[Crypt::SSLeay] - 400 Bad request problems.

[Mark Denzel]

I've been completely stymied on a problem connecting to a HTTPS site via our
proxy server.  I've tried dozens of different work arounds I found on the
web and none seem to work and I think I've localized the problem down to an
environment variable not loading.

Here's the small script I'm running to test this out:
#!/usr/bin/perl
use strict;

$ENV{HTTPS_PROXY}='http://<
proxy>/';

use LWP::UserAgent;
use HTTP::Request::Common;
use Crypt::SSLeay;


my $ua = new LWP::UserAgent;
$ua->cookie_jar();
$ua->protocols_allowed(['http','https']);

$ua->env_proxy();

my $url = 'https://www.redhat.com';

my $res = $ua->get($url);
if($res->is_success)
{
print $res->as_string;
}
else
{
print "FAILED: ".$res->status_line;
print "\n\n";
print $res->as_string;
}



If I include the line *$ua->env_proxy()* I get a '400 - Bad Request' error
from the proxy server.  The reason for this is because it is sending a GET
call instead of a CONNECT call.  This supposedly works on apache servers but
anywhere else, you need to have Crypt::SSLeay take over and do the proper
CONNECT call.  The instructions on this are to set the
*$ENV{HTTPS_PROXY}*variable as I have done and remove the call to
*$ua->env_proxy()*.  This should then use Crypt::SSLeay and do a CONNECT.
When I make this change, I get a 500 error because it can't find the proxy.
I have also tried setting my Windows environment variable for HTTPS_PROXY
and proved it is set but the script still doesn't see it.  I can connect to
https sites without an issue via FireFox.  Is there something simple I'm
missing to force the script to use the environment variable HTTPS_PROXY?

any help would be much appreciated,

regards,

  Mark


-- 
Mark Denzel
Black Belt
Converged Computing Group
Motorola Mobility
w/m: 815-531-7621

help with SOAP::Lite/Crypt::SSLeay

[Sandeep X Ranjan]

Hi,

I need help desperately. I have a perl client program making calls to a web 
service via SOAP over https. I do have the certificate installed on the UNIX 
box from where I will be making the calls. But I don't know how to use that 
certificate in my perl script.

Your help will be greatly appreciated.

-
Sandeep | 201.595.1897



This communication is for informational purposes only. It is not
intended as an offer or solicitation for the purchase or sale of
any financial instrument or as an official confirmation of any
transaction. All market prices, data and other information are not
warranted as to completeness or accuracy and are subject to change
without notice. Any comments or statements made herein do not
necessarily reflect those of JPMorgan Chase & Co., its subsidiaries
and affiliates.

This transmission may contain information that is privileged,
confidential, legally privileged, and/or exempt from disclosure
under applicable law. If you are not the intended recipient, you
are hereby notified that any disclosure, copying, distribution, or
use of the information contained herein (including any reliance
thereon) is STRICTLY PROHIBITED. Although this transmission and any
attachments are believed to be free of any virus or other defect
that might affect any computer system into which it is received and
opened, it is the responsibility of the recipient to ensure that it
is virus free and no responsibility is accepted by JPMorgan Chase &
Co., its subsidiaries and affiliates, as applicable, for any loss
or damage arising in any way from its use. If you received this
transmission in error, please immediately contact the sender and
destroy the material in its entirety, whether in electronic or hard
copy format. Thank you.

Please refer to http://www.jpmorgan.com/pages/disclosures for
disclosures relating to European legal entities.

Re: Compiling Errors Crypt::SSLeay

[Sander Temme]

On Feb 5, 2010, at 1:28 PM, Merker, Nick wrote:

> I am receiving errors when compiling Crypt::SSLeay on RHEL4ASu7 x86_64.
  ^^
64bits system...

> $ make test
> # Error:  Can't load 
> '/home/nmerker/.cpan/build/Crypt-SSLeay-0.57/blib/arch/auto/Crypt/SSLeay/SSLeay.so'
>  for module Crypt::SSLeay: 
> /home/nmerker/.cpan/build/Crypt-SSLeay-0.57/blib/arch/auto/Crypt/SSLeay/SSLeay.so:
>  cannot open shared object file: No such file or directory at 
> /usr/local/cars-perl/5.8.8/lib/5.8.8/i686-linux/DynaLoader.pm line 230.
^^^
That looks like a 32bits Perl... run file /usr/local/cars-perl/bin/perl ? 
>  
> I am fairly certain this is something to do with being unable to load 
> libcrypto.so or libssl.so, so I checked it out:
> # ldd 
> /home/nmerker/.cpan/build/Crypt-SSLeay-0.57/blib/arch/auto/Crypt/SSLeay/SSLeay.so
> libc.so.6 => /lib64/tls/libc.so.6 (0x002a9566a000)
> /lib64/ld-linux-x86-64.so.2 (0x00552000)

That seems like a 64bits build, but file can tell you.

A 32bits binary cannot load a 64bits library.  I'd say building a 64bits Perl, 
or 32bits Perl modules on a 64bits system, is off-topic for this list.  

S.

> That looks fine.  I have the following packages installed:
> openssl-0.9.7a-43.17.el4_6.1
> openssl-devel-0.9.7a-43.17.el4_6.1
>  
> I am confused as to what is missing here.  From my standpoint, there should 
> be no error when trying to load SSLeay.so file, especially a “No such file or 
> directory” error because ‘ldd’ responds properly.
>  
> What am I missing here?
>  
> -Nick


-- 
san...@temme.net  http://www.temme.net/sander/
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF



smime.p7s
Description: S/MIME cryptographic signature

Compiling Errors Crypt::SSLeay

[Merker, Nick]

Hello,

I am receiving errors when compiling Crypt::SSLeay on RHEL4ASu7 x86_64.

$ make test
# Error:  Can't load 
'/home/nmerker/.cpan/build/Crypt-SSLeay-0.57/blib/arch/auto/Crypt/SSLeay/SSLeay.so'
 for module Crypt::SSLeay: 
/home/nmerker/.cpan/build/Crypt-SSLeay-0.57/blib/arch/auto/Crypt/SSLeay/SSLeay.so:
 cannot open shared object file: No such file or directory at 
/usr/local/cars-perl/5.8.8/lib/5.8.8/i686-linux/DynaLoader.pm line 230.

I am fairly certain this is something to do with being unable to load 
libcrypto.so or libssl.so, so I checked it out:
# ldd 
/home/nmerker/.cpan/build/Crypt-SSLeay-0.57/blib/arch/auto/Crypt/SSLeay/SSLeay.so
libc.so.6 => /lib64/tls/libc.so.6 (0x002a9566a000)
/lib64/ld-linux-x86-64.so.2 (0x00552000)

That looks fine.  I have the following packages installed:
openssl-0.9.7a-43.17.el4_6.1
openssl-devel-0.9.7a-43.17.el4_6.1

I am confused as to what is missing here.  From my standpoint, there should be 
no error when trying to load SSLeay.so file, especially a "No such file or 
directory" error because 'ldd' responds properly.

What am I missing here?

-Nick

Re: Client-Authentication using Crypt::SSLeay

[Olaf Gellert]

Hi all,

there was a little cut-n-paste error in my previous mail,
I forgot one line in the script. The error remains the
same...

Olaf Gellert wrote:

> $file=$ENV{HTTPS_PKCS12_FILE};
$pass=$ENV{HTTPS_PKCS12_PASSWORD};
> $ctx->use_pkcs12_file($file ,$pass) || die("failed to load $file: $!");

Cheers, Olaf

-- 
Olaf Gellert  email  gell...@dkrz.de
Deutsches Klimarechenzentrum GmbH phone  +49 (0)40 41173 214
Bundesstrasse 55  fax+49 (0)40 41173 270
D-20146 Hamburg, Germany  wwwhttp://www.dkrz.de
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org

Client-Authentication using Crypt::SSLeay

[Olaf Gellert]

I am trying to open an SSL connection with Client Authentication
using Crypt::SSLeay.

What works fine is specifying environment variables
HTTPS_CERT_FILE and HTTPS_KEY_FILE. Unfortunately
the keyfile has to be unencrypted (there seems to
be no no password mechanism for HTTPS_KEY_FILE).

When I try to use HTTPS_PKCS12_FILE and
HTTPS_PKCS12_PASSWORD, Crypt::SSLeay seems to be unable
to open the PKCS12 file. On calling use_pkcs12_file
it returns an error "No such file or directory" (though
strace reveals that the file exists and is opened).

This is what I do:
##
$ENV{HTTPS_PKCS12_FILE} = '/home/gellert/test-cert.p12';
$ENV{HTTPS_PKCS12_PASSWORD} = 'test';
$ENV{HTTPS_VERSION} = 3;
$ENV{HTTPS_DEBUG} = 1;

require Crypt::SSLeay;
sub _default_context {
  require Crypt::SSLeay::MainContext;
  Crypt::SSLeay::MainContext::main_ctx(@_);
  }

my $ctx = _default_context(23);
$file=$ENV{HTTPS_PKCS12_FILE};
$ctx->use_pkcs12_file($file ,$pass) || die("failed to load $file: $!");
#

This is the output of the script:
#
./test.pl
failed to load /home/gellert/test-cert.p12: No such file or
directory at ./test.pl line 27.
#

And this is what strace says...
#
open("/etc/ssl/cert.pem", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/home/gellert/test-cert.p12", O_RDONLY) = 3
[...]
read(3,
"0\202\n\351\2\1\0030\202\n\257\6\t*\206H\206\367\r\1\7\1\240\202\n\240\4\202\n\2340\202"...,
4096) = 2797
close(3)= 0
munmap(0x7f448c5fd000, 4096)= 0
write(2, "failed to load /home/gellert/tes"..., 149failed to load
/home/gellert/test-cert.p12: No such file or directory at ./test.pl line 27.
#

The PKCS12 file was generated using OpenSSL, so this should
work...

By the way: Funny that use_pkcs12_file() still tries to open
/etc/ssl/cert.pem, even if a certificate file is specified...

Any idea? Or can I work around this using PEM-key and certificate
(but the key has to be encrypted)...

Cheers, Olaf

-- 
Olaf Gellert  email  gell...@dkrz.de
Deutsches Klimarechenzentrum GmbH phone  +49 (0)40 41173 214
Bundesstrasse 55  fax+49 (0)40 41173 270
D-20146 Hamburg, Germany  wwwhttp://www.dkrz.de
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org

Crypt-SSleay installation

[Ramu2 P]

Hi,

I am unable to install crypt-SSLeay_0.57 on my machine (Windows). 
Could you please help in installing this.

Thanks
Ramu Paloju
Tata Consultancy Services
Mailto: [EMAIL PROTECTED]
Website: http://www.tcs.com

Experience certainty.   IT Services
Business Solutions
Outsourcing

=-=-=
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you

Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

[Marko Asplund]

On 2006-02-14, at 16.44, Richard Eggert wrote:

Thanks.  That worked perfectly (well, actually, it failed, but  
that's what I wanted to happen).  Is there any way for me to tell  
within my code which SSL has been loaded, or am I pretty much stuck  
having to both set the HTTPS_CA_FILE variable as well as set the  
IO::Socket::SSL's default context in all situations?


i would recommend that you decide which module you want to use and  
make your code only work with that module.


based on the code in libwww-perl Net/HTTPS.pm it looks like you could  
simply add a 'use IO::Socket::SSL;' line in your code to make LWP  
always use that module.


you can determine whether a module has been loaded by testing package  
variable values such as $IO::Socket::SSL::VERSION.


By the way, to answer your first question, they're both installed  
properly, as far as I can tell (they both came with the default Red  
Hat installation, I think).  The Crypt::SSLeay version seems to get  
invoked whenever mod_ssl is disabled (since setting HTTPS_CA_FILE  
actually works properly in those cases), and the IO::Socket::SSL  
version gets invoked whenever mod_ssl is enabled.


as noted above you can debug this by testing package variables for  
each module.



br. aspa
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]

RE: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

[Richard Eggert]

Thanks.  That worked perfectly (well, actually, it failed, but that's what I 
wanted to happen).  Is there any way for me to tell within my code which SSL 
has been loaded, or am I pretty much stuck having to both set the HTTPS_CA_FILE 
variable as well as set the IO::Socket::SSL's default context in all situations?
 
By the way, to answer your first question, they're both installed properly, as 
far as I can tell (they both came with the default Red Hat installation, I 
think).  The Crypt::SSLeay version seems to get invoked whenever mod_ssl is 
disabled (since setting HTTPS_CA_FILE actually works properly in those cases), 
and the IO::Socket::SSL version gets invoked whenever mod_ssl is enabled.
 
Thanks again!
 
 
Rich



From: [EMAIL PROTECTED] on behalf of Marko Asplund
Sent: Tue 2/14/2006 7:12 AM
To: openssl-users@openssl.org
Subject: Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl 
applications?




On 2006-02-13, at 23.42, Richard Eggert wrote:

> It seems that it first tries to load the SSL module from 
> Crypt::SSLeay first, and if that fails, it then tries to load 
> IO::Socket::SSL, which, as far as I can tell, doesn't use 
> HTTPS_CA_FILE (but may provide another mechanism for accomplishing 
> the same thing).  Could it be that perhaps loading mod_ssl is 
> causing the load of Net::SSL to fail (symbol conflict?), resulting 
> in it falling back to IO::Socket::SSL (which ignores HTTPS_CA_FILE)?

do you have both IO::Socket::SSL (+Net::SSLeay) and Crypt::SSLeay 
properly installed on the system?

> Does IO::Socket::SSL provide a means for passing parameters via 
> LWP::UserAgent (maybe through UserAgent's constructor or one of its 
> other methods?)?
> It definitely seems to support verification of peer certificates in 
> its interface, but it's unclear from the available documentation 
> how one does that in conjunction with LWP::UserAgent, if that's 
> even possible.  If there is a way to do this, then an easy 
> workaround seems to be to simply accomodate both configuration 
> methods in my code.

i just did some testing and with one caveat you can do it like this 
with IO::Socket:SSL and LWP:

# NB: only works with ciphers that support certificate verification 
e.g. with Apache/mod_ssl:
#   SSLCipherSuite RSA
# With some cipher suites server certificate may not be verified.
use strict;
use IO::Socket::SSL 0.97;
use LWP::UserAgent;

my $ctx = new IO::Socket::SSL::SSL_Context(
   SSL_verify_mode => 0x01,
   SSL_ca_file => 'certs/8086.pem',
);
IO::Socket::SSL::set_default_context($ctx);

my $ua = LWP::UserAgent->new();
my $rq = HTTP::Request->new(GET => 'https://foo.bar.int:8086/');
my $rt = $ua->request($rq);
print $rt->content();

1;


br. aspa
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


<>

Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

[Marko Asplund]

On 2006-02-13, at 23.42, Richard Eggert wrote:

It seems that it first tries to load the SSL module from  
Crypt::SSLeay first, and if that fails, it then tries to load  
IO::Socket::SSL, which, as far as I can tell, doesn't use  
HTTPS_CA_FILE (but may provide another mechanism for accomplishing  
the same thing).  Could it be that perhaps loading mod_ssl is  
causing the load of Net::SSL to fail (symbol conflict?), resulting  
in it falling back to IO::Socket::SSL (which ignores HTTPS_CA_FILE)?


do you have both IO::Socket::SSL (+Net::SSLeay) and Crypt::SSLeay  
properly installed on the system?


Does IO::Socket::SSL provide a means for passing parameters via  
LWP::UserAgent (maybe through UserAgent's constructor or one of its  
other methods?)?
It definitely seems to support verification of peer certificates in  
its interface, but it's unclear from the available documentation  
how one does that in conjunction with LWP::UserAgent, if that's  
even possible.  If there is a way to do this, then an easy  
workaround seems to be to simply accomodate both configuration  
methods in my code.


i just did some testing and with one caveat you can do it like this  
with IO::Socket:SSL and LWP:


# NB: only works with ciphers that support certificate verification  
e.g. with Apache/mod_ssl:

#   SSLCipherSuite RSA
# With some cipher suites server certificate may not be verified.
use strict;
use IO::Socket::SSL 0.97;
use LWP::UserAgent;

my $ctx = new IO::Socket::SSL::SSL_Context(
  SSL_verify_mode => 0x01,
  SSL_ca_file => 'certs/8086.pem',
);
IO::Socket::SSL::set_default_context($ctx);

my $ua = LWP::UserAgent->new();
my $rq = HTTP::Request->new(GET => 'https://foo.bar.int:8086/');
my $rt = $ua->request($rq);
print $rt->content();

1;


br. aspa
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]

RE: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

[Richard Eggert]

I've been digging through the code of the libraries for LWP, etc., and 
discovered that Net::HTTPS contains the following code:
 
if ($IO::Socket::SSL::VERSION){
 $SSL_SOCKET_CLASS = "IO::Socket::SSL"; # it was already loaded
}
else {
 eval { require Net::SSL; };  # from Crypt-SSLeay
 if ($@) {
  my $olderrsv = $@;
  eval {
   require IO::Socket::SSL;
  };
  if ($@) {
   $old_errsv =~ s/\s\([EMAIL PROTECTED] contains:.*\)/)/g;
   die $old_errsv . $@;
  }
  $SSL_SOCKET_CLASS = "IO::Socket::SSL";
 }
 else {
  $SSL_SOCKET_CLASS = "Net::SSL";
 }
}
 
 
 
It seems that it first tries to load the SSL module from Crypt::SSLeay first, 
and if that fails, it then tries to load IO::Socket::SSL, which, as far as I 
can tell, doesn't use HTTPS_CA_FILE (but may provide another mechanism for 
accomplishing the same thing).  Could it be that perhaps loading mod_ssl is 
causing the load of Net::SSL to fail (symbol conflict?), resulting in it 
falling back to IO::Socket::SSL (which ignores HTTPS_CA_FILE)?
 
Does IO::Socket::SSL provide a means for passing parameters via LWP::UserAgent 
(maybe through UserAgent's constructor or one of its other methods?)?  It 
definitely seems to support verification of peer certificates in its interface, 
but it's unclear from the available documentation how one does that in 
conjunction with LWP::UserAgent, if that's even possible.  If there is a way to 
do this, then an easy workaround seems to be to simply accomodate both 
configuration methods in my code.
 
 
 
 
 
Rich Eggert
Member of Technical Staff
Proteus Technologies, LLC
http://www.proteus-technologies.com
 



From: [EMAIL PROTECTED] on behalf of Marko Asplund
Sent: Mon 2/13/2006 2:13 PM
To: openssl-users@openssl.org
Subject: Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl 
applications?



Richard Eggert wrote:
 > ...
> My best guess at what's happening is that mod_ssl is preloading libssl
> and configuring it according to its own requirements (and mod_ssl
> doesn't care about the certificates of other servers), and when my code
> runs (later) under mod_perl, the variables I'm sending it are being
> completely ignored.

Apache/mod_ssl server configuration should not interfere with your
libwww-perl/OpenSSL client configuration in any way.

try to do some printf debugging and print the relevant environment
variable values to a log file. do the variables have the correct values
when the script is being run?


br. aspa
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


<>

RE: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

[Richard Eggert]

Yep.  Environment variables are being set.  I've even tried including a SetEnv 
in the Apache config instead of setting the variables inside my code.  I've 
written them to the log, and they're definitely being set.  They're just being 
ignored.  As I said before, the problem goes away if I just disable mod_ssl and 
connect to the server using regular HTTP (while continuing to use HTTPS to 
connect to Tomcat within my code).  mod_ssl on => HTTPS_CA_FILE ignored (or the 
code that's executed by whatever reads the variable fails for some reason).  
mod_ssl off => HTTPS_CA_FILE gets used to validate Tomcat's certificate.   I 
can only assume that some global variable is being set when mod_ssl is 
configured that causes the change to HTTPS_CA_FILE (or HTTPS_CA_DIR) to be 
ignored when they're used by code running within mod_perl.  Two of us worked on 
it for hours and that's the only conclusion we could draw, though neither of 
would have thought that was the case before we saw it for ourselves.
 
 
 
Rich Eggert
Member of Technical Staff
Proteus Technologies, LLC
http://www.proteus-technologies.com
 
 
 
 



From: [EMAIL PROTECTED] on behalf of Marko Asplund
Sent: Mon 2/13/2006 2:13 PM
To: openssl-users@openssl.org
Subject: Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl 
applications?



Richard Eggert wrote:
 > ...
> My best guess at what's happening is that mod_ssl is preloading libssl
> and configuring it according to its own requirements (and mod_ssl
> doesn't care about the certificates of other servers), and when my code
> runs (later) under mod_perl, the variables I'm sending it are being
> completely ignored.

Apache/mod_ssl server configuration should not interfere with your
libwww-perl/OpenSSL client configuration in any way.

try to do some printf debugging and print the relevant environment
variable values to a log file. do the variables have the correct values
when the script is being run?


br. aspa
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


 
<>

Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

[Marko Asplund]

Richard Eggert wrote:
> ...
My best guess at what's happening is that mod_ssl is preloading libssl 
and configuring it according to its own requirements (and mod_ssl 
doesn't care about the certificates of other servers), and when my code 
runs (later) under mod_perl, the variables I'm sending it are being 
completely ignored.


Apache/mod_ssl server configuration should not interfere with your 
libwww-perl/OpenSSL client configuration in any way.


try to do some printf debugging and print the relevant environment 
variable values to a log file. do the variables have the correct values 
when the script is being run?



br. aspa
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

[Richard Eggert]

I'm having a problem getting Crypt::SSLeay to authenticate 
server certificates when running under mod_perl on a web server that has mod_ssl 
enabled.  I'm not sure if this is a bug with Crypt::SSLeay, mod_ssl, 
mod_perl, Net::SSLeay, or the underlying OpenSSL libraries, but I'm hoping 
someone here will at least be able to narrow down where the problem lies.  
Additionally, I'm running under a fairly old Linux distribution (Red Hat AS 3.0) 
with Perl 5.8.0, Apache 2.0.40, mod_perl 1.99_07, and libssl 0.9.6, but 
given that I haven't seen this problem reported anywhere else, let alone 
reported as having been fixed, I'm fairly confident that it still applies to 
more recent software versions.
 
Here's an overview of what I'm trying to 
do:
 
I've written a component that runs on a Perl-based 
web portal system residing under mod_perl on an Apache web server configured 
with mod_ssl.  User authentication is handled by the Perl-based portal 
framework, and my component connects to a servlet on a Tomcat server residing on 
a separate machine.  Due to the sensitive nature of the data being handled, 
all connections (from the user to the web server and from the web server to 
Tomcat) are being done via HTTPS.  For security reasons, I need to validate 
the Tomcat server's certificate.  I'm using LWP::UserAgent in conjunction 
with Crypt::SSLeay, and my Perl component is setting the appropriate environment 
variable (HTTPS_CA_FILE and/or HTTPS_CA_DIR, I've tried both) as per the 
Crypt::SSLeay documentation.
 
As a test scenario, I configured Tomcat with a 
self-signed certificate, and my component is using a bogus CA bundle.  The 
expected behavior is that the connection to Tomcat should fail due to the 
mismatched certificates.
 
 
However, what actually happens is that all requests 
sent to Tomcat succeed without even so much as a warning about the invalid 
certificate.
 
In the process of trying to narrow down the cause 
of the problem, I tried a number of things.
 
I tried running the snippet of code handling the 
HTTPS request to Tomcat as a standalone script with the exact same (mismatched) 
certificates in place.  This resulted in the expected behavior 
(failure due to invalid server certificate).
 
I tried disabling mod_ssl and connecting to the web 
server via HTTP instead of HTTPS (while still using HTTPS for the connection to 
Tomcat).  This also resulted in the expected behavior.
 
I tried running the snippet of code as a standalone 
script that gets invoked (in backticks) by my mod_perl component.  This 
resulted in the expected behavior.  
 
It's only when mod_ssl is enabled that my component 
behaves incorrectly and fails to properly validate the server's certificate 
against the CA bundle.
 
 
My best guess at what's happening is that mod_ssl 
is preloading libssl and configuring it according to its own requirements 
(and mod_ssl doesn't care about the certificates of other servers), and 
when my code runs (later) under mod_perl, the variables I'm sending it are 
being completely ignored.
 
 
Can this be fixed, or can anyone think of any 
viable workarounds for this (that don't involve running my code as a standalone 
script)?
 
 
Thanks.
 

Crypt::SSLeay build problem

[Richard Proctor]

Hi,

Crypt::SSLeay build problem

I run a Cobalt RaQ4 server that has a number of sites.  I need to twesk the
(perl) shopping suite of one of the users so it works with a credit card
company.  To do this it needs to send https messages.  The server can happily
recieve https.

The system (built on RedHat) has a built in partial installation of openssl,
(without libraries), that is not enough to allow my to install
Crypt::SSLeay.  

I have built a new complete version in another place, so as not to disturb
the existing use of the built in version.

I then built and tried to test Crypt::SSLeay which resulted in errors.

*** Log of building Crypt::SSLeay

[root Crypt-SSLeay-0.51]# perl Makefile.PL
No OpenSSL installation found, usually in /usr/local/openssl
Which OpenSSL build path do you want to link against?  /wws/bin


BUILD INFORMATION


ssl dir:/wws/bin
libraries:  -lssl -lcrypto -lgcc -lRSAglue -lrsaref
include dir:/wws/bin/include
ssl header: openssl/ssl.h
ssl candidate:  /wws/bin; /wws/bin/include/openssl; OpenSSL 0.9.8



Note (probably harmless): No library found for -lgcc
Note (probably harmless): No library found for -lRSAglue
Note (probably harmless): No library found for -lrsaref
Writing Makefile for Crypt::SSLeay

*** Log of building Crypt::SSLeay
[root Crypt-SSLeay-0.51]# make
cc -c -I/wws/bin/include -Dbool=char -DHAS_BOOL -I/usr/local/include -O2-DVE
RSION=\"0.51\" -DXS_VERSION=\"0.51\" -fpic -I/usr/lib/perl5/5.00503/i386-linux/C
ORE  SSLeay.c
SSLeay.xs: In function `XS_Crypt__SSLeay__Conn_new':
SSLeay.xs:252: warning: passing arg 2 of `SSL_set_info_callback' from incompatib
le pointer type
Running Mkbootstrap for Crypt::SSLeay ()
chmod 644 SSLeay.bs
LD_RUN_PATH="/wws/bin/lib" cc -o blib/arch/auto/Crypt/SSLeay/SSLeay.so  -shared
-L/usr/local/lib SSLeay.o-L/wws/bin/lib -lssl -lcrypto
chmod 755 blib/arch/auto/Crypt/SSLeay/SSLeay.so
cp SSLeay.bs blib/arch/auto/Crypt/SSLeay/SSLeay.bs
chmod 644 blib/arch/auto/Crypt/SSLeay/SSLeay.bs
Manifying blib/man3/Crypt::SSLeay.3

*** Log of testing Crypt::SSLeay

[root Crypt-SSLeay-0.51]# make test
PERL_DL_NONLAZY=1 /usr/bin/perl -Iblib/arch -Iblib/lib -I/usr/lib/perl5/5.00503/
i386-linux -I/usr/lib/perl5/5.00503 -e 'use Test::Harness qw(&runtests $verbose)
; $verbose=0; runtests @ARGV;' t/*.t
t/net_ssl...dubious
Test returned status 0 (wstat 11, 0xb)
Undefined subroutine &Test::Harness::WCOREDUMP called at /usr/lib/perl5/5.00503/
Test/Harness.pm line 288.
make: *** [test_dynamic] Error 255

What is wrong, how do I fix it?

Thanks.

Richard



-- 
Personal [EMAIL PROTECTED]http://www.waveney.org
Telecoms [EMAIL PROTECTED]  http://www.WaveneyConsulting.com
Web services [EMAIL PROTECTED]http://www.wavwebs.com
Independent Telecomms Specialist, ATM expert, Web Analyst & Services

__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] Compile problems on Linux

[Tijmen Ruizendaal]

hello,
i'm trying to compile Crypt::SSLeay on a Debian woody box with
openssl-0.9.7d-4.backports.org.1

This is the output from Makefile.PL:

[16:51:26] [usr:tijmen] [EMAIL PROTECTED] \> perl ./Makefile.PL
Found OpenSSL (version OpenSSL 0.9.7) installed at /usr
Which OpenSSL build path do you want to link against? [/usr]


BUILD INFORMATION


ssl dir:/usr
libraries:  -lssl -lcrypto -lgcc -lRSAglue -lrsaref
include dir:/usr/include
ssl header: openssl/ssl.h
ssl candidate:  /usr; /usr/include/openssl; OpenSSL 0.9.7



Note (probably harmless): No library found for -lgcc
Note (probably harmless): No library found for -lRSAglue
Note (probably harmless): No library found for -lrsaref
Writing Makefile for Crypt::SSLeay
[16:51:29] [usr:tijmen] [EMAIL PROTECTED] \>

The output from 'make' is very big so i've put it online here:
http://fokdat.nl/~tijmen/ssleay_compile_output.txt

Does somebody know how to solve this problem?
offcourse, i tried google :-D

Thanks
Tijmen Ruizendaal
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Segmentation fault when accessing TLS web server using OpenSSL and Crypt::SSLeay

[Josh Chamas]

Scialino Marco wrote:
Hi, 

I hope someone can give me help on this.
After installing perl, openssl and Crypt::SSLeay I built a simple perl
program to connect to a web server that has *only* Transport Layer
Protocol (TLS V1) enabled, but I get a segmentation fault. 

The same program has no problem if connecting to a SSL V3 server.
This is the stack I use on Solaris 2.8: 

perl 5.005_03
OpenSSL 0.9.6g
Crypt:SSLeay 0.45
I have not heard of this problem before, but have not known the situation
with just TLS V1 enabled.  You might try another openssl version, either
earlier/later in the 0.9.6x series, or perhaps 0.9.7, or go earlier.
Note if you have a problem getting Crypt::SSLeay to compile with
an earlier version, you can get earlier versions of Crypt::SSLeay
at backpan here:
  http://backpan.cpan.org/modules/by-authors/id/C/CH/CHAMAS/
Regards,
Josh

Josh Chamas, Founder| NodeWorks - http://www.nodeworks.com
Chamas Enterprises Inc. | NodeWorks Directory - http://dir.nodeworks.com
http://www.chamas.com   | Apache::ASP - http://www.apache-asp.org
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Segmentation fault when accessing TLS web server using OpenSSL and Crypt::SSLeay

[Scialino Marco]

Hi, 

I hope someone can give me help on this.

After installing perl, openssl and Crypt::SSLeay I built a simple perl
program to connect to a web server that has *only* Transport Layer
Protocol (TLS V1) enabled, but I get a segmentation fault. 

The same program has no problem if connecting to a SSL V3 server.

This is the stack I use on Solaris 2.8: 

perl 5.005_03
OpenSSL 0.9.6g
Crypt:SSLeay 0.45

All these items were compiled by gcc 3.3.2.

Here is the code I try to execute:

#!/usr/local/bin/perl
   use LWP::UserAgent;
   use HTTP::Request::Common;

   $url = "https://:/";

   $ua  = LWP::UserAgent->new;

   $res = $ua->request(GET $url);  # get the http response

   $http_res_string = $res->status_line;   # get http result

   print "\n http result: $http_res_string";

   $str = $res->as_string; # get html page
   print "\n$str";

   exit;


By inserting print statement here and there I saw that I get the
segmentation fault when executing the line:

$res = $ua->request(GET $url);



Any help gratly appreciated, thanks, 

Marco 




__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay & client certificate authentication

[Sean Evans]

Reposting this since it got lost in the churn.

I have a Perl script using that is failing mysteriously to connect with
an HTTPS site requiring client certificates for authentication. Here's
the command that allows me to connect to the site in question:

openssl s_client -connect hostname:443 -cert test.crt
 -key test.key -CAfile cacerts.crt -prexit

I can then do a GET on the directory protected with cert auth. Something
key to note is that the connection is not successfu1l unless -CAfile is
present to show the server that my client's certificate (test.crt)
chains to a CA trusted by the server.

Here is debug output from my script:

-BEGIN OUTPUT
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
SSL_connect:SSL renegotiate ciphers
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server certificate request A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client certificate A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL3 alert read:fatal:unknown CA
SSL_connect:failed in SSLv3 read finished A
-END OUTPUT-

The Perl module my script is using, Crypt::SSLeay, has options
comparable to -CAfile and -CAdir, but when specified I get the following
debug output which seems to be telling me that the *client* failed to
verify the server's cert:

-BEGIN OUTPUT-SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL3 alert write:fatal:unknown CA
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:before/connect initialization
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL3 alert write:fatal:bad certificate
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:before/connect initialization
SSL_connect:SSLv2 write client hello A
SSL_connect:failed in SSLv2 read server hello A
-END OUTPUT-

So I need to figure out where things are going wrong in Crypt::SSLeay,
which is basically just a wrapper around OpenSSL. Since I was successful
in connecting with s_client, I looked in s_client.c and found this:

  SSL_CTX_set_verify(ctx,verify,verify_callback);
  if (!set_cert_stuff(ctx,cert_file,key_file))
goto end;

  if ((!SSL_CTX_load_verify_locations(ctx,CAfile,CApath)) ||
  (!SSL_CTX_set_default_verify_paths(ctx)))
{
  /* BIO_printf(bio_err,"error setting default verify
locations\n"); */
  ERR_print_errors(bio_err);
  /* goto end; */
}

  store = SSL_CTX_get_cert_store(ctx);
  X509_STORE_set_flags(store, vflags);

  con=SSL_new(ctx);

So it would appear that SSL_CTX_load_verify_locations is the OpenSSL
function that gets called with CAfile. Looking inside SSLeay.xs, which
implements the Perl glue to OpenSSL functions, I find:

  SV*
  SSL_CTX_set_verify(ctx)
SSL_CTX* ctx
PREINIT:
  char* CAfile;
  char* CAdir;
CODE:
  CAfile=getenv("HTTPS_CA_FILE");
  CAdir =getenv("HTTPS_CA_DIR");

  if(!CAfile && !CAdir) {
SSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, NULL);
RETVAL = newSViv(0);
  } else {
SSL_CTX_load_verify_locations(ctx,CAfile,CAdir);
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
RETVAL = newSViv(1);
  }
OUTPUT:
  RETVAL

This appears to be doing the right thing since it calls
SSL_CTX_load_verify_locations, but I am unsure that I understand Perl XS
well enough to confirm this.

It may be unimportant, but the only suspicious thing I can see is that
s_client calls SSL_CTX_set_verify before calling
SSL_CTX_load_verify_locations whereas SSLeay.xs reverses the order of
those calls. Is that significant? If not, does anyone have hints as to
where to look for a solution?

Thanks,
-- 
Sean Evans

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay & client certificate authentication

[Sean Evans]

I have a Perl script using that is failing mysteriously to connect with 
an HTTPS site requiring client certificates for authentication. Here's 
the command that allows me to connect to the site in question:

openssl s_client -connect hostname:443 -cert test.crt
-key test.key -CAfile cacerts.crt -prexit

I can then do a GET on the directory protected with cert auth. Something 
key to note is that the connection is not successfu1l unless -CAfile is
present to show the server that my client's certificate (test.crt)
chains to a CA trusted by the server.

Here is debug output from my script:

-BEGIN OUTPUT
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
SSL_connect:SSL renegotiate ciphers
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server certificate request A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client certificate A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL3 alert read:fatal:unknown CA
SSL_connect:failed in SSLv3 read finished A
-END OUTPUT-

The Perl module my script is using, Crypt::SSLeay, has options 
comparable to -CAfile and -CAdir, but when specified I get the following 
debug output which seems to be telling me that the *client* failed to 
verify the server's cert:

-BEGIN OUTPUT-SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL3 alert write:fatal:unknown CA
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:before/connect initialization
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL3 alert write:fatal:bad certificate
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:before/connect initialization
SSL_connect:SSLv2 write client hello A
SSL_connect:failed in SSLv2 read server hello A
-END OUTPUT-

So I need to figure out where things are going wrong in Crypt::SSLeay, 
which is basically just a wrapper around OpenSSL. Since I was successful 
in connecting with s_client, I looked in s_client.c and found this:

 SSL_CTX_set_verify(ctx,verify,verify_callback);
 if (!set_cert_stuff(ctx,cert_file,key_file))
   goto end;

 if ((!SSL_CTX_load_verify_locations(ctx,CAfile,CApath)) ||
 (!SSL_CTX_set_default_verify_paths(ctx)))
   {
 /* BIO_printf(bio_err,"error setting default verify
locations\n"); */
 ERR_print_errors(bio_err);
 /* goto end; */
   }

 store = SSL_CTX_get_cert_store(ctx);
 X509_STORE_set_flags(store, vflags);

 con=SSL_new(ctx);

So it would appear that SSL_CTX_load_verify_locations is the OpenSSL
function that gets called with CAfile. Looking inside SSLeay.xs, which 
implements the glue to OpenSSL functions, I find:

 SV*
 SSL_CTX_set_verify(ctx)
   SSL_CTX* ctx
   PREINIT:
 char* CAfile;
 char* CAdir;
   CODE:
 CAfile=getenv("HTTPS_CA_FILE");
 CAdir =getenv("HTTPS_CA_DIR");

 if(!CAfile && !CAdir) {
   SSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, NULL);
   RETVAL = newSViv(0);
 } else {
   SSL_CTX_load_verify_locations(ctx,CAfile,CAdir);
   SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
   RETVAL = newSViv(1);
 }
   OUTPUT:
 RETVAL

This appears to be doing the right thing since it calls
SSL_CTX_load_verify_locations, but I am unsure that I understand Perl XS
well enough to confirm this.

It may be unimportant, but the only suspicious thing I can see is that
s_client calls SSL_CTX_set_verify before calling 
SSL_CTX_load_verify_locations whereas SSLeay.xs reverses the order of
those calls. Is that significant? If not, does anyone have hints as to 
where to look for a solution?

Thanks,
-- 
Sean Evans

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] Windows XP - VS.NET 2003 setup problems

[Kevin Lane]

I'm hoping someone this list might be able to help me out.  I've been 
working on getting this setup for about a week now and I feel like I'm 
just this close but I'm missing one key element and don't know what it 
is.  I'm trying to get the Crypt::SSLeay module setup for Perl 5.8 
(Active Perl) so I can write a program that will access Secure Web pages 
in hopes to eventually upload and download files programatically.  
Here's what I've done.

1.  Installed Activer Perl 5.8 Binary
2.  Installed Visual Studio .NET 2003
3.  Downloaded the latest OpenSSL - Extracted to C:\
4.  Opened Visual Studio Command prompt and went to c:\openssl-0.9.7c
5.  Ran: perl Configure VC-WIN32
6.  Did:  ms\do_masm
7.  Did:  nmake -f ms\ntdll.mak
8.  Did:  cd out32dll and then ..\ms\test and it passed ok.  So I think 
the Openssl Part compiled fine
9.  Created all the c:\openssl directories like the Install.W32 file 
said and copied all the files to them
10.  Now on too Crypt::SSLeay - First I tried to use PPM3 I found some 
repositories that had this module but I always got the
Error: no suitable installation target found for package Crypt-SSLeay.
I tried setting a different target but obviosly I didn't get it right 
because it kept giving me the same error.  So I mived on to using CPAN I 
installed that module using PPM3 and it went through and installed a 
whole slew of other modules, it downloaded and compiled everyting just 
fine. So I got out of PPM and go into CPAN and did a M Crypt::SSLeay and 
it gave me the description of the module version..and all the info about 
the module.  So I go ahead with the
11.  install Crypt::SSLeay
It does a lot of fetching and verify's the CHECKSUM.  Then it presents 
me with this

Found OpenSSL (version OpenSSL 0.9.7) installed at c:/openssl
Which Openssl build path do you want to link against [c:/openssl]
I accept the default because I figure that, that is the reason for 
creating that directory and copying all the library's DLL's and stuff.
it goes through and everything looks fine I think.  There are some 
warnings like No library found for '-lRSAglue' and No library found for 
'-lrsaref', and farther down in there is a warning that looks like

c1 : warning c4349: /Ff is deprecated and will not be supported in 
future versions of Visual C++; remove /Gf or use /GF instead
SSLeay.xs(252) : warning c4090: 'function' : different 'const' qualifiers
SSLeay.xs(252) : warning formal: formatl parameter 1 different from 
declaration
SSLeay:xs(299) : warning c4018: '>' : signed/unsigned mismatch
SSLeay.xs(302) : warning c4018 '>=' : signed/unsigned mismatch
SSLeay.xs(305) : warning c4018 '>' : signed/unsigned mismatch
SSLeay.xs(336) : warning c4018 '>' : signed/unsigned mismatch
SSLeay.xs(344) : warning c4018 '>' : signed/unsigned mismatch
SSLeay.xs(352) : warning c4018 '<' : signed/unsigned mismatch

Then it says

"Running Mkbootstrap for Crypt::SSLeay ()"

it finished creating SSLeay.lib and stuff and checks the nmake program 
and says -- OK
does the Test and I see
net_sslok
ssl_context...ok 
All Tests Successful

and then it does the Make install and Installs all the files to the 
C:\perl\site\lib\auto\crypt\ssleay, C:\perl\site\lib\Net\SSL, and the 
C:\perl\site\lib\crypt\ directories and finally it appends the 
installation info to the C\lib\perllocal.pod and once again checks the 
nmake install and says  --OK

I don't know of any other setup procedures and I'm not too sure about 
proxies or certificates but when I try to execute this command

lwp-request https://www.nodeworks.com

I get the 500 SSL negotiation failed error

If anyone has any idea what this is as a result of please let me know, 
I'm running out of ideas.

Thanks,
Kevin


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] compile problems on Linux

[Lutz Jaenicke]

On Tue, Dec 31, 2002 at 12:40:36AM +0200, CamCorder wrote:
> I'm using OpenSSL-0.9.6g and Crypt-SSLeay-0.45. I just encountered a
> compile problem which dumps these lines : 
> [root@localhost Crypt-SSLeay-0.45]# make
> gcc -c  -I/usr/local/openssl/include -D_REENTRANT -D_GNU_SOURCE
> -fno-strict-aliasing -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
> -I/usr/include/gdbm -O2 -march=i386 -mcpu=i686   -DVERSION=\"0.45\"
> -DXS_VERSION=\"0.45\" -fpic
> "-I/usr/lib/perl5/5.8.0/i386-linux-thread-multi/CORE"   SSLeay.c
> In file included from /usr/local/openssl/include/openssl/evp.h:89,
>  from /usr/local/openssl/include/openssl/x509.h:67,
>  from /usr/local/openssl/include/openssl/ssl.h:122,
>  from crypt_ssleay_version.h:1,
>  from SSLeay.xs:20:
> /usr/local/openssl/include/openssl/des.h:193: parse error before '&'
> token
> make: *** [SSLeay.o] Error 1
> 
> When I removed the 
> openssl/des.h:193: -> char *crypt(const char *buf,const char *salt);
> line from des.h it compiled and the binary works well now. Just wanted
> to notify developers. Sorry if this is a wrong place to put . 

This problem has finally been resolved by removing the crypt() support
in OpenSSL 0.9.7.

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
http://www.aet.TU-Cottbus.DE/personen/jaenicke/
BTU Cottbus, Allgemeine Elektrotechnik
Universitaetsplatz 3-4, D-03044 Cottbus
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] compile problems on Linux

[CamCorder]

I'm using OpenSSL-0.9.6g and Crypt-SSLeay-0.45. I just encountered a
compile problem which dumps these lines : 
[root@localhost Crypt-SSLeay-0.45]# make
gcc -c  -I/usr/local/openssl/include -D_REENTRANT -D_GNU_SOURCE
-fno-strict-aliasing -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-I/usr/include/gdbm -O2 -march=i386 -mcpu=i686   -DVERSION=\"0.45\"
-DXS_VERSION=\"0.45\" -fpic
"-I/usr/lib/perl5/5.8.0/i386-linux-thread-multi/CORE"   SSLeay.c
In file included from /usr/local/openssl/include/openssl/evp.h:89,
 from /usr/local/openssl/include/openssl/x509.h:67,
 from /usr/local/openssl/include/openssl/ssl.h:122,
 from crypt_ssleay_version.h:1,
 from SSLeay.xs:20:
/usr/local/openssl/include/openssl/des.h:193: parse error before '&'
token
make: *** [SSLeay.o] Error 1

When I removed the 
openssl/des.h:193: -> char *crypt(const char *buf,const char *salt);
line from des.h it compiled and the binary works well now. Just wanted
to notify developers. Sorry if this is a wrong place to put . 


Distro = Redhat 8.0
Kernel = 2.4.20
Perl = 5.8.0 (redhat build)

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay - https and reuse of session id

[Lutz Jaenicke]

On Sat, Dec 21, 2002 at 10:28:38AM +0100, Thomas Hörndlein wrote:
> I'm using LWP::UserAgent and Crypt::SSLeay to access a webserver via 
> https which basically works. Unfortunatly a new handshake is done each 
> time the UserAgent accesses an URL. Is it possible to reuse the 
> Session-ID I got when the script connects to the webserver the first 
> time for follow-up sessions?

It is not sufficient to reuse a "Session-ID". You actually have to
reuse the session, including the pre-master secret etc.
I am not familiar with Crypt::SSLeay but reusing session normally means
to maintain a session database, probably shared between processes...
Thus, if it is not supported by Crypt:SSLeay...

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
http://www.aet.TU-Cottbus.DE/personen/jaenicke/
BTU Cottbus, Allgemeine Elektrotechnik
Universitaetsplatz 3-4, D-03044 Cottbus
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay - https and reuse of session id

[Thomas Hörndlein]

Hello,

I'm using LWP::UserAgent and Crypt::SSLeay to access a webserver via 
https which basically works. Unfortunatly a new handshake is done each 
time the UserAgent accesses an URL. Is it possible to reuse the 
Session-ID I got when the script connects to the webserver the first 
time for follow-up sessions?

I would be grateful for any infos,

Thomas

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [ Crypt::SSLeay ] FYI

[Lutz Jaenicke]

On Fri, Dec 20, 2002 at 04:08:40PM +0100, H.Merijn Brand wrote:
> Crypt-SSLeah-0.45 successfully built and installed on
> 
> HP-UX 11.00  perl-5.6.1, perl-5.8.0, blead@18335  openssl-0.9.6g
> cygwin-1.3.17-1  perl-5.8.0/64, blead@18228/32openssl-0.9.6h-1
> 
> HP-UX needed -lgcc (Makefile.PL did this automatically) for _umoddi3, just as
> AIX-4.3

-lgcc is only needed, if any part was built with gcc.

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
http://www.aet.TU-Cottbus.DE/personen/jaenicke/
BTU Cottbus, Allgemeine Elektrotechnik
Universitaetsplatz 3-4, D-03044 Cottbus
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[ Crypt::SSLeay ] FYI

[H.Merijn Brand]

Crypt-SSLeah-0.45 successfully built and installed on

HP-UX 11.00  perl-5.6.1, perl-5.8.0, blead@18335  openssl-0.9.6g
cygwin-1.3.17-1  perl-5.8.0/64, blead@18228/32openssl-0.9.6h-1

HP-UX needed -lgcc (Makefile.PL did this automatically) for _umoddi3, just as
AIX-4.3

-- 
H.Merijn BrandAmsterdam Perl Mongers (http://amsterdam.pm.org/)
using perl-5.6.1, 5.8.0 & 633 on HP-UX 10.20 & 11.00, AIX 4.2, AIX 4.3,
  WinNT 4, Win2K pro & WinCE 2.11.  Smoking perl CORE: [EMAIL PROTECTED]
http:[EMAIL PROTECTED]/   [EMAIL PROTECTED]
send smoke reports to: [EMAIL PROTECTED], QA: http://qa.perl.org

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay Raven conflict using apache and web services.

[Keary Suska]

Title: Re: Crypt::SSLeay  Raven conflict using apache and web services.



on 11/29/02 8:13, [EMAIL PROTECTED] purportedly said:

Myself and one of my companies¹ associates are in the process of implementing a connection between our systems using web services. Our associates are using Apache with the Raven SSL module and mod_perl. They are trying to connect to our system via a call through SOAP::Lite via HTTPS this required the introduction of Crypt:SSLeay and OpenSSL. The problem is that when apache is running Raven and the web service client, implemented in perl, running under mod perl, tries to make a call via HTTPS it fails and gives an error stating this ³child pid 14308 exit signal Segmentation Fault (11).² If we disable raven the web service client connects without error also if we make the call over standard HTTP it connects without error it is just when Apache and the web service client are running SSL simultaneously. I am under the opinion that the two are fighting for a resource lower down the chain, but I do not have the expertise in these particular implementations of SSL software to know what both are precisely doing. I would like to know if anyone has heard of such a conflict and if there is possibly a known remedy for this problem. Any help would be greatly appreciated. 

IIRC, mod_perl must be loaded in httpd.conf before Raven SSL. Also, Raven should probably be loaded as a DSO, as historically they have had many conflicts when installed statically.

Keary Suska
Esoteritech, Inc.
"Leveraging Open Source for a better Internet"

Crypt::SSLeay Raven conflict using apache and web services.

[Kenton Smeltzer]

To anyone that can help,

Myself and one of my companies’ associates are in the
process of implementing a connection between our systems using web services.
Our associates are using Apache with the Raven SSL module and mod_perl. They
are trying to connect to our system via a call through SOAP::Lite via HTTPS
this required the introduction of Crypt:SSLeay and OpenSSL. The problem is that
when apache is running Raven and the web service client, implemented in perl, running
under mod perl, tries to make a call via HTTPS it fails and gives an error
stating this “child pid 14308 exit signal Segmentation Fault (11).”
If we disable raven the web service client connects without error also if we make
the call over standard HTTP it connects without error it is just when Apache
and the web service client are running SSL simultaneously. I am under the
opinion that the two are fighting for a resource lower down the chain, but I do
not have the expertise in these particular implementations of SSL software to
know what both are precisely doing. I would like to know if anyone has heard of
such a conflict and if there is possibly a known remedy for this problem. Any
help would be greatly appreciated.

 

Thanks,

Kenton

Re: [Crypt::SSLeay] compile problems on HP-UX 11.11

[Lutz Jaenicke]

On Tue, Nov 05, 2002 at 04:04:11PM +0100, Hiemisch Joerg wrote:
> Hi All,
> I have some trouble to compile SSLeay on HP-UX 11.11
> 
> I installed a new system with latest recommended patches ( including perl
> 5.6.1 ).
> 
> # perl -v
> 
> This is perl, v5.6.1 built for PA-RISC1.1-thread-multi
> (with 1 registered patch, see perl -V for more detail)
> 
> Copyright 1987-2001, Larry Wall
> 
> Binary build 627 provided by ActiveState Tool Corp.
> http://www.ActiveState.com
> Built 21:42:53 Jun 20 2001
> 
> 
> 
> I installed openssl 0.9.6.d from HP-UX Software Porting Center.
> I installed gcc 3.2 from HP-UX Software Porting Center.
> 
> When I try to install SSLeay I get the following output.
> 
> # pwd
> /tmp/Crypt-SSLeay-0.45
> # make
> gcc -c -I/usr/local/include -D_POSIX_C_SOURCE=199506L -D_HPUX_SOURCE
> -L/lib/pa1.1 -DUINT32_MAX_BROKEN -mpa-risc-1-1 -fPIC -fno-strict-aliasing
> -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O
> -DVERSION=\"0.45\"  -DXS_VERSION=\"0.45\" -fPIC
> -I/opt/perl/lib/5.6.1/PA-RISC1.1-thread-multi/CORE  SSLeay.c
> cc1: warning: changing search order for system directory
> "/usr/local/include"
> cc1: warning:   as it has already been specified as a non-system directory
> In file included from
> /opt/perl/lib/5.6.1/PA-RISC1.1-thread-multi/CORE/perl.h:713,
>  from SSLeay.xs:13:
> /usr/include/sys/socket.h:439: parse error before "sendfile"
> /usr/include/sys/socket.h:440: parse error before "bsize_t"
> /usr/include/sys/socket.h:441: parse error before "sendpath"
> /usr/include/sys/socket.h:442: parse error before "bsize_t"
> /usr/include/sys/socket.h:456: parse error before "__sendfile64"
> /usr/include/sys/socket.h:456: parse error before "bsize_t"
> /usr/include/sys/socket.h:457: parse error before "__sendpath64"
> /usr/include/sys/socket.h:457: parse error before "bsize_t"
> /usr/include/sys/socket.h:459: parse error before "sendfile"
> /usr/include/sys/socket.h: In function `sendfile':
> /usr/include/sys/socket.h:459: parse error before "bsize_t"
> /usr/include/sys/socket.h: At top level:
> /usr/include/sys/socket.h:460: parse error before "sendpath"
> /usr/include/sys/socket.h: In function `sendpath':
> /usr/include/sys/socket.h:460: parse error before "bsize_t"
> *** Error exit code 1
> 
> Stop.
> #
> 
> What does it mean?
> Can anybody help me?

gcc has special requirements for the header files. Some of it must
be modified for use with gcc. For this very reason, gcc has private
copies of those header files including the necessary modifications.
If gcc was built on another system (version of the operating system)
conflicts like the one shown might appear.
I cannot say, in how far "perl" specialties may lead to additional
complications in this regard.

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
http://www.aet.TU-Cottbus.DE/personen/jaenicke/
BTU Cottbus, Allgemeine Elektrotechnik
Universitaetsplatz 3-4, D-03044 Cottbus
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] make test fails on Linux

[Keary Suska]

on 10/29/02 11:44 AM, [EMAIL PROTECTED] purportedly said:

> I've just found another post on the ml archives
> concerning my problem, but didn't find any reply, so:
> 
> root@hwsx:~/.cpan/build/Crypt-SSLeay-0.45# make test
> 
> PERL_DL_NONLAZY=1 /usr/bin/perl -Iblib/arch -Iblib/lib
> -I/usr/lib/perl5/i386-linux -I/usr/lib/perl5 -e 'use Test::Harness
> qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
> t/net_ssl...dubious
> Test returned status 0 (wstat 11, 0xb)
> t/ssl_context...dubious
> Test returned status 0 (wstat 11, 0xb)
> FAILED--2 test scripts could be run, alas--no output ever seen
> make: *** [test_dynamic] Error 2

It can be many things. What URL did you provide for testing? Can you access
that URL through your browser?

Keary Suska
Esoteritech, Inc.
"Leveraging Open Source for a better Internet"

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] make test fails on Linux

[Filippo Solinas]

Hi there,

I've just found another post on the ml archives
concerning my problem, but didn't find any reply, so:

root@hwsx:~/.cpan/build/Crypt-SSLeay-0.45# make test

PERL_DL_NONLAZY=1 /usr/bin/perl -Iblib/arch -Iblib/lib -I/usr/lib/perl5/i386-linux 
-I/usr/lib/perl5 -e 'use Test::Harness qw(&runtests $verbose); $verbose=0; runtests 
@ARGV;' t/*.t
t/net_ssl...dubious
Test returned status 0 (wstat 11, 0xb)
t/ssl_context...dubious
Test returned status 0 (wstat 11, 0xb)
FAILED--2 test scripts could be run, alas--no output ever seen
make: *** [test_dynamic] Error 2


- Slackware 8.1 kernel 2.4.18
- Perl 5.6.1
- OpenSSL 0.9.6e
- Crypt-SSLeay-0.45


Any idea?

Thanks,

ph.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] problems

[Foong-Ying Rousey]

Hi,

I'm trying to acess https  urls using LWP module behind a firewall, can't  get it to 
work. I've installed the Crypt::SSLeay
module.

I'm using the lwp-ssl-test that came with Crypt::SSLeay to debug.

I have no problems acessing http urls.

When I run

lwp-ssl-test -d -proxy http://gate.***.com:81 https://www.nodeworks.com

LWP::UserAgent::new: ()
LWP::UserAgent::proxy: https http://gate.***.com:81
LWP::UserAgent::request: ()
LWP::UserAgent::send_request: HEAD https://www.nodeworks.com/
LWP::UserAgent::_need_proxy: Proxied to http://gate.***.com:81
LWP::Protocol::http::request: ()
LWP::UserAgent::request: Simple response: Internal Server Error
HTTPS_PROXY = http://gate.***.com:81
$VAR1 = bless( {
 '_protocol' => 'HTTP/1.1',
 '_request' => bless( {
'_method' => 'HEAD',
'_headers' => bless( {
   'user-agent' => 
'libwww-perl/5.65'
 }, 'HTTP::Headers' ),
'_uri' => bless( do{\(my $o = 
'https://www.nodeworks.com/')}, 'URI::https' ),
'_content' => ''
  }, 'HTTP::Request' ),
 '_headers' => bless( {
'client-response-num' => 1,
'content-type' => 'text/html',
'connection' => 'close',
'date' => 'Fri, 18 Oct 2002 14:00:43 GMT',
'server' => 'NetCache (NetApp/5.2.1R1D12)',
'client-date' => 'Fri, 18 Oct 2002 14:00:44 
GMT',
'content-length' => 302
  }, 'HTTP::Headers' ),
 '_msg' => 'Server Error',
 '_rc' => 500,
 '_content' => ''
   }, 'HTTP::Response' );

How can I tell  where the problem is?

Thanks,
Foong-Ying


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] Looking for modern version of Perl binaries for Win32

[Clinton Pierce]

Looking for a bit of help here.  I need to do some LWP work over https, and
the proxy method for the LWP::UserAgent module doesn't do http-CONNECT style
proxying (it simply re-isses the GET).

According to the manpage, Crypt::SSLeay (0.45) does thorugh the
$ENV{HTTPS_PROXY} interface but the version made available by Activestate
(0.17) doesn't seem to.

Does anyone have a modern Win32/Activestate compatable version of
Crypt::SSLeay compiled and wouldn't mind giving me the binaries?

Thank you!
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] Compile problems with DynaLoader?

[Matt Wagner]

Hey guys,

I've had three customers now who couldn't get the Crypt::SSLeay module
successfully installed, and I had no success myself either.  There all
normal Redhat LINUX servers, without any special configuration (that I know
of).

Anyway, when running "make test", I always get the following:


t/ssl_context...Can't load 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for
module Crypt::SSLeay: blib/arch/auto/Crypt/SSLeay/SSLeay.so: undefined
symbol: SSLeay_add_all_algorithms at
/usr/lib/perl5/5.6.1/i386-linux/DynaLoader.pm line 206.
 at blib/lib/Crypt/SSLeay/CTX.pm line 2
Compilation failed in require at blib/lib/Crypt/SSLeay/CTX.pm line 2.


The server is running Perl v5.6.1 for i386-linux.  Any help would be greatly
appreciated.

Thank you,
Matt Wagner

Envex Developments
Your CGI Script Specialists
http://www.envex.net/



__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Verifying Server Certificates in Perl using LWP HTTPS and Crypt::SSLeay

[Martin Sjögren]

ons 2002-09-04 klockan 10.18 skrev [EMAIL PROTECTED]:
> > NOTE: Please cc all responses directly to me.  Thanks in advance.
> 
> I think that's not fair.
> You ask on a public list, so the answers should be public too,
> that's what a mailinglist is for ...

I think what he's trying to say is that he's not subscribed :)


Regards,
Martin




signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signeradmeddelandedel

Re: Verifying Server Certificates in Perl using LWP HTTPS and Crypt::SSLeay

[h . rueter]

Hi,


> How can I instruct Perl to verify the server certificate? I'm making the 
> request using Perl & LWP, which uses Crypt::SSLeay for HTTPS.
> 
> I'd like to a) verify that the server's certificate is valid and b) verify
> 
> the issuers certificate from the local databse of trusted issuers.
> 
> NOTE: Please cc all responses directly to me.  Thanks in advance.

I think that's not fair.
You ask on a public list, so the answers should be public too,
that's what a mailinglist is for ...

> Franklin

Harry

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Verifying Server Certificates in Perl using LWP HTTPS and Crypt::SSLeay

[Franklin DeMatto]

How can I instruct Perl to verify the server certificate? I'm making the 
request using Perl & LWP, which uses Crypt::SSLeay for HTTPS.

I'd like to a) verify that the server's certificate is valid and b) verify 
the issuers certificate from the local databse of trusted issuers.

NOTE: Please cc all responses directly to me.  Thanks in advance.

Franklin




Franklin DeMatto
Senior  Analyst, qDefense Penetration Testing
http://qDefense.com
qDefense: Specialized Security Solutions

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay --- how do I supply username and password?

[Mark Ginsburg]

Hello,

I have installed OpenSSL from openssl.org.  I have installed
Crypt::SSLeay. 

My situation is that I am trying to compose a POST to an https: server.

Using a webbrowser, the server will come back and ask for my username and
password.  How do I set these so that the POST works in my Perl program? 
In the readme file for Crypt:SSLeay, I saw some mention of setting ENV
variables in the proxy situation, but I have no proxies in my case.

Thanks


Mark

*
* Dr. Mark Ginsburg *
* Assistant Professor, MIS Dept.*
* U. of Arizona *
* 1130 E Helen St., #430BB  *
* Tucson, AZ 85719  *
*   *
* [EMAIL PROTECTED]  *
*
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] compile problems on Slackware Linux 8.1

[Tim Legg]

I'm getting an unusual problem, (maybe).  I've seen
this problem posted before on this list and many
others, but haven't been able to figure out the
problem yet.

I'll just tell you that I'm trying to compile and
install Crypt::SSLeay so I can use Fetchyahoo.  If
that makes any difference or not.

Anyway, I'll start by the error or warning messages
generated from perl Makefile.PL:


Note (probably harmless): No library found for -lgcc
Note (probably harmless): No library found for
-lRSAglue
Note (probably harmless): No library found for
-lrsaref


Followed by a successfull make, and an error ridden
make test / make install:


PERL_DL_NONLAZY=1 /usr/bin/perl -Iblib/arch -Iblib/lib
-I/usr/lib/perl5/i386-linux -I/usr/lib/perl5 -e 'use
Test::Harness qw(&runtests $verbose); $verbose=0;
runtests @ARGV;' t/*.t
t/net_ssl...dubious
Test returned status 0 (wstat 11, 0xb)
t/ssl_context...dubious
Test returned status 0 (wstat 11, 0xb)
FAILED--2 test scripts could be run, alas--no output
ever seen
make: *** [test_dynamic] Error 2


Does anyone know what could cause this?  All I want is
my Fetchyahoo to get my mail without giving me this
message:


Logging in insecurely via plaintext as Legg83.


Thanks in advance.

__
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

OpenSSL - Crypt ::SSLeay & LWP

[Eric Wilson]

Can someone provide me some assistance on 
incorporating the following on a cobalt RAQ4 running linux
 
OpenSSL - a C library
 
Crypt::SSLeay and LWP
 
I need to install the before mentioned modules and 
I am definitly wet behind the ears when it comes to this... Thank 
You
 
Eric Wilson

Crypt::SSLeay Build with Perl 5.8.0RC3

[Richard Chadwick]

I'm trying to get Crypt::SSLeay 0.41 working with Perl 5.8.0RC3 on Linux 
2.2.18 system with gcc 2.95.2

The problem I can't get past is:

gcc -c  -I/usr/local/openssl/include -D_REENTRANT -D_GNU_SOURCE 
-fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE 
-D_FILE_OFFSET_BITS=64 -O3   -DVERSION=\"0.41\" -DXS_VERSION=\"0.41\" 
-fpic "-I/local/lib/perl5/5.8.0/i686-linux-thread-multi/CORE"   SSLeay.c
In file included from /usr/local/openssl/include/openssl/evp.h:89,
 from /usr/local/openssl/include/openssl/x509.h:67,
 from /usr/local/openssl/include/openssl/ssl.h:122,
 from crypt_ssleay_version.h:1,
 from SSLeay.xs:20:
/usr/local/openssl/include/openssl/des.h:193: parse error before `&'
make: *** [SSLeay.o] Error 1

-- 
Richard Chadwick
Atlantic Systems Group Inc.Phone:  wk. +1.506.460.5400 [x217]
845 Prospect St. Suite 100   Fax:  +1.506.460.5411
Fredericton, NBPager:  +1.506.557-3634
Canada  E3B 2T7   E-mail: [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay ver 0.37.0 or later

[Greulich, Jeanne M.]

Title: Crypt::SSLeay ver 0.37.0 or later





Hello,


I am looking for a compiled version of the Crypt:SSLeay module for Windows 2000 that is version0.37 or later.  I have found that Active State has a version 0.17.0 but it does not have features I need.  

Is anyone aware of one?  


Thank You


Jeanne Greulich

Crypt::SSLeay 0.35 patch

[Doug Silver]

Hi All -

I'm using Crypt-SSLeay-0.35 on a FreeBSD system.  I've consistently
seen the following errors and finally got around to investigating
what might be causing them:

Use of uninitialized value in substitution (s///) at 
/usr/local/lib/perl5/site_perl/5.6.1/mach/Net/SSL.pm line 363.
Use of uninitialized value in division (/) at 
/usr/local/lib/perl5/site_perl/5.6.1/mach/Net/SSL.pm line 115.

I've included the following patch if anyone is interested and/or to
be used in future revisions.

I'm not on this list, so please cc me directly.

Thanks!
-- 
~~~
Doug Silver
Network Manager
Urchin Software Corp.   http://www.urchin.com
~~~
--- SSL.pm  Wed Oct 31 18:55:56 2001
+++ SSL.pm.new  Sun Jun 16 10:10:05 2002
@@ -112,8 +112,10 @@
if ($^O ne 'MSWin32') {
$SIG{ALRM} = sub { $self->die_with_error("SSL connect
timeout") };
# timeout / 2 because we have 3 possible connects here
-   my $alarm_timeout = ($self->timeout / 2) || 60;
-   alarm($alarm_timeout);
+   if (defined $self->timeout) {
+  my $alarm_timeout = ($self->timeout / 2) || 60;
+  alarm($alarm_timeout);
+   }
}
 
my $rv;
@@ -360,7 +362,7 @@
$proxy_server = $ENV{$_};
last if $proxy_server;
 }
-$proxy_server =~ s|^https?://||i;
+if (defined $proxy_server){$proxy_server =~ s|^https?://||i;}
 
 $proxy_server;
 }

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay - net_ssl_test - Perl

[Keary Suska]

on 6/6/02 9:45 AM, [EMAIL PROTECTED] purportedly said:

> Hi.
> 
> When using the net_ssl_test script I get this error:
> WEB SITE: www.nwoasis.org:443
> CIPHER: RC4-MD5
> THIS IS: /C=US/O=BONNEVILLE POWER ADMINISTRATION/OU=BONNEVILLE POWER
> ADMINISTRATION/CN=www.nwoasis.org
> CERTIFIED BY: /C=US/O=Digital Signature Trust Co./OU=TrustID
> Server/CN=TrustID Server CA A5
> 
> #!/usr/bin/ksh
> export HTTPS_CA_FILE='./dt_ca.crt';
> export  HTTPS_CA_DIR='.';
> export HOST='https://www.nwoasis.org';
> ./net_ssl_test -cert=./dt_cl.crt -key=./dt.key -d GET $HOST
> 
> SSL_connect:error in SSLv3 read server certificate B
> SSL_connect:before/connect initialization
> SSL_connect:SSLv2 write client hello A
> SSL_connect:error in SSLv2 read server hello B
> == FAILED TO CONNECT ==
> Error: SSL negotiation failed: error:1407E086:SSL
> routines:SSL2_SET_CERTIFICATE:certificate verify failed at
> /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris/Net/SSL.pm line 215.
> ;  at /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris/Net/SSL.pm line 146.

If I understand the process correctly, you must have the proper CA file for
the particular CA, in this case "Digital Signature Trust Co.". If you are
not acting as your own CA, you need to download the proper root CA from the
certificate vendor.

Keary Suska
(719) 473-6431


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay - net_ssl_test - Perl

[John Lien]

Hi.

When using the net_ssl_test script I get this error:

== FAILED TO CONNECT ==
Error: SSL negotiation failed: error:1407E086:SSL
routines:SSL2_SET_CERTIFICATE:certificate verify failed at

In one test case it seems to work; in the other it fails.  I'm not sure
where I went wrong.  The details of what I've done are below.

SECTION 1 - shows the openssl commands I used to parse the PCKS12 file.
SECTION 2 - shows the script and output that runs well
SECTION 3 - shows the script and output that fails
SECTION 4 - shows my environment

I am behind a firewall, but we dont use a proxy.  I'd greatly appreciate any
help.

Thanks,
John


- SECTION 1 
I created my files like this:

pkcs12 -in dt.pfx -cacerts -nodes -nokeys -out dt_ca.crt
Enter Import Password:
MAC verified OK
pkcs12 -in dt.pfx -clcerts -nodes -nokeys -out dt_cl.crt
Enter Import Password:
MAC verified OK
pkcs12 -in dt.pfx -nocerts -nodes -out dt.key
Enter Import Password:
MAC verified OK

I tested the cert files with these commands:
x509 -in dt_ca.crt -noout -text
x509 -in dt_cl.crt -noout -text
rsa -in dt.key -noout -text

and they seemed to pass.

- SECTION 2 

When I run this (HTTPS_CA* are commented out):

#!/usr/bin/ksh
#export HTTPS_CA_FILE='./dt_ca.crt';
#export  HTTPS_CA_DIR='.';
export HOST='https://www.nwoasis.org';
./net_ssl_test -cert=./dt_cl.crt -key=./dt.key -d GET $HOST


I get this output (which I think looks ok):

ieh1: dt_test.ksh
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
WEB SITE: www.nwoasis.org:443
CIPHER: RC4-MD5
THIS IS: /C=US/O=BONNEVILLE POWER ADMINISTRATION/OU=BONNEVILLE POWER
ADMINISTRATION/CN=www.nwoasis.org
CERTIFIED BY: /C=US/O=Digital Signature Trust Co./OU=TrustID
Server/CN=TrustID Server CA A5

SSL_connect:SSL renegotiate ciphers
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server certificate request A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client certificate A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
HTTP/1.1 200 OK
Server: Microsoft-IIS/4.0
Content-Location: https://206.137.58.66/index.html
Date: Wed, 05 Jun 2002 22:48:21 GMT
Content-Type: text/html
Accept-Ranges: bytes
Last-Modified: Tue, 16 Nov 1999 22:18:40 GMT
ETag: "8de44898030bf1:311f5"
Content-Length: 1038
...

- SECTION 3 

When I add in the HTTPS_CA variables and run this:

#!/usr/bin/ksh
export HTTPS_CA_FILE='./dt_ca.crt';
export  HTTPS_CA_DIR='.';
export HOST='https://www.nwoasis.org';
./net_ssl_test -cert=./dt_cl.crt -key=./dt.key -d GET $HOST

I get this output (which looks bad):

ieh1: digi_test.ksh
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL3 alert write:fatal:unknown
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:before/connect initialization
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL3 alert write:fatal:bad certificate
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:before/connect initialization
SSL_connect:SSLv2 write client hello A
SSL_connect:error in SSLv2 read server hello B
== FAILED TO CONNECT ==
Error: SSL negotiation failed: error:1407E086:SSL
routines:SSL2_SET_CERTIFICATE:certificate verify failed at
/usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris/Net/SSL.pm line 215.
;  at /usr/local/lib/perl5/site_perl/5.6.1/sun4-solaris/Net/SSL.pm line 146.


If you need to use a proxy, please pass it in as an argument like

  ./net_ssl_test -p 127.0.0.1:8080

which sets $ENV{HTTPS_PROXY} for you.

- SECTION 4 
Environment:
Perl v5.6.1
Solaris 8
Crypt-SSLeay-0.37
OpenSSL 0.9.6 24 Sep 2000
-

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] Compile problems on cobalt raq

[Admo.net Administrator]

I am using a cobalt raq3 and I cannot get Crypt::SSLeay to compile correctly.

 

Here’s some output:

[root@www Crypt-SSLeay-0.37]# make

cc -c -I/usr/local/ssl/include -Dbool=char -DHAS_BOOL -I/usr/local/include
-O2    -DVERSION=\"0.37\"
-DXS_VERSION=\"0.37\" -fpic
-I/usr/lib/perl5/5.00503/i386-linux/CORE  SSLeay.c

SSLeay.c: In
function `XS_Crypt__SSLeay__Err_get_error_string':

SSLeay.c:88: `aTHX_' undeclared
(first use in this function)

SSLeay.c:88: (Each undeclared identifier is reported only
once

SSLeay.c:88: for each function it appears in.)

SSLeay.c:88: parse error before string constant

SSLeay.c:91: `dXSTARG' undeclared
(first use in this function)

SSLeay.xs:83: parse error before `unsigned'

SSLeay.xs:86: `l' undeclared (first use in this function)

SSLeay.xs:90: `buf' undeclared
(first use in this function)

SSLeay.c:104: `targ' undeclared
(first use in this function)

SSLeay.c:104: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__CTX_new':

SSLeay.c:113: `aTHX_' undeclared
(first use in this function)

SSLeay.c:113: parse error before string constant

SSLeay.c: In
function `XS_Crypt__SSLeay__CTX_free':

SSLeay.c:162: `aTHX_' undeclared
(first use in this function)

SSLeay.c:162: parse error before string constant

SSLeay.c: In
function `XS_Crypt__SSLeay__CTX_set_cipher_list':

SSLeay.c:182: `aTHX_' undeclared
(first use in this function)

SSLeay.c:182: parse error before string constant

SSLeay.c:187: `dXSTARG' undeclared
(first use in this function)

SSLeay.c:197: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c:197: `targ' undeclared
(first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__CTX_use_certificate_file':

SSLeay.c:206: `aTHX_' undeclared
(first use in this function)

SSLeay.c:206: parse error before string constant

SSLeay.c:212: `dXSTARG' undeclared
(first use in this function)

SSLeay.c:222: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c:222: `targ' undeclared
(first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__CTX_use_PrivateKey_file':

SSLeay.c:231: `aTHX_' undeclared
(first use in this function)

SSLeay.c:231: parse error before string constant

SSLeay.c:237: `dXSTARG' undeclared
(first use in this function)

SSLeay.c:247: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c:247: `targ' undeclared
(first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__CTX_check_private_key':

SSLeay.c:256: `aTHX_' undeclared
(first use in this function)

SSLeay.c:256: parse error before string constant

SSLeay.c:260: `dXSTARG' undeclared
(first use in this function)

SSLeay.c:270: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c:270: `targ' undeclared
(first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__CTX_set_verify':

SSLeay.c:279: `aTHX_' undeclared
(first use in this function)

SSLeay.c:279: parse error before string constant

SSLeay.c: In
function `XS_Crypt__SSLeay__Conn_new':

SSLeay.c:317: `aTHX_' undeclared
(first use in this function)

SSLeay.c:317: parse error before string constant

SSLeay.c: In
function `XS_Crypt__SSLeay__Conn_free':

SSLeay.c:371: `aTHX_' undeclared
(first use in this function)

SSLeay.c:371: parse error before string constant

SSLeay.c: In
function `XS_Crypt__SSLeay__Conn_set_fd':

SSLeay.c:391: `aTHX_' undeclared
(first use in this function)

SSLeay.c:391: parse error before string constant

SSLeay.c:396: `dXSTARG' undeclared
(first use in this function)

SSLeay.c:406: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c:406: `targ' undeclared
(first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__Conn_connect':

SSLeay.c:415: `aTHX_' undeclared
(first use in this function)

SSLeay.c:415: parse error before string constant

SSLeay.c:419: `dXSTARG' undeclared
(first use in this function)

SSLeay.c:429: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c:429: `targ' undeclared
(first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__Conn_accept':

SSLeay.c:438: `aTHX_' undeclared
(first use in this function)

SSLeay.c:438: parse error before string constant

SSLeay.c:442: `dXSTARG' undeclared
(first use in this function)

SSLeay.c:452: `XSprePUSH'
undeclared (first use in this function)

SSLeay.c:452: `targ' undeclared
(first use in this function)

SSLeay.c: In
function `XS_Crypt__SSLeay__Conn_write':

SSLeay.c:461: `aTHX_' undeclared
(first use in this function)

SSLeay.c:461: parse error before string constant

SSLeay.c: In
function `XS_Crypt__SSLeay__Conn_read':

SSLeay.c:513: `aTHX_' undeclared
(first use in this function)

SSLeay.

Crypt::SSLeay Client-SSL problem

[POLearyUK]

Hi

I am currently having a problem with Client-SSL authentification with version 0.37. I am given a pkcs#7 type certificate which I have converted to PEM using openssl 0.9b. It passes through use_certificate_file without issue.

However when I use LWP to connect I keep receiving a 403.7 on the host IIS system. Any Light you can shed would be greatfully appreciated

Here is an example of what I am using.


#!/usr/bin/perl

use HTTP::Request::Common;
use LWP::Debug qw(+);
use LWP::UserAgent;

my $uploadUrl = "https://XXX";

$ENV{'HTTPS_DEBUG'} = 1;

$ENV{'HTTPS_VERSION'} = '3';

$ENV{'HTTPS_CERT_FILE'} = 'cert.pem';

my $ua = LWP::UserAgent->new;

my $response = $ua->request(GET $uploadUrl);

#print $response->content;
print "\n\n\n\n\n";
#print $ua;
print $response->as_string;

if ($response->is_success) {
print "OK\n";
#print $response->content;
} else {
#   print $response->error_as_HTML;
}

Thanks 
Patrick

Crypt::SSLeay - make test fails on redhat 6.2

[Chuck Russo]

Has anyone ever come across this before?

[root@myhost Crypt-SSLeay-0.37]# Makefile.PL
Found OpenSSL (version OpenSSL 0.9.5) installed at /usr/local/ssl
Which OpenSSL build path do you want to link against? [/usr/local/ssl]


BUILD INFORMATION


ssl dir:/usr/local/ssl
libraries:  -lssl -lcrypto -lgcc -lRSAglue -lrsaref
include dir:/usr/local/ssl/include
ssl header: openssl/ssl.h
ssl candidate:  /usr/local/ssl; /usr/local/ssl/include/openssl; OpenSSL 0.9.5



Checking if your kit is complete...
Looks good
Note (probably harmless): No library found for -lgcc
Note (probably harmless): No library found for -lRSAglue
Note (probably harmless): No library found for -lrsaref
Writing Makefile for Crypt::SSLeay



[root@myhost Crypt-SSLeay-0.37]# make
mkdir blib
mkdir blib/lib
mkdir blib/lib/Crypt
mkdir blib/arch
mkdir blib/arch/auto
mkdir blib/arch/auto/Crypt
mkdir blib/arch/auto/Crypt/SSLeay
mkdir blib/lib/auto
mkdir blib/lib/auto/Crypt
mkdir blib/lib/auto/Crypt/SSLeay
mkdir blib/man3
cp lib/Net/SSL.pm blib/lib/Net/SSL.pm
cp lib/Crypt/SSLeay/MainContext.pm blib/lib/Crypt/SSLeay/MainContext.pm
cp lib/Crypt/SSLeay/CTX.pm blib/lib/Crypt/SSLeay/CTX.pm
cp SSLeay.pm blib/lib/Crypt/SSLeay.pm
cp lib/Crypt/SSLeay/Conn.pm blib/lib/Crypt/SSLeay/Conn.pm
cp lib/Crypt/SSLeay/X509.pm blib/lib/Crypt/SSLeay/X509.pm
cp lib/Crypt/SSLeay/Err.pm blib/lib/Crypt/SSLeay/Err.pm
/usr/local/bin/perl -I/usr/local/lib/perl5/5.6.0/i686-linux 
-I/usr/local/lib/perl5/5.6.0 
/usr/local/lib/perl5/5.6.0/ExtUtils/xsubpp  -typemap 
/usr/local/lib/perl5/5.6.0/ExtUtils/typemap -typemap typemap SSLeay.xs > 
SSLeay.xsc && mv SSLeay.xsc SSLeay.c
cc -c -I/usr/local/ssl/include -fno-strict-aliasing -I/usr/local/include 
-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O2 -DVERSION=\"0.37\" 
-DXS_VERSION=\"0.37\" -fpic 
-I/usr/local/lib/perl5/5.6.0/i686-linux/CORE  SSLeay.c
Running Mkbootstrap for Crypt::SSLeay ()
chmod 644 SSLeay.bs
LD_RUN_PATH="/usr/local/ssl/lib" cc -o 
blib/arch/auto/Crypt/SSLeay/SSLeay.so  -shared -L/usr/local/lib 
SSLeay.o-L/usr/local/ssl/lib -lssl -lcrypto
chmod 755 blib/arch/auto/Crypt/SSLeay/SSLeay.so
cp SSLeay.bs blib/arch/auto/Crypt/SSLeay/SSLeay.bs
chmod 644 blib/arch/auto/Crypt/SSLeay/SSLeay.bs
Manifying blib/man3/Crypt::SSLeay.3



[root@myhost Crypt-SSLeay-0.37]# make test
PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib 
-I/usr/local/lib/perl5/5.6.0/i686-linux -I/usr/local/lib/perl5/5.6.0 -e 
'use Test::Harness qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
t/ssl_context...Can't load 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for 
module Crypt::SSLeay: blib/arch/auto/Crypt/SSLeay/SSLeay.so: undefined 
symbol: OPENSSL_free at /usr/local/lib/perl5/5.6.0/i686-linux/DynaLoader.pm 
line 200.
  at blib/lib/Crypt/SSLeay/CTX.pm line 2
Compilation failed in require at blib/lib/Crypt/SSLeay/CTX.pm line 2.
Compilation failed in require at blib/lib/Crypt/SSLeay/MainContext.pm line 8.
Compilation failed in require at t/ssl_context.t line 3.
BEGIN failed--compilation aborted at t/ssl_context.t line 3.
t/ssl_context...dubious
 Test returned status 255 (wstat 65280, 0xff00)
FAILED--1 test script could be run, alas--no output ever seen
make: *** [test_dynamic] Error 2
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay

[timotac]

Thanks, for your help.  I will have to try it out when I get a chance, 
as a higher priority job has been assigned to me.
On 23 Dec 2001 at 20:43, Joshua Chamas wrote:

> [EMAIL PROTECTED] wrote:
> > 
> > I made sure Crypt::SSLeay was installed.
> > ppm -query yields Crypt-SSLeay [0.17.1]
> > 
> > the script looks like this:
> > 
> > use LWP::UserAgent;
> > 
> > $ENV{HTTPS_VERSION} = '3';
> > $ENV{HTTPS_CERT_FILE} = 'd:\certs\mycert.pem';
> > $ENV{HTTPS_KEY_FILE}  = 'd:\certs\mykey.pem';
> > $ENV{HTTPS_CA_FILE}  = 'd:\certs\server.pem';
> > 
> 
> If this means that you have version .17 of Crypt::SSLeay installed,
> then your HTTPS_CA_FILE config won't be picked up.  Support for this
> was added in version .29 of the module looks like.  You can 
> ask ActiveState to compile this version of the module for you for
> your perl build version if they haven't already.
> 
> Also, be sure to use the ./lwp-ssl-test script with the -d
> option when debugging for the first time with Crypt::SSLeay, 
> the magic here is setting:
> 
> $ENV{HTTPS_DEBUG} = 1;
> 
> in your script to get debugging output.  This option was
> added in version .31 of the module.
> 
> --Josh
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay

[timotac]

Thanks for your reply.  My work on this has been shelved for a 
higher priority (Kerberos stuff, getting to play with all sorts of new 
stuff) and letting the c coder duplicate the work.  Unfortunately, the 
machine is on an internal network, so I don't know how I could have 
tested your suggestion.  

On 21 Dec 2001 at 12:04, Keary Suska wrote:

> Unfortunately, error messages do not propagate well from SSLeay to LWP, so
> LWP often doesn't give informative messages. It is likely, however, that the
> peer certificate verification is failing. To ensure SSL works correctly,
> comment out all the $ENV lines showing in your script below, and try to
> connect to any public site (that supports SSL, of course) using https.
> 
> If that works, then at least the SSL underpinnings are fine. It would also
> indicate the likelihood of a peer verification problem. I don't recall the
> peer verification setup exactly, but IIRC you have to tell SSL where to find
> the root CA certificates, so it can choose the right one for verification.
> At least this is a clue to what may be going wrong...
> 
> Keary Suska
> Esoteritech, Inc.
> "Leveraging Open Source for a better Internet"
> 
> > From: [EMAIL PROTECTED]
> > Reply-To: [EMAIL PROTECTED]
> > Date: Fri, 21 Dec 2001 06:44:47 -0500
> > To: [EMAIL PROTECTED], [EMAIL PROTECTED]
> > Subject: Re: Crypt::SSLeay
> > 
> > On 16 Dec 2001 at 2:43, Joshua Chamas wrote:
> > 
> >> timotac wrote:
> >>> 
> >>> I have a small perl script I wrote that retrieves files using
> >>> LWP::UserAgent to get files from a cert protected directory off o a web
> >>> server.  The script works fine on *nix boxes.  Now I have to get it to
> >>> work on an NT box, and I am new to perl on NT.
> >>> I installed activestate perl, then mingw.  I compiled openssl, which
> >>> seemed to work just fine (no error messages) using the included
> >>> instructions for mingw.
> >>> Installed the Net::SSLeay package.  Move the script over, changed things
> >>> 
> >> 
> >> Crypt::SSLeay & Net::SSLeay are 2 different things.  With ActiveState perl,
> >> try to install Crypt::SSLeay for LWP::UserAgent support with the ppm
> >> installer at $PERL/bin/ppm.pl or some such, then:
> >> 
> >> ppm> install Crypt-SSLeay
> >> 
> >> If it installs a recent enough Crypt::SSLeay, you should be fine.
> >> If not you can ask activestate to compile the latest version for
> >> their ppm repository.
> >> 
> >> --Josh
> >> 
> > 
> > I made sure Crypt::SSLeay was installed.
> > ppm -query yields Crypt-SSLeay [0.17.1]
> > 
> > the script looks like this:
> > 
> > use LWP::UserAgent;
> > 
> > $ENV{HTTPS_VERSION} = '3';
> > $ENV{HTTPS_CERT_FILE} = 'd:\certs\mycert.pem';
> > $ENV{HTTPS_KEY_FILE}  = 'd:\certs\mykey.pem';
> > $ENV{HTTPS_CA_FILE}  = 'd:\certs\server.pem';
> > 
> > $ua = new LWP::UserAgent;
> > $httpreq = "https://server.com/reports/today.log";
> > $req = HTTP::Request('GET',"$httpreq");
> > $res = $ua->request($req);
> > if ($res->is_error()) {
> > print "Return code ", $res->code,"\n";
> > print "Message ", $res->message, "\n";
> > exit;
> > }
> > 
> > print "Content:\n", $res->content;
> > 
> > 
> > This yields:
> > 
> > Return code 500
> > Message read failed:
> > 
> > 
> > Note that this code works on a linux box, and the https string is valid if
> > entered in 
> > netscape on the NT box I am attempting to use.
> > __
> > OpenSSL Project http://www.openssl.org
> > User Support Mailing List[EMAIL PROTECTED]
> > Automated List Manager   [EMAIL PROTECTED]
> > 
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay

[timotac]

On 16 Dec 2001 at 2:43, Joshua Chamas wrote:

> timotac wrote:
> > 
> > I have a small perl script I wrote that retrieves files using
> > LWP::UserAgent to get files from a cert protected directory off o a web
> > server.  The script works fine on *nix boxes.  Now I have to get it to
> > work on an NT box, and I am new to perl on NT.
> > I installed activestate perl, then mingw.  I compiled openssl, which
> > seemed to work just fine (no error messages) using the included
> > instructions for mingw.
> > Installed the Net::SSLeay package.  Move the script over, changed things
> > 
> 
> Crypt::SSLeay & Net::SSLeay are 2 different things.  With ActiveState perl,
> try to install Crypt::SSLeay for LWP::UserAgent support with the ppm 
> installer at $PERL/bin/ppm.pl or some such, then:
> 
>   ppm> install Crypt-SSLeay
> 
> If it installs a recent enough Crypt::SSLeay, you should be fine.
> If not you can ask activestate to compile the latest version for
> their ppm repository.
> 
> --Josh
> 

I made sure Crypt::SSLeay was installed.  
ppm -query yields Crypt-SSLeay [0.17.1]

the script looks like this:

use LWP::UserAgent;

$ENV{HTTPS_VERSION} = '3';
$ENV{HTTPS_CERT_FILE} = 'd:\certs\mycert.pem'; 
$ENV{HTTPS_KEY_FILE}  = 'd:\certs\mykey.pem';
$ENV{HTTPS_CA_FILE}  = 'd:\certs\server.pem';

$ua = new LWP::UserAgent;
$httpreq = "https://server.com/reports/today.log";
$req = HTTP::Request('GET',"$httpreq");
$res = $ua->request($req);
if ($res->is_error()) {
print "Return code ", $res->code,"\n";
print "Message ", $res->message, "\n";
exit;
}

print "Content:\n", $res->content;


This yields:

Return code 500
Message read failed:


Note that this code works on a linux box, and the https string is valid if entered in 
netscape on the NT box I am attempting to use.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay

[timotac]

I have a small perl script I wrote that retrieves files using
LWP::UserAgent to get files from a cert protected directory off o a web
server.  The script works fine on *nix boxes.  Now I have to get it to
work on an NT box, and I am new to perl on NT.
I installed activestate perl, then mingw.  I compiled openssl, which
seemed to work just fine (no error messages) using the included
instructions for mingw.
Installed the Net::SSLeay package.  Move the script over, changed things

to match the new environment.  The script is returning web error 500.  I

am thinking that it is not correctly passing the certs.  I tried to
compile Crypt::SSLeay myself, but I am getting make errors, so maybe I
will try nmake.  I did note that perl Makefile.PL does not find the
openssl libraries.  I also noted the the libraries for openssl are in
the out directory, and no include or inc32 directories exists.  Do I
need to create these and where should they be located?



__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] How to compile with aCC on hpux 11.0?

[BRIX,THOMAS (HP-Germany,ex2)]

Hi all,

is there a way to compile Crypt-SSLeay-0.35   
using a aCC  B3910B A.03.30
on hp-ux 11.0?

tia
Best regards
Thomas Brix
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Subject: [Crypt::SSLeay] compile problems on Solaris

[Joshua Chamas]

> Test::Harness qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
> t/ssl_context...Can't load 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for module 
>Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal: relocation
> error: file blib/arch/auto/Crypt/SSLeay/SSLeay.so: symbol SSL_set_fd: referenced 
>symbol not found at
> /usr/local/lib/perl5/5.6.1/i86pc-solaris/DynaLoader.pm line 206.
>  at blib/lib/Crypt/SSLeay/CTX.pm line 2

Are your openssl libs in your LD_LIBRARY_PATH ?  This could cause
this error.  If this is your fix, please confirm, as I'll 
make this an FAQ for Solaris platforms.

--Josh


> Terence Pua wrote:
> 
> i have solaris 8 running on an x86 machine and perl 5.6.1.
> 
> i'm trying to install Crypt::SSLeay and i get the following problems...
> 
> tpua@s6 ~torrance/.cpan/build/Crypt-SSLeay-0.35> sudo perl Makefile.PL
> Password:
> Found OpenSSL (version OpenSSL 0.9.6) installed at /usr/local/ssl
> Which OpenSSL build path do you want to link against? [/usr/local/ssl]
> 
> 
> BUILD INFORMATION
> 
> 
> ssl dir:/usr/local/ssl
> libraries:  -lssl -lcrypto -lgcc -lRSAglue -lrsaref
> include dir:/usr/local/ssl/include
> ssl header: openssl/ssl.h
> ssl candidate:  /usr/local/ssl; /usr/local/ssl/include/openssl; OpenSSL 0.9.6
> 
> 
> 
> Note (probably harmless): No library found for -lRSAglue
> Note (probably harmless): No library found for -lrsaref
> Writing Makefile for Crypt::SSLeay
> tpua@s6 ~torrance/.cpan/build/Crypt-SSLeay-0.35> sudo make
> gcc -c -I/usr/local/ssl/include -fno-strict-aliasing -I/usr/local/include 
>-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O   -DVERSION=\"0.35\"
> -DXS_VERSION=\"0.35\" -fPIC -I/usr/local/lib/perl5/5.6.1/i86pc-solaris/CORE  SSLeay.c
> Running Mkbootstrap for Crypt::SSLeay ()
> chmod 644 SSLeay.bs
> rm -f blib/arch/auto/Crypt/SSLeay/SSLeay.so
> LD_RUN_PATH="/usr/local/ssl/lib:/usr/local/lib" gcc  -G -L/usr/local/lib SSLeay.o  
>-o blib/arch/auto/Crypt/SSLeay/SSLeay.so   -L/usr/local/ssl/lib
> -lssl -lcrypto -lgcc
> chmod 755 blib/arch/auto/Crypt/SSLeay/SSLeay.so
> cp SSLeay.bs blib/arch/auto/Crypt/SSLeay/SSLeay.bs
> chmod 644 blib/arch/auto/Crypt/SSLeay/SSLeay.bs
> Manifying blib/man3/Crypt::SSLeay.3
> tpua@s6 ~torrance/.cpan/build/Crypt-SSLeay-0.35> sudo make install
> Files found in blib/arch: installing files in blib/lib into architecture dependent 
>library tree
> Installing /usr/local/man/man3/Crypt::SSLeay.3
> Writing 
>/usr/local/lib/perl5/site_perl/5.6.1/i86pc-solaris/auto/Crypt/SSLeay/.packlist
> Appending installation info to /usr/local/lib/perl5/5.6.1/i86pc-solaris/perllocal.pod
> tpua@s6 ~torrance/.cpan/build/Crypt-SSLeay-0.35> sudo make test
> PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib 
>-I/usr/local/lib/perl5/5.6.1/i86pc-solaris -I/usr/local/lib/perl5/5.6.1 -e 'use
> Test::Harness qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
> t/ssl_context...Can't load 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for module 
>Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal: relocation
> error: file blib/arch/auto/Crypt/SSLeay/SSLeay.so: symbol SSL_set_fd: referenced 
>symbol not found at
> /usr/local/lib/perl5/5.6.1/i86pc-solaris/DynaLoader.pm line 206.
>  at blib/lib/Crypt/SSLeay/CTX.pm line 2
> Compilation failed in require at blib/lib/Crypt/SSLeay/CTX.pm line 2.
> Compilation failed in require at blib/lib/Crypt/SSLeay/MainContext.pm line 8.
> Compilation failed in require at t/ssl_context.t line 3.
> BEGIN failed--compilation aborted at t/ssl_context.t line 3.
> t/ssl_context...dubious
> Test returned status 255 (wstat 65280, 0xff00)
> FAILED--1 test script could be run, alas--no output ever seen
> make: *** [test_dynamic] Error 2
>
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Subject: [Crypt::SSLeay] compile problems on Solaris

[Terence Pua]

i have solaris 8 running on an x86 machine and perl 
5.6.1.
 
i'm trying to install Crypt::SSLeay and i get the following 
problems...
 
tpua@s6 
~torrance/.cpan/build/Crypt-SSLeay-0.35> sudo perl Makefile.PL 
Password:Found OpenSSL (version OpenSSL 0.9.6) installed at 
/usr/local/sslWhich OpenSSL build path do you want to link against? 
[/usr/local/ssl] 
 
BUILD 
INFORMATION
 
ssl dir:    
/usr/local/ssllibraries:  -lssl -lcrypto -lgcc 
-lRSAglue -lrsarefinclude dir:    
/usr/local/ssl/includessl header: 
openssl/ssl.hssl candidate:  /usr/local/ssl; 
/usr/local/ssl/include/openssl; OpenSSL 0.9.6
 

 
Note (probably harmless): No library found for 
-lRSAglueNote (probably harmless): No library found for -lrsarefWriting 
Makefile for Crypt::SSLeaytpua@s6 
~torrance/.cpan/build/Crypt-SSLeay-0.35> sudo makegcc -c 
-I/usr/local/ssl/include -fno-strict-aliasing -I/usr/local/include 
-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O   -DVERSION=\"0.35\" 
-DXS_VERSION=\"0.35\" -fPIC 
-I/usr/local/lib/perl5/5.6.1/i86pc-solaris/CORE  SSLeay.cRunning 
Mkbootstrap for Crypt::SSLeay ()chmod 644 SSLeay.bsrm -f 
blib/arch/auto/Crypt/SSLeay/SSLeay.soLD_RUN_PATH="/usr/local/ssl/lib:/usr/local/lib" 
gcc  -G -L/usr/local/lib SSLeay.o  -o 
blib/arch/auto/Crypt/SSLeay/SSLeay.so   -L/usr/local/ssl/lib -lssl 
-lcrypto -lgcc  chmod 755 blib/arch/auto/Crypt/SSLeay/SSLeay.socp 
SSLeay.bs blib/arch/auto/Crypt/SSLeay/SSLeay.bschmod 644 
blib/arch/auto/Crypt/SSLeay/SSLeay.bsManifying 
blib/man3/Crypt::SSLeay.3tpua@s6 
~torrance/.cpan/build/Crypt-SSLeay-0.35> sudo make installFiles found in 
blib/arch: installing files in blib/lib into architecture dependent library 
treeInstalling /usr/local/man/man3/Crypt::SSLeay.3Writing 
/usr/local/lib/perl5/site_perl/5.6.1/i86pc-solaris/auto/Crypt/SSLeay/.packlistAppending 
installation info to 
/usr/local/lib/perl5/5.6.1/i86pc-solaris/perllocal.podtpua@s6 ~torrance/.cpan/build/Crypt-SSLeay-0.35> 
sudo make testPERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib 
-I/usr/local/lib/perl5/5.6.1/i86pc-solaris -I/usr/local/lib/perl5/5.6.1 -e 'use 
Test::Harness qw(&runtests $verbose); $verbose=0; runtests @ARGV;' 
t/*.tt/ssl_context...Can't load 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' 
for module Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal: relocation error: 
file blib/arch/auto/Crypt/SSLeay/SSLeay.so: symbol SSL_set_fd: referenced symbol 
not found at /usr/local/lib/perl5/5.6.1/i86pc-solaris/DynaLoader.pm line 
206. at blib/lib/Crypt/SSLeay/CTX.pm line 2Compilation failed in 
require at blib/lib/Crypt/SSLeay/CTX.pm line 2.Compilation failed in require 
at blib/lib/Crypt/SSLeay/MainContext.pm line 8.Compilation failed in require 
at t/ssl_context.t line 3.BEGIN failed--compilation aborted at 
t/ssl_context.t line 
3.t/ssl_context...dubious  
    Test returned status 255 (wstat 
65280, 0xff00)FAILED--1 test script could be run, alas--no output ever 
seenmake: *** [test_dynamic] Error 2
 
 
can someone please help?
 
thanks,
terence

RE: Problem with installing Crypt::SSLeay

[Feng, James]

Josh,

Thanks. After I installed gcc3, I have successfully installed SSLeay.
Thanks again. 

> -Original Message-
> From: Joshua Chamas [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, November 01, 2001 1:57 PM
> To: Feng, James
> Cc: [EMAIL PROTECTED]; Keary Suska
> Subject: Re: Problem with installing Crypt::SSLeay
> 
> 
> "Feng, James" wrote:
> > 
> > I cannot find such a file, libgcc_s.so.1, in my Solaris 8 
> box. I only
> > found libgcc.a. Does it mean I need to reinstall or compile 
> gcc on my
> > box? You help is deeply appreciated.
> > 
> 
> I don't know, but I would certainly try to fix your compiler 
> installation if that file isn't there.  This file seems
> to be referenced on this page:
> 
>   http://www.sunfreeware.com/programlistintel8.html
> 
> included in this libgcc-3.0-sol8-intel-local.gz package.
> 
> --Josh
> 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] on solaris: broken pipe

[Joshua Chamas]

> > > After some test, everything goes fine. But, I have tried to connect
> > > to a running machine which has NO Web server installed.
> > > Then my test program, exit and print: Broken Pipe.
> > >
> > > My test program looks like:
> > > my $ua = new LWP::UserAgent;
> > > my $req = new HTTP::Request('GET',"https://$AUTHSERVER";);
> > > my $res = $ua->request($req);
> > > ---> broken pipe here.
> > >
> 
> I finally got a chance to look at this some more.  It seems
> specific to OpenSSL 0.9.6a on one platform, where on 2 other
> boxes, one running OpenSSL 0.9.4 and OpenSSL 0.9.5a this
> problem doesn't occur.
> 

Franck,

In Crypt::SSLeay v.35, I have code which traps $SIG{PIPE}
to work around this new behavior in openssl 0.9.6a
.35 is on its way to CPAN now, and should be available 
in the next couple of days.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] on solaris: broken pipe

[Joshua Chamas]

Joshua Chamas wrote:
> 
> "franck P." wrote:
> >
> > Hi there,
> >
> > running perl 5.004_04 on Solaris 2.6, SPARC, OpenSSL 0.9.6,
> > I have installed Crypt-SSLeay-0.29.
> > No compilation problem (excepted for an other module:
> > libwww-perl-5.5395).
> >
> > After some test, everything goes fine. But, I have tried to connect
> > to a running machine which has NO Web server installed.
> > Then my test program, exit and print: Broken Pipe.
> >
> > My test program looks like:
> > my $ua = new LWP::UserAgent;
> > my $req = new HTTP::Request('GET',"https://$AUTHSERVER";);
> > my $res = $ua->request($req);
> > ---> broken pipe here.
> >

I finally got a chance to look at this some more.  It seems
specific to OpenSSL 0.9.6a on one platform, where on 2 other
boxes, one running OpenSSL 0.9.4 and OpenSSL 0.9.5a this
problem doesn't occur.  

I would recommend downgrading your openssl to not get this 
broken pipe error.  It may be that openssl 0.9.6b does 
not have this problem, I have not tried it yet though.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Problem with installing Crypt::SSLeay

[Keary Suska]

My bad, I was misreading the output. I think the other posters have it
covered...

Keary Suska
Esoteritech, Inc.
"Leveraging Open Source for a better Internet"

> From: "Mark Strong" <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Date: Thu, 1 Nov 2001 08:44:19 +1100
> To: <[EMAIL PROTECTED]>
> Subject: RE: Problem with installing Crypt::SSLeay
> 
> Looks like your loader can't find "libgcc_s.so.1" which is used by
> "SSLeay.so", make a sym link to a lib path that it will look in (like
> "/usr/local/lib").
> 
> And then recompile "Crypt::SSLeay"
> 
> Then make test should work.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Feng, James
> Sent: Thursday, 1 November 2001 7:49
> To: Keary Suska
> Cc: [EMAIL PROTECTED]
> Subject: RE: Problem with installing Crypt::SSLeay
> 
> 
> Hi Keary,
> 
> After I recompiled perl 5.6.1, I installed modules, URI, MIME-Base64,
> HTML-Parser, libnet and Digest-MD5, then I installed libwww-perl. When I
> tried to install SSLeay, at the point of 'make test' I still got the
> error I previously got but this time I did 'make install' any way. It
> looked like installed the module without complain. Unfortunately when I
> tried to use LWP call to a https site I got the following error. Any
> ideas? Thanks.
> 
> Error:501 Can't locate object method "new" via package
> "LWP::Protocol::https" (perhaps you forgot to load
> "LWP::Protocol::https"?)
> 
>> -Original Message-
>> From: Keary Suska [mailto:[EMAIL PROTECTED]]
>> Sent: Wednesday, October 31, 2001 1:26 PM
>> To: [EMAIL PROTECTED]; Feng, James
>> Subject: Re: Problem with installing Crypt::SSLeay
>> 
>> 
>> It appears that the SSLeay loadable is not being created:
>> 'blib/arch/auto/Crypt/SSLeay/SSLeay.so'
>> If this file isn't there, try just running 'make' and look
>> again. You could
>> also do a 'find' in the source tree to see if it is being
>> created elsewhere,
>> but it shouldn't. Perhaps the makfile isn't "making" before
>> "make test".
>> 
>> Keary Suska
>> Esoteritech, Inc.
>> "Leveraging Open Source for a better Internet"
>> 
>>> From: "Feng, James" <[EMAIL PROTECTED]>
>>> Reply-To: [EMAIL PROTECTED]
>>> Date: Wed, 31 Oct 2001 11:02:33 -0500
>>> To: <[EMAIL PROTECTED]>
>>> Subject: Problem with installing Crypt::SSLeay
>>> 
>>> Hi All,
>>> 
>>> When I tried to install Crypt::SSLeay on a Solaris 8 box, I
>>> got the following error at doing "make test".
>>> 
>>> PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib
>>> -I/usr/local/lib/perl5/5.6.1/sun4-solaris
>>> -I/usr/local/lib/perl5/5.6.1 -e 'use Test::Harness
>>> qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
>>> t/ssl_context...Can't load
>>> 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for module
>>> Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal:
>>> libgcc_s.so.1: open failed: No such file or directory at
>>> /usr/local/lib/perl5/5.6.1/sun4-solaris/DynaLoader.pm line 206.
>>> at blib/lib/Crypt/SSLeay/CTX.pm line 2
>>> Compilation failed in require at
>> blib/lib/Crypt/SSLeay/CTX.pm line 2.
>>> Compilation failed in require at
>>> blib/lib/Crypt/SSLeay/MainContext.pm line 9.
>>> BEGIN failed--compilation aborted at
>>> blib/lib/Crypt/SSLeay/MainContext.pm line 9.
>>> Compilation failed in require at t/ssl_context.t line 3.
>>> BEGIN failed--compilation aborted at t/ssl_context.t line 3.
>>> t/ssl_context...dubious
>>> 
>>> Test returned status 255 (wstat 65280, 0xff00)
>>> FAILED--1 test script could be run, alas--no output ever seen
>>> make: *** [test_dynamic] Error 2
>>> 
>>> I have installed openssl 0.9.6 and tried to install
>> Crypt::SSLeay 0.31.
>>> Please help and thanks in advance.
>>> 
>>> James Feng
>>> Systems Architect
>>> Covisint
>>> Tel: (248)827-6031
>>> Cell: (248)219-2565
>>> Fax: (248)827-1731
>>> e-mail: [EMAIL PROTECTED]
>>> 
>>> 
>> __
>>> OpenSSL Project
> http://www.openssl.org
>> User Support Mailing List[EMAIL PROTECTED]
>> Automated List Manager   [EMAIL PROTECTED]
>> 
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

RE: Problem with installing Crypt::SSLeay

[Mark Strong]

Looks like your loader can't find "libgcc_s.so.1" which is used by
"SSLeay.so", make a sym link to a lib path that it will look in (like
"/usr/local/lib").

And then recompile "Crypt::SSLeay"

Then make test should work.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Feng, James
Sent: Thursday, 1 November 2001 7:49
To: Keary Suska
Cc: [EMAIL PROTECTED]
Subject: RE: Problem with installing Crypt::SSLeay


Hi Keary,

After I recompiled perl 5.6.1, I installed modules, URI, MIME-Base64,
HTML-Parser, libnet and Digest-MD5, then I installed libwww-perl. When I
tried to install SSLeay, at the point of 'make test' I still got the
error I previously got but this time I did 'make install' any way. It
looked like installed the module without complain. Unfortunately when I
tried to use LWP call to a https site I got the following error. Any
ideas? Thanks.

Error:501 Can't locate object method "new" via package
"LWP::Protocol::https" (perhaps you forgot to load
"LWP::Protocol::https"?)

> -Original Message-
> From: Keary Suska [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, October 31, 2001 1:26 PM
> To: [EMAIL PROTECTED]; Feng, James
> Subject: Re: Problem with installing Crypt::SSLeay
>
>
> It appears that the SSLeay loadable is not being created:
> 'blib/arch/auto/Crypt/SSLeay/SSLeay.so'
> If this file isn't there, try just running 'make' and look
> again. You could
> also do a 'find' in the source tree to see if it is being
> created elsewhere,
> but it shouldn't. Perhaps the makfile isn't "making" before
> "make test".
>
> Keary Suska
> Esoteritech, Inc.
> "Leveraging Open Source for a better Internet"
>
> > From: "Feng, James" <[EMAIL PROTECTED]>
> > Reply-To: [EMAIL PROTECTED]
> > Date: Wed, 31 Oct 2001 11:02:33 -0500
> > To: <[EMAIL PROTECTED]>
> > Subject: Problem with installing Crypt::SSLeay
> >
> > Hi All,
> >
> > When I tried to install Crypt::SSLeay on a Solaris 8 box, I
> > got the following error at doing "make test".
> >
> > PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib
> > -I/usr/local/lib/perl5/5.6.1/sun4-solaris
> > -I/usr/local/lib/perl5/5.6.1 -e 'use Test::Harness
> > qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
> > t/ssl_context...Can't load
> > 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for module
> > Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal:
> > libgcc_s.so.1: open failed: No such file or directory at
> > /usr/local/lib/perl5/5.6.1/sun4-solaris/DynaLoader.pm line 206.
> > at blib/lib/Crypt/SSLeay/CTX.pm line 2
> > Compilation failed in require at
> blib/lib/Crypt/SSLeay/CTX.pm line 2.
> > Compilation failed in require at
> > blib/lib/Crypt/SSLeay/MainContext.pm line 9.
> > BEGIN failed--compilation aborted at
> > blib/lib/Crypt/SSLeay/MainContext.pm line 9.
> > Compilation failed in require at t/ssl_context.t line 3.
> > BEGIN failed--compilation aborted at t/ssl_context.t line 3.
> > t/ssl_context...dubious
> >
> > Test returned status 255 (wstat 65280, 0xff00)
> > FAILED--1 test script could be run, alas--no output ever seen
> > make: *** [test_dynamic] Error 2
> >
> > I have installed openssl 0.9.6 and tried to install
> Crypt::SSLeay 0.31.
> > Please help and thanks in advance.
> >
> > James Feng
> > Systems Architect
> > Covisint
> > Tel: (248)827-6031
> > Cell: (248)219-2565
> > Fax: (248)827-1731
> > e-mail: [EMAIL PROTECTED]
> >
> >
> __
> > OpenSSL Project
http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
>

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Problem with installing Crypt::SSLeay

[Joshua Chamas]

"Feng, James" wrote:
> 
> Hi Keary,
> 
> After I recompiled perl 5.6.1, I installed modules, URI, MIME-Base64,
> HTML-Parser, libnet and Digest-MD5, then I installed libwww-perl. When I
> tried to install SSLeay, at the point of 'make test' I still got the
> error I previously got but this time I did 'make install' any way. It
> looked like installed the module without complain. Unfortunately when I
> tried to use LWP call to a https site I got the following error. Any
> ideas? Thanks.
> 
> Error:501 Can't locate object method "new" via package
> "LWP::Protocol::https" (perhaps you forgot to load
> "LWP::Protocol::https"?)
> 

If you can't get past the "make test" cleanly, chances are slim
for the module to work besides, and I would expect this kind
of error in that case.

The original error was:

> > Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal:
> > libgcc_s.so.1: open failed: No such file or directory at

Your libgcc_s.so.1 is not being found at runtime by 
your systems loader.  Make sure that library can be 
found in your system's environment LD_LIBRARY_PATH...

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

RE: Problem with installing Crypt::SSLeay

[Feng, James]

Hi Keary,

After I recompiled perl 5.6.1, I installed modules, URI, MIME-Base64,
HTML-Parser, libnet and Digest-MD5, then I installed libwww-perl. When I
tried to install SSLeay, at the point of 'make test' I still got the
error I previously got but this time I did 'make install' any way. It
looked like installed the module without complain. Unfortunately when I
tried to use LWP call to a https site I got the following error. Any
ideas? Thanks.

Error:501 Can't locate object method "new" via package
"LWP::Protocol::https" (perhaps you forgot to load
"LWP::Protocol::https"?) 

> -Original Message-
> From: Keary Suska [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, October 31, 2001 1:26 PM
> To: [EMAIL PROTECTED]; Feng, James
> Subject: Re: Problem with installing Crypt::SSLeay
> 
> 
> It appears that the SSLeay loadable is not being created:
> 'blib/arch/auto/Crypt/SSLeay/SSLeay.so'
> If this file isn't there, try just running 'make' and look 
> again. You could
> also do a 'find' in the source tree to see if it is being 
> created elsewhere,
> but it shouldn't. Perhaps the makfile isn't "making" before 
> "make test".
> 
> Keary Suska
> Esoteritech, Inc.
> "Leveraging Open Source for a better Internet"
> 
> > From: "Feng, James" <[EMAIL PROTECTED]>
> > Reply-To: [EMAIL PROTECTED]
> > Date: Wed, 31 Oct 2001 11:02:33 -0500
> > To: <[EMAIL PROTECTED]>
> > Subject: Problem with installing Crypt::SSLeay
> > 
> > Hi All,
> > 
> > When I tried to install Crypt::SSLeay on a Solaris 8 box, I
> > got the following error at doing "make test".
> > 
> > PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib
> > -I/usr/local/lib/perl5/5.6.1/sun4-solaris
> > -I/usr/local/lib/perl5/5.6.1 -e 'use Test::Harness
> > qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
> > t/ssl_context...Can't load
> > 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for module
> > Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal:
> > libgcc_s.so.1: open failed: No such file or directory at
> > /usr/local/lib/perl5/5.6.1/sun4-solaris/DynaLoader.pm line 206.
> > at blib/lib/Crypt/SSLeay/CTX.pm line 2
> > Compilation failed in require at 
> blib/lib/Crypt/SSLeay/CTX.pm line 2.
> > Compilation failed in require at
> > blib/lib/Crypt/SSLeay/MainContext.pm line 9.
> > BEGIN failed--compilation aborted at
> > blib/lib/Crypt/SSLeay/MainContext.pm line 9.
> > Compilation failed in require at t/ssl_context.t line 3.
> > BEGIN failed--compilation aborted at t/ssl_context.t line 3.
> > t/ssl_context...dubious
> > 
> > Test returned status 255 (wstat 65280, 0xff00)
> > FAILED--1 test script could be run, alas--no output ever seen
> > make: *** [test_dynamic] Error 2
> > 
> > I have installed openssl 0.9.6 and tried to install 
> Crypt::SSLeay 0.31.
> > Please help and thanks in advance.
> > 
> > James Feng
> > Systems Architect
> > Covisint
> > Tel: (248)827-6031
> > Cell: (248)219-2565
> > Fax: (248)827-1731
> > e-mail: [EMAIL PROTECTED]
> > 
> > 
> __
> > OpenSSL Project 
http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Problem with installing Crypt::SSLeay

[Keary Suska]

It appears that the SSLeay loadable is not being created:
'blib/arch/auto/Crypt/SSLeay/SSLeay.so'
If this file isn't there, try just running 'make' and look again. You could
also do a 'find' in the source tree to see if it is being created elsewhere,
but it shouldn't. Perhaps the makfile isn't "making" before "make test".

Keary Suska
Esoteritech, Inc.
"Leveraging Open Source for a better Internet"

> From: "Feng, James" <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Date: Wed, 31 Oct 2001 11:02:33 -0500
> To: <[EMAIL PROTECTED]>
> Subject: Problem with installing Crypt::SSLeay
> 
> Hi All,
> 
> When I tried to install Crypt::SSLeay on a Solaris 8 box, I
> got the following error at doing "make test".
> 
> PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib
> -I/usr/local/lib/perl5/5.6.1/sun4-solaris
> -I/usr/local/lib/perl5/5.6.1 -e 'use Test::Harness
> qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
> t/ssl_context...Can't load
> 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for module
> Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal:
> libgcc_s.so.1: open failed: No such file or directory at
> /usr/local/lib/perl5/5.6.1/sun4-solaris/DynaLoader.pm line 206.
> at blib/lib/Crypt/SSLeay/CTX.pm line 2
> Compilation failed in require at blib/lib/Crypt/SSLeay/CTX.pm line 2.
> Compilation failed in require at
> blib/lib/Crypt/SSLeay/MainContext.pm line 9.
> BEGIN failed--compilation aborted at
> blib/lib/Crypt/SSLeay/MainContext.pm line 9.
> Compilation failed in require at t/ssl_context.t line 3.
> BEGIN failed--compilation aborted at t/ssl_context.t line 3.
> t/ssl_context...dubious
> 
> Test returned status 255 (wstat 65280, 0xff00)
> FAILED--1 test script could be run, alas--no output ever seen
> make: *** [test_dynamic] Error 2
> 
> I have installed openssl 0.9.6 and tried to install Crypt::SSLeay 0.31.
> Please help and thanks in advance.
> 
> James Feng
> Systems Architect
> Covisint
> Tel: (248)827-6031
> Cell: (248)219-2565
> Fax: (248)827-1731
> e-mail: [EMAIL PROTECTED]
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Problem with installing Crypt::SSLeay

[Feng, James]

Hi All,

When I tried to install Crypt::SSLeay on a Solaris 8 box, I
got the following error at doing "make test".

PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib
-I/usr/local/lib/perl5/5.6.1/sun4-solaris
-I/usr/local/lib/perl5/5.6.1 -e 'use Test::Harness
qw(&runtests $verbose); $verbose=0; runtests @ARGV;' t/*.t
t/ssl_context...Can't load
'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for module
Crypt::SSLeay: ld.so.1: /usr/local/bin/perl: fatal:
libgcc_s.so.1: open failed: No such file or directory at
/usr/local/lib/perl5/5.6.1/sun4-solaris/DynaLoader.pm line 206.
 at blib/lib/Crypt/SSLeay/CTX.pm line 2
Compilation failed in require at blib/lib/Crypt/SSLeay/CTX.pm line 2.
Compilation failed in require at
blib/lib/Crypt/SSLeay/MainContext.pm line 9.
BEGIN failed--compilation aborted at
blib/lib/Crypt/SSLeay/MainContext.pm line 9.
Compilation failed in require at t/ssl_context.t line 3.
BEGIN failed--compilation aborted at t/ssl_context.t line 3.
t/ssl_context...dubious

Test returned status 255 (wstat 65280, 0xff00)
FAILED--1 test script could be run, alas--no output ever seen
make: *** [test_dynamic] Error 2
 
I have installed openssl 0.9.6 and tried to install Crypt::SSLeay 0.31.
Please help and thanks in advance.

James Feng
Systems Architect
Covisint
Tel: (248)827-6031
Cell: (248)219-2565
Fax: (248)827-1731
e-mail: [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay Win32 errors

[Joshua Chamas]

Mike Allison wrote:
> 
> I'm attempting to compile Crypt::SSLeay 0.31 on Windows 2000 using Perl
> 5.005_03 and MSVC++ 6.0. I cannot get past the error below. I have tried to
> use the prebuilt PPM's from active state, but get errors from SSLeay.dll
> everytime. I wish I could upgrade Perl, as the PPMs work great with the new
> releases, but Intershop(Ecommerce prog) is dependant on 5.005_03.
> 
...
> SSLeay.obj : error LNK2001: unresolved external symbol __fltused
> SSLeay.obj : error LNK2001: unresolved external symbol _strcmp
> LINK : error LNK2001: unresolved external symbol __DllMainCRTStartup@12
> blib\arch\auto\Crypt\SSLeay\SSLeay.dll : fatal error LNK1120: 3 unresolved
> exter
> nals
> NMAKE : fatal error U1077: 'link' : return code '0x460'
> Stop.

My only thought here is that your perl version was compiled 
differently than how you are trying to compile Crypt::SSLeay.
If you didn't compile perl yourself, then I wouldn't try to 
compile Crypt::SSLeay for it either.  For getting the ppm
install working from ActiveState, you can try older releases
and see if they work but also I might not have a recent 
OpenSSL installed on my system where the lib in in the path
just in case the ActiveState's use of openssl is conflicting
with what you have installed.

I have seen these errors before when compiling win32 stuff,
but not sure I have ever worked through them before, so have
little constructive advice for you, sorry.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] proxy with https

[Joshua Chamas]

Namsuk kim wrote:
> ...
> Now, I have new problem that I didn't have before.  First, the
> environment values for userid and passwd are not read and passed to the
> proxy.  The other problem is that it seems CA repository information is
> not also read.  Looks like I'm missing some components here.  if I use
> "proxy_authorization_basic("", "");", proxy
> authentication goes through.  But, it will bomb out at CA verification
> part giving me error like below.
> ...

I have comments about your code below which may help.
The gist I got from your mail was that you didn't care if 
you got a CA verification error, you just wanted to get 
through to the site via the proxy.

>  Following is the part of the code.
> 
> -
> 
> # PROXY SUPPORT
> $ENV{HTTPS_PROXY} = 'http://proxy:8080';
> 
good

> # PROXY_BASIC_AUTH
> $ENV{HTTPS_PROXY_USERNAME} = '***';
> $ENV{HTTPS_PROXY_PASSWORD} = '***';
> 
good

> # DEFAULT SSL VERSION
> $ENV{HTTPS_VERSION} = '3';
> 
I don't think you need this.  Comment it out until
you know that you do.

> # CLIENT CERT SUPPORT
> $ENV{HTTPS_CERT_FILE} = 'certs/notacacert.pem';
> $ENV{HTTPS_KEY_FILE}  = 'certs/notacakeynopass.pem';
> 
You probably don't want to set these client certs as they 
may just cause errors on the other end unless valid.

> # CA CERT PEER VERIFICATION
> $ENV{HTTPS_CA_FILE}   = 'certs/ca.crt';
> $ENV{HTTPS_CA_DIR}= 'certs/';
> 
You probably don't want to set this since you want to 
ignore CA verification errors, right?  This will
create an error if verification fails.

> $ua->env_proxy();
You don't need this with Crypt::SSLeay.  In fact it 
may cause problems.

> 
> my $req = new HTTP::Request('GET', 'https://www.optisvalue.com/');
>
good.

> #$req->proxy_authorization_basic("", "");
> $req->authorization_basic('share', 'share');
> 
Don't set authorization_basic for the proxy here, only for the 
web page on the other side if necessary.

Also, you can set

  $ENV{HTTPS_DEBUG} = 1;

for Crypt::SSLeay debug output to work through this issue.

If you want further help on this, you might want to take
this offline with me, and get me the URL that you are
trying to connect to, so I can see if I can get to it
over a local proxy setup.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay: Code works on Linux but not Solaris.. HELP!

[Joshua Chamas]

Del Simmons wrote:
> 
> Ok, got past that one.. OpenSSL was looking for the certs.pem file where
> it didn't exist.. copied that over to the proper location and this
> problem was fixed.. Now I have hit an even uglier snag..
 ...
> SSL_connect:SSLv3 write change cipher spec A
> SSL_connect:SSLv3 write finished A
> SSL_connect:SSLv3 flush data
> SSL_connect:SSLv3 read finished A
> 500 (Internal Server Error) read failed:
> Net::SSL::die_with_error('Net::SSL=GLOB(0x356870)', 'read failed')
> called at /usr/local/lib/perl5/site_perl/5.6.0/sun4-solaris/Net/SSL.pm line
> 211

If its working on Linux, but not Solaris, I would make sure
that your versions of openssl & Crypt::SSLeay are exactly
the same.  If they are, I don't know why they would behave
differently.  Check that your perl versions are the same too.

The former problem tends to be more relevant in case you 
linked to an older version of OpenSSL before on one box,
and though you might have installed the latest OpenSSL,
Crypt::SSLeay is still using the old one.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay: Peer Certificate Verification?

[Joshua Chamas]

Del Simmons wrote:
> 
> Hey guys,
> 
> Sorry if this has been answered already. I'm using LWP to post data to a
> https server. The client cert and key is passed properly and the server
> verify's me fine when I submit my POST, but I always get the following
> warning header from LWP/Protocol/https.pm: "Client-SSL-Warning: Peer
> certificate not verified". After seeing a post by Lutz Jaenicke, it
> seems that the bottom line is that Crypt::SSLeay doesn't support the
> certificate verification process.
> 

Crypt::SSLeay does support peer cert verification via 
environment variable configuration.  But, you will still
end up with the Client-SSL-Warning, as that it automatically
set in the LWP layer.

  # CA CERT PEER VERIFICATION
  $ENV{HTTPS_CA_FILE}   = 'certs/ca.crt';
  $ENV{HTTPS_CA_DIR}= 'certs/';

The perl XS code looks like:

SSL_CTX_set_verify(ctx)
 ...
CAfile=getenv("HTTPS_CA_FILE");
CAdir =getenv("HTTPS_CA_DIR");

if(!CAfile && !CAdir) {
SSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, NULL);
} else {
SSL_CTX_load_verify_locations(ctx,CAfile,CAdir);
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
}

I believe that when the CA verification is occuring,
there will be an error if the CA cert is not verified.

You can use the ./net_ssl_test script with a special 
argument -CAfile, perldoc Crypt::SSLeay for more info,
and check out the CERT section.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay: Code works on Linux but not Solaris.. HELP!

[Del Simmons]

Ok, got past that one.. OpenSSL was looking for the certs.pem file where 
it didn't exist.. copied that over to the proper location and this 
problem was fixed.. Now I have hit an even uglier snag..

I am using the same script and now when I run it on the Solaris box all 
of the SSL handshake completes properly, including the client 
certitficate parts but the socket seems to be closed by my side before 
any response can be sent back from the server. Has anyone else seen this?

Here is the output I get now when running the below script on the 
Solaris 8 box..

SSL_connect:before/connect initialization
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
SSL_connect:SSL renegotiate ciphers
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server certificate request A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client certificate A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
500 (Internal Server Error) read failed:
Net::SSL::die_with_error('Net::SSL=GLOB(0x356870)', 'read failed')
called at /usr/local/lib/perl5/site_perl/5.6.0/sun4-solaris/Net/SSL.pm line
211
Net::SSL::read('Net::SSL=GLOB(0x356870)', '', 4096, 0) called at
/usr/local/lib/perl5/site_perl/5.6.0/LWP/Protocol/http.pm line 193
LWP::Protocol::http::request('LWP::Protocol::https=HASH(0xf713c)',
'HTTP::Request=HASH(0xf5cb0)', undef, undef, undef, 180) called at
/usr/local/lib/perl5/site_perl/5.6.0/LWP/UserAgent.pm line 212
require 0 called at
/usr/local/lib/perl5/site_perl/5.6.0/LWP/UserAgent.pm line 211
LWP::UserAgent::simple_request('LWP::UserAgent=HASH(0x2227bc)',
'HTTP::Request=HASH(0xf5cb0)', undef, undef) called at
/usr/local/lib/perl5/site_perl/5.6.0/LWP/UserAgent.pm line 249
LWP::UserAgent::request('LWP::UserAgent=HASH(0x2227bc)',
'HTTP::Request=HASH(0xf5cb0)') called at ./dammit line 32

Client-Date: Thu, 04 Oct 2001 15:27:56 GM



-Del

Del Simmons wrote:

> Hey everyone..
>
> I am using the following:
>
> machine 1: Linux 2.4.8 (RedHat 7.1 with new kernel)
> machine 2: Solaris 8
>
> packages on both machines:
> openssl version 0.9.6
> perl 5.6.0
> Crypt::SSLeay 0.31
> LWP  5.53
>
> And I have the following code in a script:
> --
> #!/usr/bin/perl
> use strict;
>
> $ENV{HTTPS_CERT_FILE} = 'certs/clcert.pem';
> $ENV{HTTPS_KEY_FILE}  = 'certs/key.pem';
>
> $ENV{HTTPS_CA_FILE} = 'certs/cacerts.pem';
> $ENV{HTTPS_CA_DIR} = '/usr/share/ssl/';
>
> $ENV{HTTPS_VERSION} = '3';
> $ENV{_SSL_DEBUG} = '1';
> $ENV{SSL_DEBUG} = '1';
> $ENV{HTTPS_DEBUG} = '1';
>
>
> use HTTP::Request::Common qw(POST);
> use LWP::UserAgent;
>
> my $ua = LWP::UserAgent->new;
> my $req = POST 'https://secure.server.name.net',
> [param => 'value'];
>
> my $res = $ua->request($req);
> 
>
> When I run this on machine 1 I get the following:
>
> 
> [del@Rhino rioport]$ ./cert_test
> SSL_connect:before/connect initialization
> SSL_connect:SSLv3 write client hello A
> SSL_connect:SSLv3 read server hello A
> SSL_connect:SSLv3 read server certificate A
> SSL_connect:SSLv3 read server key exchange A
> SSL_connect:SSLv3 read server done A
> SSL_connect:SSLv3 write client key exchange A
> SSL_connect:SSLv3 write change cipher spec A
> SSL_connect:SSLv3 write finished A
> SSL_connect:SSLv3 flush data
> SSL_connect:SSLv3 read finished A
> SSL_connect:SSL renegotiate ciphers
> SSL_connect:SSLv3 write client hello A
> SSL_connect:SSLv3 read server hello A
> SSL_connect:SSLv3 read server certificate A
> SSL_connect:SSLv3 read server key exchange A
> SSL_connect:SSLv3 read server certificate request A
> SSL_connect:SSLv3 read server done A
> SSL_connect:SSLv3 write client certificate A
> SSL_connect:SSLv3 write client key exchange A
> SSL_connect:SSLv3 write certificate 

[Crypt::SSLeay] proxy with https

[Namsuk kim]

Today, I've obtained Crypt::SSLeay module version 0.32.  And, it looks
like very promising to the problem that has given me so much headache.
Our iPlanet proxy server is so picky that it would not recognize
VeriSign's issued CA as a valid CA.  So, my script which relies on LWP
will fail to connect due to lack of acceptable CA to the proxy.  I have
been looking for a solution that lwp handle CA just like normal web
browser would.  Then, just ignore the CA error.

One of our proxy admin recognized this problem and wrote a java script
that can work with this problem.  Even though I have not tested, it
basically hold the certicate in 'cacers' directory instead of reling on
CA certification part to the proxy server.  Now, I think perl can do the
same stuff.  Then, I have found the newer version of Crypt::SSLeay,
0.32, will handle this problem.  Correct me if I am wrong.

Now, I have new problem that I didn't have before.  First, the
environment values for userid and passwd are not read and passed to the
proxy.  The other problem is that it seems CA repository information is
not also read.  Looks like I'm missing some components here.  if I use
"proxy_authorization_basic("", "");", proxy
authentication goes through.  But, it will bomb out at CA verification
part giving me error like below.

-

The requested item could not be loaded by the proxy.
The certificate issuer for this server is not recognized by
Netscape. 

Netscape refuses to connect to this server
--

Looks like the CA handling is not done by the script(module) at all.
What's missing here?  Please, guide me to the right direction and make
me beat java. ;-)

Thanks in advance.

Namsuk Kim


 Following is the part of the code.

-

# PROXY SUPPORT
$ENV{HTTPS_PROXY} = 'http://proxy:8080';

# PROXY_BASIC_AUTH
$ENV{HTTPS_PROXY_USERNAME} = '***';
$ENV{HTTPS_PROXY_PASSWORD} = '***';

# DEFAULT SSL VERSION
$ENV{HTTPS_VERSION} = '3';

# CLIENT CERT SUPPORT
$ENV{HTTPS_CERT_FILE} = 'certs/notacacert.pem';
$ENV{HTTPS_KEY_FILE}  = 'certs/notacakeynopass.pem';

# CA CERT PEER VERIFICATION
$ENV{HTTPS_CA_FILE}   = 'certs/ca.crt';
$ENV{HTTPS_CA_DIR}= 'certs/';

$ua->env_proxy();

my $req = new HTTP::Request('GET', 'https://www.optisvalue.com/');
#$req->proxy_authorization_basic("", "");
$req->authorization_basic('share', 'share');

print $ua->request($req)->as_string;

-

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay: Code works on Linux but not Solaris.. HELP!

[Del Simmons]

Hey everyone..

I am using the following:

machine 1: Linux 2.4.8 (RedHat 7.1 with new kernel)
machine 2: Solaris 8

packages on both machines:
openssl version 0.9.6
perl 5.6.0
Crypt::SSLeay 0.31
LWP  5.53

And I have the following code in a script:
--
#!/usr/bin/perl
use strict;

$ENV{HTTPS_CERT_FILE} = 'certs/clcert.pem';
$ENV{HTTPS_KEY_FILE}  = 'certs/key.pem';

$ENV{HTTPS_CA_FILE} = 'certs/cacerts.pem';
$ENV{HTTPS_CA_DIR} = '/usr/share/ssl/';

$ENV{HTTPS_VERSION} = '3';
$ENV{_SSL_DEBUG} = '1';
$ENV{SSL_DEBUG} = '1';
$ENV{HTTPS_DEBUG} = '1';


use HTTP::Request::Common qw(POST);
use LWP::UserAgent;

my $ua = LWP::UserAgent->new;
my $req = POST 'https://secure.server.name.net',
 [param => 'value'];

my $res = $ua->request($req);


When I run this on machine 1 I get the following:


[del@Rhino rioport]$ ./cert_test
SSL_connect:before/connect initialization
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
SSL_connect:SSL renegotiate ciphers
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server certificate request A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client certificate A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
SSL3 alert read:warning:close notify
[del@Rhino rioport]$

--

So everything looks good under linux..  When I run it on the Solaris 
machine I get this:

--
SSL_connect:before/connect initialization
SSL_connect:SSLv3 write client hello A
SSL_connect:SSLv3 read server hello A
SSL3 alert write:fatal:bad certificate
SSL_connect:error in SSLv3 read server certificate B
SSL_connect:before/connect initialization
SSL_connect:SSLv2 write client hello A
SSL_connect:error in SSLv2 read server hello B
500 (Internal Server Error) SSL negotiation failed: error:1407E086:SSL 
routines:SSL2_SET_CERTIFICATE:certificate verify failed ; at 
/usr/local/lib/perl5/site_perl/5.6.0/sun4-solaris/Net/SSL.pm line 139. 
Client-Date: Wed, 03 Oct 2001 15:38:46 GMT
---

What would cause it to fail with "SSL3 alert write:fatal:bad 
certificate" on Solaris? Any ideas?

-Del

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay: Peer Certificate Verification?

[Del Simmons]

Hey guys,

Sorry if this has been answered already. I'm using LWP to post data to a 
https server. The client cert and key is passed properly and the server 
verify's me fine when I submit my POST, but I always get the following 
warning header from LWP/Protocol/https.pm: "Client-SSL-Warning: Peer 
certificate not verified". After seeing a post by Lutz Jaenicke, it 
seems that the bottom line is that Crypt::SSLeay doesn't support the 
certificate verification process.

Is that correct or am I just confused?

Does anyone know if it ever will or if there might be a patch somewhere 
that would let me verify the server's cert?

-Del Simmons

[EMAIL PROTECTED]





__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

RE: Crypt::SSLeay - problems connecting to 128 bit sites (not 56bit sites) Solaris 2.7 and openssl .96b, latest version of Crypt::SSLeay

[George Richman]

Screw the latest versions...

I fixed this by downgrading to:

Crypt-SSLeay-0.22
and libwww-perl-5.51

For Solaris 2.7 perl 5.6.1 and for Linux RedHat 6.2 perl 5.005_03

What a complete waste of 2 days.

- George

-Original Message-
From: Joshua Chamas [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 13, 2001 12:14 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: Crypt::SSLeay - problems connecting to 128 bit sites (not
56bit sites) Solaris 2.7 and openssl .96b, latest version of
Crypt::SSLeay


George Richman wrote:
>
> Support,
>
> Does Crypt::SSLeay support 128 bit encrypted sites??
>
> When I use lwp-request https://login.zeborg.com , it does not connect
> properly.  I get a:
> ...
> Then when I try it against a lower bit encrypted site (56bit), it actually
> works:
>
> lwp-request https://laborla.zeborg.com/
>
> I am using Solaris 2.7 and openssl .96b.
>

My version of Crypt::SSLeay, v.31, seems to work, see below,
note that .31 is a dev version, but nothing about connections
changed in it, only build & debugging config stuff.  .29 was
the last release to CPAN and should work the same, so I'd
guess its openssl 0.9.6b that's the problem.  You could
try a downgrade to 0.9.6a, and see how it goes.

--Josh

WinNT perl5.004_04 works fine, same as below
#define OPENSSL_VERSION_TEXT"OpenSSL 0.9.6a 5 Apr 2001"

Linux perl5.005xx works fine [ see below ]
#define OPENSSL_VERSION_TEXT"OpenSSL 0.9.6a 5 Apr 2001"

# lwp-request -ed https://login.zeborg.com
Cache-Control: no-store
Connection: Close
Pragma: no-cache
Server: WebLogic 5.1.0 Service Pack 8 12/20/2000 16:34:54 #95137
Content-Length: 3797
Content-Type: text/html
Expires: 1
Client-Date: Thu, 13 Sep 2001 07:10:35 GMT
Client-Peer: 209.10.152.150:443
Client-SSL-Cert-Issuer: /O=VeriSign Trust Network/OU=VeriSign,
Inc./OU=VeriSign International Server CA - Class 3/OU=www.verisign.com/CPS
Incorp.by
Ref. LIABILITY LTD.(c)97 VeriSign
Client-SSL-Cert-Subject: /C=US/ST=New York/L=New
York/O=Zeborg/OU=Globix/CN=login.zeborg.com
Client-SSL-Cipher: RC4-SHA
Client-SSL-Warning: Peer certificate not verified
Set-Cookie:
SSOTengahSession=O6BcHo7TTTFGTM6VKA2SdX568dvuw1zNuuLbwDFXDPSDteEvXWGo|680802
4995186924964/-1062726649/6/3530/3530/3535/3535/3530/-1;
path=/
Title: Zeborg Login

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay - problems connecting to 128 bit sites (not 56bit sites) Solaris 2.7 and openssl .96b, latest version of Crypt::SSLeay

[Joshua Chamas]

George Richman wrote:
> 
> Support,
> 
> Does Crypt::SSLeay support 128 bit encrypted sites??
> 
> When I use lwp-request https://login.zeborg.com , it does not connect
> properly.  I get a:
> ...
> Then when I try it against a lower bit encrypted site (56bit), it actually
> works:
> 
> lwp-request https://laborla.zeborg.com/
> 
> I am using Solaris 2.7 and openssl .96b.
> 

My version of Crypt::SSLeay, v.31, seems to work, see below, 
note that .31 is a dev version, but nothing about connections
changed in it, only build & debugging config stuff.  .29 was 
the last release to CPAN and should work the same, so I'd
guess its openssl 0.9.6b that's the problem.  You could 
try a downgrade to 0.9.6a, and see how it goes.

--Josh

WinNT perl5.004_04 works fine, same as below
#define OPENSSL_VERSION_TEXT"OpenSSL 0.9.6a 5 Apr 2001"

Linux perl5.005xx works fine [ see below ]
#define OPENSSL_VERSION_TEXT"OpenSSL 0.9.6a 5 Apr 2001"

# lwp-request -ed https://login.zeborg.com
Cache-Control: no-store
Connection: Close
Pragma: no-cache
Server: WebLogic 5.1.0 Service Pack 8 12/20/2000 16:34:54 #95137
Content-Length: 3797
Content-Type: text/html
Expires: 1
Client-Date: Thu, 13 Sep 2001 07:10:35 GMT
Client-Peer: 209.10.152.150:443
Client-SSL-Cert-Issuer: /O=VeriSign Trust Network/OU=VeriSign, Inc./OU=VeriSign 
International Server CA - Class 3/OU=www.verisign.com/CPS Incorp.by
Ref. LIABILITY LTD.(c)97 VeriSign
Client-SSL-Cert-Subject: /C=US/ST=New York/L=New 
York/O=Zeborg/OU=Globix/CN=login.zeborg.com
Client-SSL-Cipher: RC4-SHA
Client-SSL-Warning: Peer certificate not verified
Set-Cookie: 
SSOTengahSession=O6BcHo7TTTFGTM6VKA2SdX568dvuw1zNuuLbwDFXDPSDteEvXWGo|6808024995186924964/-1062726649/6/3530/3530/3535/3535/3530/-1;
path=/
Title: Zeborg Login
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay - problems connecting to 128 bit sites (not 56bit sites) Solaris 2.7 and openssl .96b, latest version of Crypt::SSLeay

[George Richman]

Support,

Does Crypt::SSLeay support 128 bit encrypted sites??

When I use lwp-request https://login.zeborg.com , it does not connect
properly.  I get a:


An Error Occurred

An Error Occurred
500 read failed:



Then when I try it against a lower bit encrypted site (56bit), it actually
works:

lwp-request https://laborla.zeborg.com/

I am using Solaris 2.7 and openssl .96b.

Thanks for your help!!

- George


George Richman

Zeborg, Inc.
1801 Century Park East, Suite 120
Los Angeles, CA  90067
t: 310.499.6057
f: 310.499.6001

www.zeborg.com

This message is a personal and confidential communication.  If you are not
the intended recipient, please do not read, copy, or use it, and do not
disclose it to others.  Please notify the sender of the delivery error by
replying to this message, and then delete it from your system.  Thank you.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Questions re: Crypt::SSLeay

[Sisyphus]

- Original Message -
From: "Szeto, Paul" <[EMAIL PROTECTED]>
-


> Can't locate loadable object for module Crypt::SSLeay in @INC


> But the Crypt::SSLeay is there in the @INC path with the correct
> permissions.

I'm not familiar with your OS, but the 'loadable object' that can't be
located will be the shared library, not the '.pm' file.

In windows, this file is a '.dll' and would be looked for in the
'auto/crypt/ssleay' sub directory within one of the @INC directories. I
expect that your perl would have a similar structure for the placement of
shared libraries.

Hth.

Cheers,
Rob


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Questions re: Crypt::SSLeay

[Szeto, Paul]

Platform:  HPUX 10.20
Perl version: 5.6.1
Problem:  
After installing Crypt::SSLeay and OpenSSL, we tried to call
the Crypt::SSLeavy from test scripts but kept on getting:

-
Can't locate loadable object for module Crypt::SSLeay in @INC (@INC
contains: /op
t/perl5/lib/5.6.1/PA-RISC1.1 /opt/perl5/lib/5.6.1
/opt/perl5/lib/site_perl/5.6.1/
PA-RISC1.1 /opt/perl5/lib/site_perl/5.6.1 /opt/perl5/lib/site_perl .) at
./test.p
l line 2
Compilation failed in require at ./test.pl line 2.


---
But the Crypt::SSLeay is there in the @INC path with the correct
permissions. 


/opt/perl5/lib/site_perl/5.6.1/PA-RISC1.1 #ll -R Crypt
total 24
drwxr-xr-x   2 root   sys   1024 Aug 31 17:33 SSLeay
-r-xr-xr-x   1 root   sys  11159 Aug 31 10:42 SSLeay.pm

Crypt/SSLeay:
total 12
-r-xr-xr-x   1 root   sys 54 Aug 31 10:42 CTX.pm
-r-xr-xr-x   1 root   sys 55 Aug 31 10:42 Conn.pm
-r-xr-xr-x   1 root   sys 54 Aug 31 10:42 Err.pm
-r-xr-xr-x   1 root   sys   1187 Aug 31 10:42 MainContext.pm
-r-xr-xr-x   1 root   sys 55 Aug 31 10:42 X509.pm


Anybody with any clues as to why we get the message.  Please help.  This is
urgent!

Thanks in advance!

> Paul Szeto
> Unix Systems Group
> Merck-Medco 
> * FRLN#60
> *  (201) 703-7439  direct
> *  (201) 703-7053  fax
> *  <mailto:[EMAIL PROTECTED]>
> 
> 
> 
> 
> 
> 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay - OpenSSL glue that provides LWP https support

[Szeto, Paul]

Hello,

I am looking to build the SSL module on perl 5.6.1 on a HPUX 10.20 platform.


Can somebody give me some advice as to what version I should use?  where I
should go to get it? Any specific steps involved?  

Thanks in advance,

> Paul Szeto
> Unix Systems Group
> Merck-Medco 
> * FRLN#60
> *  (201) 703-7439  direct
> *  (201) 703-7053  fax
> *  
> 
> 
> 
> 
> 
> 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] on solaris: broken pipe

[Joshua Chamas]

"franck P." wrote:
> 
> Hi there,
> 
> running perl 5.004_04 on Solaris 2.6, SPARC, OpenSSL 0.9.6,
> I have installed Crypt-SSLeay-0.29.
> No compilation problem (excepted for an other module:
> libwww-perl-5.5395).
> 
> After some test, everything goes fine. But, I have tried to connect
> to a running machine which has NO Web server installed.
> Then my test program, exit and print: Broken Pipe.
> 
> My test program looks like:
> my $ua = new LWP::UserAgent;
> my $req = new HTTP::Request('GET',"https://$AUTHSERVER";);
> my $res = $ua->request($req);
> ---> broken pipe here.
> 

Funny, I get this too, never noticed before.
I'll see if I can't get this to behave better.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] on solaris: broken pipe

[franck P.]

Hi there,

running perl 5.004_04 on Solaris 2.6, SPARC, OpenSSL 0.9.6,
I have installed Crypt-SSLeay-0.29. 
No compilation problem (excepted for an other module:
libwww-perl-5.5395).

After some test, everything goes fine. But, I have tried to connect
to a running machine which has NO Web server installed. 
Then my test program, exit and print: Broken Pipe.

My test program looks like:
my $ua = new LWP::UserAgent;
my $req = new HTTP::Request('GET',"https://$AUTHSERVER";);
my $res = $ua->request($req);
---> broken pipe here.

If I try with: http://$AUTHSERVER (http instead of https), I got
a normal error.

Any help on this problem?

Thanks in advance,

franck

PS: I dont know how to suscribe to this mailing list, so, please,
Email to me at [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] Using https proxy

[Joshua Chamas]

Bob Niederman wrote:
> 
> etcetera., where $srvr is 'http://servername.domain/file' or
> 'https://servername.domain/file'
> 
> Same general code works fileto the same boxes without proxy (different
> route not requiring proxy).
> 
> Works fine for http, ethereal shows nothing leaving the box for https, the
> $ua->request is failing immediately.
> 

Proxies tend to be quirky, and it may be that you do not
have access to the proxy at all!  I would recommend debugging
this with ./net_ssl_test in the Crypt::SSLeay distribution.
Just use the -d debug flag for debug output, and you may
have a hint as to what is going wrong with the proxy.

--Josh

> ./net_ssl_test -h
Usage: net_ssl_test [-d] [-b=NNN] [-h] [-p proxy_name:port] [GET|HEAD] 
[ssl_server_name] [port]

  -d  Debug mode
  -b  Benchmark NNN times, good test for memory leaks
  -h  This help message
  -p  Proxy server, via CONNECT method, localhost:80 format

  -cert  client certificate file
  -key   private key file

 method  defaults to HEAD
 ssl_server_name defaults to www.nodeworks.com
 portdefaults to 443

These are equivalent:

  ./net_ssl_test
  ./net_ssl_test HEAD www.nodeworks.com 443

This might be how you debug your proxy:

  ./net_ssl_test -d -p http://proxy_name:80 www.nodeworks.com

Note http:// on proxy hostname is stripped off, and is
meaningless to Crypt::SSLeay.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] Using https proxy

[Bob Niederman]

On Fri, 24 Aug 2001, Joshua Chamas wrote:

> Bob Niederman wrote:
> > 
> > I'm using Crypt::SSLeay 0.29 with LWP::UserAgent 1.73.
> > 
> > I'm trying to use a proxy.  As noted in the doc, $us->proxy() doesn't
> > work.
> > 
> > However, the workaround suggested:
> > 
> > "
> >   $ENV{HTTPS_PROXY} = 'http://proxy_hostname_or_ip:port';
> >   $ENV{HTTPS_PROXY} = '127.0.0.1:8080';
> > 
> > Use of the HTTPS_PROXY environment variable in this way is compatible
> > with LWP::UserAgent->env_proxy() usage.
> > "
> > 
> > Also fails.  Attemptinmg this causes an error of:
> > 
> > Can't use string ("LWP::UserAgent") as a HASH ref while "strict refs" in
> > use at /usr/lib/perl5/site_perl/5.005/LWP/UserAgent.pm line
> >  612.
> > 
> 
> LWP::UserAgent->() notation was just talking about the method call...
> did you try setting $ENV{HTTPS_PROXY} directly?  Note to use LWP
> calls, you need to create an LWP object.
> 
> --Josh

I know to use an object, but misunderstood the statement: "If we could
find the current LWP object executing while in Net::SSLIf we could find
the current LWP object executing while in Net::SSL..." to mean not to do
it this and interpreted your notation literally.

Using the object call gets rid of the 'strict refs' error message, but it
still doesn't work.  Code is:

   $ENV{HTTPS_PROXY} = "https://$proxy:8080/";;
$ENV{HTTP_PROXY} = "http://$proxy:8080/";;
$ua->env_proxy();
$agent = 'Lynx/Chicago DMZ monitoring script';
$ua->agent($agent);

for ( 1..3 )
{
$bad = $good = 0;

for $srvr (  @ssl_srvrs, )
# for $srvr ( @http_srvrs, @ssl_srvrs, )
{
$res = '';

$req = new HTTP::Request('GET', "$srvr");
$ress = $ua->request($req);
$res = $ress->content;


etcetera., where $srvr is 'http://servername.domain/file' or
'https://servername.domain/file'

Same general code works fileto the same boxes without proxy (different
route not requiring proxy).

Works fine for http, ethereal shows nothing leaving the box for https, the
$ua->request is failing immediately.

BTW, thanx for the quick response.

- Bob Niederman

> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]
> 


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] Using https proxy

[Joshua Chamas]

Bob Niederman wrote:
> 
> I'm using Crypt::SSLeay 0.29 with LWP::UserAgent 1.73.
> 
> I'm trying to use a proxy.  As noted in the doc, $us->proxy() doesn't
> work.
> 
> However, the workaround suggested:
> 
> "
>   $ENV{HTTPS_PROXY} = 'http://proxy_hostname_or_ip:port';
>   $ENV{HTTPS_PROXY} = '127.0.0.1:8080';
> 
> Use of the HTTPS_PROXY environment variable in this way is compatible
> with LWP::UserAgent->env_proxy() usage.
> "
> 
> Also fails.  Attemptinmg this causes an error of:
> 
> Can't use string ("LWP::UserAgent") as a HASH ref while "strict refs" in
> use at /usr/lib/perl5/site_perl/5.005/LWP/UserAgent.pm line
>  612.
> 

LWP::UserAgent->() notation was just talking about the method call...
did you try setting $ENV{HTTPS_PROXY} directly?  Note to use LWP
calls, you need to create an LWP object.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] Using https proxy

[Bob Niederman]

I'm using Crypt::SSLeay 0.29 with LWP::UserAgent 1.73.

I'm trying to use a proxy.  As noted in the doc, $us->proxy() doesn't
work.

However, the workaround suggested:

"
  $ENV{HTTPS_PROXY} = 'http://proxy_hostname_or_ip:port';
  $ENV{HTTPS_PROXY} = '127.0.0.1:8080';

Use of the HTTPS_PROXY environment variable in this way is compatible
with LWP::UserAgent->env_proxy() usage.
"

Also fails.  Attemptinmg this causes an error of:

Can't use string ("LWP::UserAgent") as a HASH ref while "strict refs" in
use at /usr/lib/perl5/site_perl/5.005/LWP/UserAgent.pm line
 612.

Looking at LWP/UserAgent.pm suggestes that this reaaly needs to be called
with an object reference.

Can anyone help?

thanx,

-- Bob Niederman

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay

[satish bhupatiraju]

Hello
 I want to install Crypt::SSLeay on AIX box for HTTPS support.I wanted 
to know which is a better option SSLeay or OPENSSL for AIX operating 
system?Are there any specific steps i need to follow for this installation?
  I am really thankful for to you attend to this query.

Thanks & Regards
satish

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay compile/test problem

[Joshua Chamas]

Arin Komins wrote:
> 
> Hi there,
> 
> I'm trying to install Crypt::SSLeay on a Solaris 7 machine.
> 
> When I get to the make test:
> 
> PERL_DL_NONLAZY=1 /opt/bin/perl -Iblib/arch -Iblib/lib
> -I/opt/pkgs/perl5-5.005_02/lib/5.00502/sun4-solaris
> -I/opt/pkgs/perl5-5.005_02/lib/5.00502 -e 'use Test::Harness qw(&runtests
> $verbose); $verbose=0; runtests @ARGV;' t/*.t
> t/ssl_context...Can't load 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' for
> module Crypt::SSLeay: ld.so.1: /opt/bin/perl: fatal: relocation
> error: file blib/arch/auto/Crypt/SSLeay/SSLeay.so: symbol
> EVP_PKEY_size: referenced symbol not found at
> /opt/pkgs/perl5-5.005_02/lib/5.00502/sun4-solaris/DynaLoader.pm line 168.
> 

Generally, I would recommend using gcc if you are not, as the sun
compilers seem quirky.  Also make sure your LD_LIBRARY_PATH env 
variable includes the location of your openssl libs, as my experience
on Solaris 2.6 makes me guess that "symbol not found" errors
are often this.

If you do find out how to fix this problem, it would be great
if you could post the solution to the list for future 
generations. :)

-- Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay] compile problems on HP-UX 10.20

[Lutz Jaenicke]

On Tue, Apr 24, 2001 at 02:05:17PM -0400, [EMAIL PROTECTED] wrote:
> in the make step I am getting.
> 
> ld: Invalid loader fixup for symbol "$002B0009".   
> *** Error exit code 1  

This error indicates that you are trying to use a object file
created for static linking for shared library use. Object files
to be used with shared libraries must be compiled with the +z/+Z
(or -fpic/-fPIC for gcc) compiler options.

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus   http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus  Fax. +49 355 69-4153
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [Crypt::SSLeay]problems access https 128 bit

[Joshua Chamas]

[EMAIL PROTECTED] wrote:
> 
> I've got a web client using LWP working quite well.
> I've installed  CryptSSLeay and Open SSL.
> I'm getting SSL access to secure sites at 40 bit without problems.
> I would like to connect to sites at 128 bit using the SSLv3 protocol.
> In this case I'm getting an error 403.5.
> I'm looking for any information how to go about  this.
> Anyone got any ideas?
> 

I don't know what the problem is, but if you give me a URL,
I can check it out & see if I can get my Crypt::SSLeay LWP
to connect to it.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[Crypt::SSLeay] compile problems on HP-UX 10.20

[prtaylor]

in the make step I am getting.

ld: Invalid loader fixup for symbol "$002B0009".   
*** Error exit code 1  
   
Stop.   


Any help would be appreciated.

Thanks.

- Rob

[Crypt::SSLeay]problems access https 128 bit

[holger . keller]

I've got a web client using LWP working quite well.
I've installed  CryptSSLeay and Open SSL.
I'm getting SSL access to secure sites at 40 bit without problems.
I would like to connect to sites at 128 bit using the SSLv3 protocol.
In this case I'm getting an error 403.5.
I'm looking for any information how to go about  this.  
Anyone got any ideas?

Thanks,
Holger
--
berlin.de - meine stadt im netz. Jetzt eigene eMail-adresse @berlin.de sichern!
http://www.berlin.de/home/MeineStadt/Anmeldung

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

RE: [ANNOUNCE] Crypt::SSLeay v.25

[Reiner Buehl]

Hello,

the problem with this "tip" is that ActiveState is usually way behind in 
releasing new module versions. Their current Crypt::SSLeay version is 0.17!

Best Regards,
Reiner.

> Also, if you give up on trying to roll your own, here's a tip
> for win32 users from the README:
> 
>  !!! NOTE for Win32 users, few people seem to be able to build
>  W  Crypt::SSLeay successfully on that platform.  You don't need
>  I  to because ActiveState has already compiled it for you,
>  N  and is available for their perl builds 618 & 522 as a ppm
>  3  install.  It may also be available for their latest build.
>  2  Keywords: WinNT, Win95, Win98, 95, 98, NT, 2000
>  !!!  Please see http://www.activestate.com/
> 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: [ANNOUNCE] Crypt::SSLeay v.25

[Marcus Carey]

Joshua

I am trying to install your new release Crypt-SSLeay but makefile.pl is
trying to locate SSLeay.exe instead of Openssl.exe. Is this a problem?


No OpenSSL installation found, usually in /usr/local/openssl
Which OpenSSL build path do you want to link against?  c:\bin
Apparently no SSLeay installation at 'c:\bin'
Are you sure you got it correct


BUILD INFORMATION


ssl dir:c:\bin
libraries:  -lssleay32 -llibeay32 -lRSAglue -lrsaref
include dir:c:\bin\include -Ic:\bin\inc32
ssl header: ssl.h
ssl candidate:  c:\bin; c:\bin/include




Writing Makefile for Crypt::SSLeay


Also I am getting the following warnings when I run nmake
SSLeay.c
SSLeay.xs(57) : warning C4133: 'function' : incompatible types - from
'struct _PerlIO *' to 'struct _iobuf *'
SSLeay.xs(61) : warning C4133: 'function' : incompatible types - from
'struct _PerlIO *' to 'struct _iobuf *'
SSLeay.xs(68) : warning C4133: 'function' : incompatible types - from
'struct _PerlIO *' to 'struct _iobuf *'
SSLeay.xs(70) : warning C4133: 'function' : incompatible types - from
'struct _PerlIO *' to 'struct _iobuf *'

Marcus




- Original Message -----
From: "Joshua Chamas" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, April 11, 2001 11:47 AM
Subject: [ANNOUNCE] Crypt::SSLeay v.25


> Hey,
>
> The latest perl module Crypt::SSLeay v.25 is in perl's CPAN.
> It includes patches from Tobias for client certificate support.
> You can get the latest .25 from:
>
>   http://www.perl.com/CPAN-local/modules/by-module/Crypt/
>
> The changes are below.
>
> -- Josh
>
>
> $MODULE=Crypt::SSLeay; $VERSION = .25; $DATE="2001-04-10";
>
>  + = improvement; - = bug fix
>
> + update ./net_ssl_test to do smart parsing of host, where
>   host can now be of the form http://www.nodeworks.com:443/
>
> + integrated client cert patches provided by Tobias Manthey,
>   creating new config options:
>
> $ENV{HTTPS_CERT_FILE}  -- file of client certificate
> $ENV{HTTPS_KEY_FILE}   -- file of private key file
>
>   Also support for these options in ./net_ssl_test with these
>   options:
>
>   -cert  client certificate file
>   -key   private key file
>
>   like so:
>
> ./net_ssl_test -cert=notacacert.pem -key=notacakeynopass.pem -d
>
>   To create simple test cert with openssl:
>
>  /usr/local/openssl/bin/openssl req -config
/usr/local/openssl/openssl.cnf -new -days 365 -newkey rsa:1024 -x509 -keyout
notacakey.pem -out
> notacacert.pem
>  /usr/local/openssl/bin/openssl rsa -in notacakey.pem -out
notacakeynopass.pem
>
> $MODULE=Crypt::SSLeay; $VERSION = .24; $DATE="2001-03-09";
>
>  + = improvement; - = bug fix
>
> - local $@ in Net::SSL::DESTROY so we don't kill real errors
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

[ANNOUNCE] Crypt::SSLeay v.25

[Joshua Chamas]

Hey,

The latest perl module Crypt::SSLeay v.25 is in perl's CPAN.  
It includes patches from Tobias for client certificate support.  
You can get the latest .25 from:

  http://www.perl.com/CPAN-local/modules/by-module/Crypt/

The changes are below.

-- Josh


$MODULE=Crypt::SSLeay; $VERSION = .25; $DATE="2001-04-10";

 + = improvement; - = bug fix

+ update ./net_ssl_test to do smart parsing of host, where
  host can now be of the form http://www.nodeworks.com:443/

+ integrated client cert patches provided by Tobias Manthey,
  creating new config options:

$ENV{HTTPS_CERT_FILE}  -- file of client certificate
$ENV{HTTPS_KEY_FILE}   -- file of private key file

  Also support for these options in ./net_ssl_test with these
  options:

  -cert  client certificate file
  -key   private key file

  like so:

./net_ssl_test -cert=notacacert.pem -key=notacakeynopass.pem -d

  To create simple test cert with openssl:

 /usr/local/openssl/bin/openssl req -config /usr/local/openssl/openssl.cnf -new 
-days 365 -newkey rsa:1024 -x509 -keyout notacakey.pem -out
notacacert.pem
 /usr/local/openssl/bin/openssl rsa -in notacakey.pem -out notacakeynopass.pem

$MODULE=Crypt::SSLeay; $VERSION = .24; $DATE="2001-03-09";

 + = improvement; - = bug fix

- local $@ in Net::SSL::DESTROY so we don't kill real errors
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Crypt::SSLeay

[Lutz Jaenicke]

On Thu, Apr 05, 2001 at 04:51:26PM -0700, Marcus Carey wrote:
> It does not matter which server I connect to I still get the warning.

Ok, I just downloaded libwww-perl and found the offending message in it, but
see below.

> Date: Thu, 05 Apr 2001 23:21:19 GMT
> Accept-Ranges: bytes
> Server: Apache/1.3.6 (Unix) mod_perl/1.20 mod_ssl/2.3.5 OpenSSL/0.9.3a
> DAV/0.9.8
> Content-Length: 5847
> Content-Type: text/html
> ETag: "2f71e-16d7-38b2f62a"
> Last-Modified: Tue, 22 Feb 2000 20:48:42 GMT
> Client-Date: Thu, 05 Apr 2001 23:24:58 GMT
> Client-Peer: 129.132.7.153:443

> Client-SSL-Cert-Issuer: /C=ZA/ST=Western Cape/L=Cape Town/O=Thawte
> Consulting cc/OU=Certification Services Division/CN=Thawte Server
> [EMAIL PROTECTED]
> Client-SSL-Cert-Subject: /C=DE/ST=Bavaria/L=Munich/O=Ralf S.
> Engelschall/OU=Security Services Division/CN=www.engelschall.com
> Client-SSL-Cipher: EDH-RSA-DES-CBC3-SHA
> Client-SSL-Warning: Peer certificate not verified

These headers are not sent from the server but added on the fly by LWP.
They are created by lib/LWP/Protocol/https.pm:
...
$res->header("Client-SSL-Cipher" => $sock->get_cipher);
my $cert = $sock->get_peer_certificate;
if ($cert) {
$res->header("Client-SSL-Cert-Subject" => $cert->subject_name);
$res->header("Client-SSL-Cert-Issuer" => $cert->issuer_name);
}
$res->header("Client-SSL-Warning" => "Peer certificate not verified");

So as you can see, the "not verified" warning is added unconditionally.
In order to get this to run, SSL_get_verify_result() needs to be evaluated.
In order to get this running, the SSL_CTX_load_verify_locations()
functionality is neeed, which is (also?) missing from Crypt::SSLeay.

Therefore, your program as of now _cannot_ work, since the fundamental
functionality is missing.

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus   http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus  Fax. +49 355 69-4153
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Crypt::SSLeay 0.23 Client-Cert Patch

[Tobias Manthey]

CONTENT of INSTALL-PATCH

This patch provides additional capabilites to Crypt::SSLeay v0.23 and can be
found on
http://www.progredy.de/download.html

This Patch provides:
* Fixes a (imo) glitch, as the original Crypt::SSLeay as it
depends on direct host name resolution. Using a proxy just
the proxy needs full DNS access. Connecting to a host via proxy
which the originating host behind the firewall/proxy can't resolve (but to
the proxy)
will therefore fail in the original implementation, but will suceed
(hopefully ;-) ) with this one
* Basic Client Cert Support
Support for loading client certificate, client privat key file and
validation
(look up the modified net_ssl_test script). You need a cert
in PEM format. For Conversion from PKCS12 (and other)-> PEM use openssl.
* Support for dumping the server certificate to a file

Files:
SSL.pm (complete file)
SSL.pm.patch (guess)
SSLeay.xs (complete file)
SSLeay.xs.patch (guess...)
net_ssl_test (test and demo script)
net_ssl_test.patch

All files are based on Joshua Chamas distibution file
Crypt-SSLeay-0.23.tar.gz

Installation:
1. Download Crypt::SSLeay 0.23 from cpan.org and deflate it
2. Unzip, Untar the patches (creates subdir patches)
3. Patch or replace SSLeay.xs in Crypt-SSLeay-0.23
   subdirectory (patch -cb  )
4. Patch or replace net_ssl_test
5. Install the package (perl Makefile.pl; make; make test; make install)
6. Patch or replace SSL.pm (e.g. be found in
/usr/local/lib/perl5/site_perl/aix/Net/SSL.pm)

USAGE:
for basic support use "net_ssl_test -h"

DISCLAIMER:
As usual NO WARRANTY FOR ANYTHING; USE AT YOUR OWN RISK

This code has been tested in proxy-mode only! Direct linkup should not be
affected but who knows

DEBUGGING:
I added (and commentet out) some print's in SSL.pm (method configure)
where the certificate and stuff is loaded.
If you want to know whether the cert is loaded properly comment them
in. They return 1 in case of success

OPENSSL:
This stuff was tested against openssl-0.9.6 only!

Contact:
please refer to my freemail account: [EMAIL PROTECTED]

Provided by ProGredy GmbH

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net
 Binary data

Re: Crypt::SSLeay

[Joshua Chamas]

> Marcus Carey wrote:
> 
> Can someone explain the following warning?
> 
> Client-SSL-Warning: Peer certificate not verified
> 
> ActivePerl 623
> Windows IIS 5.0
> Windows 2000 Server
> Crypt-SSLeay from Activestate repository
> 

Sorry for not getting back sooner, but its been a hard
week.  I'm the maintainer of Crypt::SSLeay, and I don't have
a good answer for you.  Its my guess that if 

  SSL_get_verify_result()

where called at some point, that cert verfication would be
established, and this warning would go away.  By not doing
so, I guess, you don't really know that you are talking 
to the true owner of that SSL domain, even though a 
secure connection has been established.

This seems to be an important feature, and if desired,
I could probably get this set up as a config option 
for Crypt::SSLeay's Net::SSL, and make sure it seems
to do the right thing when operating under perl's LWP.

--Josh
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Obj. : Crypt::SSLeay

[Frédéric Donnat]

 
Marcus Carey a écrit :

Can
someone explain the following warning? Client-SSL-Warning:
Peer certificate not verified ActivePerl
623Windows IIS 5.0Windows
2000 ServerCrypt-SSLeay
from Activestate repository Marcus

Hi !
This should be a warning due to the verification of the Server Certificate
Chain!
I mean that your clent receive a certificate chain and must verify
it in order to trust the server (peer).
So if there is an error appearing during this verification it throws
an error or a warning, it depends of the importance of the error !
You'll find more in the Netscape draft for SSL.
Bets Regards
Fred


 Signature cryptographique S/MIME

Re: HELP - Crypt-SSleay-0.22 Install on HPUX 11.00 64 bit arch

[Kees . Vonk]

I had the same problem on HP-UX 10.20, but when I recompiled openssl 
with CFLAGS='-fPIC' (or CFLAGS='+Z' if you are not using gcc) I did 
over come this problem. I have all kind of other problem (appearently 
to do with using gcc) which I am still asking people about (as I am 
not a C programmer), but this is one I did manage to solve. I can 
remember if I did "CFLAGS='+Z' ./configure" or if I had to change the 
makefile.

Kees Vonk




[EMAIL PROTECTED]
09/03/01 00:44
 

 To: [EMAIL PROTECTED] @ gateway
     cc: 
 Subject: HELP - Crypt-SSleay-0.22 Install on HPUX 11.00 64 bit arch

Greetings,

I read through the instructions for installing Crypt-SSleay-0.22 
which says
that the OpenSSL OR SSLeay module must be installed before compiling 
the
Crypt-SSleay-0.22 module.  I followed the instructions and 
successfully 
compiled
the 'openssl-0.9.6' module on my HP server.  However, I went ahead 
and tried to
compile the Crypt::SSLeay module and continue to get the following 
error.

# make
LD_RUN_PATH="/usr/local/ssl/lib" ld -o 
blib/arch/auto/Crypt/SSLeay/SSLea
y.sl  -b -L/usr/local/lib SSLeay.o-L/usr/local/ssl/lib -lssl 
-lcrypto
ld: DP relative code in file /usr/local/ssl/lib/libssl.a(s2_clnt.o) -
shared library must be position independent.  Use +z or +Z to 
recompile.
*** Error exit code 1

Stop.

Two Questions . . .

1)  Has anyone every successfully compiled this module on an HP 
server running
  HP-UX 11.00 (64 bit)?
2)  If so, is there any information on this regarding how to 
successfully 
compile it.
  What do I do with the information listed above and how do I get 
the 
compile to
  work.

Please let me know . . . I am running out of alternatives and about 
to 
conclude that
it cannot be compiled on an HP server.

Brian Thomas
Cisco Systems, Inc.  San Jose, CA.
__
OpenSSL Project 
http://www.openssl.orgUser Support Mailing List
[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



__

The views expressed in this email are not necessarily the views of 
Transco plc, and the company, its directors, officers or employees 
make no representation or accept any liability for its accuracy or 
completeness unless expressly stated to the contrary. 

This e-mail, and any attachments are strictly confidential and 
intended for the addressee(s) only. The content may also contain 
legal, professional or other privileged information. If you are not 
the intended recipient, could you please notify the sender 
immediately and then delete the e-mail and any attachments, you 
should not disclose, copy or take any action in reliance of this 
transmission.  Unless expressly stated to the contrary, no contracts 
may be concluded on behalf of Transco plc by means of e-mail 
communication.

You may report the matter by calling us on  +44 (0)1455 230999.

You should not copy, forward or otherwise disclose the contents of 
this e-mail or any of its attachments without express consent.

Please ensure you have adequate virus protection before you open or 
detach any documents from this transmission.  Transco plc does not 
accept any liability for viruses.

Transco plc is part of Lattice Group
Transco plc is registered in England: Company number: 2006000
Registered Office: 130 Jermyn Street, London, SW1Y 4UR
http://www.transco.uk.com
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: MARC: msg 'Crypt::SSLeay - session support?']

[Xeno Campanoli]

Xeno Campanoli wrote:
Sorry to sound dumb, but is it okay just to take the SSLeay.pm object
inside LWP and set the SessionID in it at some strategic point so that
the session is effectively preserved?  Seems like that would be straightforward. 
>From what I saw, there were a lot of Autoloaded C functions, one of which
must be the thing to use for that...if I knew the right syntax requirements.
Philip Stoev wrote:
The NET::SSLeay module uses persistent session IDs
and I have been using it
successfully in such situations. Please let me know if you can not
make it
work and I will give you a code sample.
Yeah, I just tried something that Andrew Leppard kindly suggested worked
for him, and it didn't change my behavior.  The problem is with a
handshake on a private proxy that I cannot give further information out
about, but I'm using LWP with SSLeay, and I go through the handshake sequence
and then try to access the internal web page only to be given the password
page again.  All feedback is appreciated.  I know it's hard to
give good information since I can't be clear about the entire context of
my situation.  Code sample would definitely be welcomed.  Protocol
enlightenment might also be part of what I need, but according to what
I saw on some other posts, the problem may be more towards the LWP side. 
To be clear though, part of the outstanding problem is that the sessionID
changes in the middle of the handshake, and that is apparently why I get
the password page again.  Also, it's not a server problem because
it works with Netscape.  It only fails with my Perl/LWP script doing
the handshake.
Sincerely, Xeno
 
Philip
- Original Message -
From: Xeno Campanoli
To: [EMAIL PROTECTED] ; [EMAIL PROTECTED]
Sent: Friday, March 09, 2001 1:29 AM
Subject: [Fwd: MARC: msg 'Crypt::SSLeay - session support?']
Say Andrew,
Did you ever get this problem figured out?  I seem to be having
a similar
situation.  I try to do
this negotiation which works just fine from netscape, but somehow,
though
for the first few steps
the session ID stays the same, at one point I get a new session Id
back to
LWP and the content is
the original password prompt page again.  Any feedback is appreciated.
One of the things I was wondering was whether I needed to somehow use
the
"proxy" method or some
proxy specific facility to make this go.  I really want to do
things step by
step, but if there's
a trick that makes it work for now, it would be better than nothing. 
I read
the two replies on the
group too.  Nothing helps so far.  Again, any response is
welcome.
Sincerely, Xeno
--
Xeno Campanoli (erstwhile Xeno Whitenack, and Rick Burgess)
Email:  [EMAIL PROTECTED] (Web pages: http://www.aa.net/~xeno)
"...That side was made for you and me..." - Woody Guthrie
__
OpenSSL Project  

http://www.openssl.org
User Support Mailing List   
[EMAIL PROTECTED]
Automated List Manager  
[EMAIL PROTECTED]

-- 
Xeno Campanoli (erstwhile Xeno Whitenack, and Rick Burgess)
Email:  [EMAIL PROTECTED] (Web pages:  http://www.aa.net/~xeno)

"...That side was made for you and me..." - Woody Guthrie
 

-- 
Xeno Campanoli (erstwhile Xeno Whitenack, and Rick Burgess)
Email:  [EMAIL PROTECTED] (Web pages:  http://www.aa.net/~xeno)

"...That side was made for you and me..." - Woody Guthrie