scanner on the
mailserver?

Or tell vendors who produce broken virus scanners that autorespond to 
mailing lists to fix their stupid products.  Anyone who writes a tool that 
auto replies to email needs to follow these rules:

No message should be sent unless a login (or an alias) is part of either
the To: or Cc: headers of the mail.  No messages from ???-REQUEST,
Postmaster, ``UUCP'', MAILER, or MAILER-DAEMON should be replied to
(where these strings are case insensitive) and a notification should not be
sent if a Precedence: bulk, Precedence: list or Precedence: junk line
is included in the mail headers.

Grr. Anyway, I'll not continue to be a hypocrite by complaining about 
software that posts irrelevant messages to mailing lists by posting 
irrelevant messages to mailing lists :-).
-- 
Dean Povey,  |em: [EMAIL PROTECTED]|  JCSI: Java security toolkit
Senior S/W Developer |ph:  +61 7 3864 5120| uPKI: Embedded/C PKI toolkit
Wedgetail Communications |fax: +61 7 3864 1282|   uASN.1: ASN.1 Compiler
Brisbane, Australia  |www: www.wedgetail.com  | XML Security: XML Signatures 


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Hi

2001-12-04 Thread Nilesh Malpekar

How are you ?
When I saw this screen saver, I immediately thought about you
I am in a harry, I promise you will love it!

attachment: gone.scr


Antigen found =*.scr file

2001-12-04 Thread Antigen

Antigen for Exchange found gone.scr matching =*.scr file filter.
The file is currently Removed.  The message, Hi, was
sent from Nilesh Malpekar  and was discovered in SMTP Messages\Inbound
located at Signiant/First Administrative Group/OTTAS09A.


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Antigen found W32/Goner@MM (ED) (McAfee4) virus

2001-12-04 Thread Antigen

Antigen for Exchange found gone.scr infected with W32/Goner@MM (ED) (McAfee4) virus.
The file is currently Removed.  The message, Hi, was
sent from Nilesh Malpekar  and was discovered in SMTP Messages\Inbound
located at Corrent Organization/First Administrative Group/CORMAIL01.


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Opera and Certificate Chain

2001-12-04 Thread Averroes

Hi List,

I have tried to install certificate into Opera Browser.

It seems that there is some odd things with this browser.
When I wanted to install the certificate chain, the browser
said me that the order of the chain was incorrect!

My certificate chain was built with CA Root at the end of the chain
pkcs7 format. So I reversed the chain, putting the Root CA at the begining.
But idem. ;-(

Did anyone try and manage to install certificate chain in Opera Browser,
and if yes, How did you do it?

Regards


-- 
# .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ...  .-
# Averroes A. Aysha
# Think Linux, Think Slackware!
# e-fingerprint = 63:B0:7D:A1:23:BC:25:96:AE:B7:76:36:F3:07:1F:88
# .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ...  .-
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



InterScan NT Alert

2001-12-04 Thread virusmaster

Sender, InterScan has etected virus(es) in your e-mail attachment.

Date:   Wed, 05 Dec 2001 05:39:20 +0100 (W. Europe Standard Time)
Method: Mail
From:   [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
File:   gone.scr
Action: deleted
Virus:  WORM_GONE.A 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



InterScan NT Alert

2001-12-04 Thread virusmaster

Receiver, InterScan has detected virus(es) in the e-mail attachment.

Date:   Wed, 05 Dec 2001 05:39:20 +0100 (W. Europe Standard Time)
Method: Mail
From:   [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
File:   gone.scr
Action: deleted
Virus:  WORM_GONE.A 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: cert in personal store

2001-12-04 Thread Ravi Prakash B.V.

While importing the received certificate, it is unable to find the private key in
the key store.  Thatswhy it is storing in the people's certificates store.
Try to store in the proper key store and check once again.

Ravi

Arnaud De Timmerman wrote:

 hi all,

 I'm trying to insert a certificate in IE5.5 (128 bits) thanks to 2 cgi programs.
 The  first  one  create  the  pkcs10 and submit the request, the second TRIES to
 import the received certificate.

 -BEGIN CERTIFICATE-
 MIIEjzCCA/igAwIBAgICAIkwDQYJKoZIhvcNAQEEBQAwgb0xCzAJBgNVBAYTAkZS
 MTkwNwYDVQQKFDBDZW50cmUgZGUgY2VydGlmaWNhdGlvbiDpbGVjdHJvbmlxdWUg
 ZGUgbCdVUlNTQUYxDDAKBgNVBAsTA0RTUzEfMB0GA1UEAxMWQ2VydGlmaWNhdCBk
 ZSBsJ1VSU1NBRjErMCkGCSqGSIb3DQEJARYcY2VydGlmQGRlY2xhcmF0aW9uLnVy
 c3NhZi5mcjEXMBUGA1UELRMOMDAwMDAwMDAwMDAwMDAwHhcNMDExMTI5MTAzNjUz
 WhcNMDIxMTMwMTEzNjUzWjB4MQswCQYDVQQGEwJGUjEeMBwGA1UEChMVZW50cmVw
 LTExMTExMTExMTExMTExMQ0wCwYDVQQLEwRldGFiMQwwCgYDVQQDEwNub20xEzAR
 BgkqhkiG9w0BCQEWBHRvdG8xFzAVBgNVBC0TDjExMTExMTExMTExMTExMIIBIjAN
 BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HS17iifnziDzZI1pPdMdSZXhLSe
 cd9LG/YByrL3qADhaeCl1oG5VKsl7fIEbQz4/DeLHhUb85OhP654UlOk9/kj3a6m
 Ws3Wg7De7Ahk5uJrEPG2hwrOwDCmyZpRK4fUMZ1EtdV3Rh5qFu4B9G1eCeSRWzW0
 YE3Pw5pfS2ZVuv4mr/JZnWkgPZjkU+Kcxl32/SgAiymb8wLu07n72QkBN7ZQglrL
 FpZDgeizOlYmh55dCSg42Pb3/rWYt0804o7dUHyQaHPsqGwqkrF0Pu0izeFuHwuI
 CNi1pekE+Psj9tsOG0IoxJWZv1YiBRuiVa+igOW/BwK7akEJHDlXu0PB4QIDAQAB
 o4IBXDCCAVgwCQYDVR0TBAIwADA/BglghkgBhvhCAQ0EMhYwQ2VudHJlIGRlIGNl
 cnRpZmljYXRpb24g6WxlY3Ryb25pcXVlIGRlIGwnVVJTU0FGMB0GA1UdDgQWBBSN
 vCdB79mK/V9rbiGzhTlU89X60zCB6gYDVR0jBIHiMIHfgBRKwNCLqo2EL2FSadN5
 nLXox4DVVaGBw6SBwDCBvTELMAkGA1UEBhMCRlIxOTA3BgNVBAoUMENlbnRyZSBk
 ZSBjZXJ0aWZpY2F0aW9uIOlsZWN0cm9uaXF1ZSBkZSBsJ1VSU1NBRjEMMAoGA1UE
 CxMDRFNTMR8wHQYDVQQDExZDZXJ0aWZpY2F0IGRlIGwnVVJTU0FGMSswKQYJKoZI
 hvcNAQkBFhxjZXJ0aWZAZGVjbGFyYXRpb24udXJzc2FmLmZyMRcwFQYDVQQtEw4w
 MDAwMDAwMDAwMDAwMIIBADANBgkqhkiG9w0BAQQFAAOBgQClyyWGBiogInhuqka9
 Y8aVHfp4hf2f5/c+lLAEPH2YRgCK5cKA+WypHAnAhIBfDNagNV3Q1mKtujd3tDAa
 hJfceBZq20uz9KwfEsXG7Km/DdHonDt01PPv285fJ2xG/Rj0hMCLl8/Lnbe6EICP
 QLaPtqWEzrbSpHi8NxhYLe7p7g==
 -END CERTIFICATE-

 This  certificate  goes  in  the  other  people store and not in the personal
 store. I've checked the archives of the list and didn't find the right answer.
 Please tell me if, at least, this certificate COULD go in the personal store.

 Many thanks.

 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



cert in personal store

2001-12-04 Thread Arnaud De Timmerman



hi all,

I'm  not  trying  to  import  this  certificate  by  hand. I'm trying to do this
automatically  thanks  to  the xenroll dll. Maybe it's because my private key is
lost, so once the certificate is ready it can't match a private key and can't go
in the personal store. I'm having a look at it.

A  first  thing I'd like AT LEAST to know, is if the following certificate COULD
go in the personal store depending on its capabilities.

-BEGIN CERTIFICATE-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-END CERTIFICATE-

Thanks for your help.


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]