Signing CRL with offline CA (was [Fwd: OCSP and CSL]).

2000-02-14 Thread Marc Jadoul
"Salz, Rich" wrote: can CRLs be signed by a certificate that is not the CA certificate No. Ok, but may be there is a solution (that i never tried and it might be uncompatible with lot of existing software.) : If i understand well, you do not want to have your CA keys online for security

Re: Please add UTF8STRING to PRINTABLE

2000-02-14 Thread Jean-Marc Desperrier
Michael Sierchio wrote: "Rene G. Eberhard (keyon)" wrote: ...Unicode for example is suppored by Universal and UTF8. I also meant to point out that UTF-8 supports ASCII, but not EBCDIC, for example (not that I imagine that anyone would want to use the latter...;-) Well, we're getting

Re: Compilation of latest SNAPSHOT on HP-UX

2000-02-14 Thread Lutz Jaenicke
On Sun, Feb 13, 2000 at 06:27:05PM +0100, Andy Polyakov wrote: As for my personal preferences: I would prefer to define this -DMD32_XARRAY in "Configure" so that the mechanism is visible and documented. Makes sense... Grab snapshot later today and check it out. BTW, what are you used to,

Re: PERL Module Problem...

2000-02-14 Thread Jean-Marc Desperrier
Peter Gutmann wrote: Dr Stephen Henson [EMAIL PROTECTED] writes: Is there any circumstances where the environment isn't safe? I believe extra privs are normally needed to read another users processes environment. Under DEC Unixen you can read anyone's environment without any extra privs

Re: Make failure with OpenSSL

2000-02-14 Thread Andy Polyakov
Using OpenSSL-0.9.4 on Solaris 2.6 with latests recommended patches And gcc 2.95.2 binutils but when I run make I get the following error making all in crypto... ( echo "#ifndef MK1MF_BUILD"; \ echo " /* auto-generated by crypto/Makefile.ssl for crypto/cversion.c */"; \

BN_mont test

2000-02-14 Thread Andy Polyakov
Is it just me or does test_mont ever complete? I mean bits assignment doesn't make any sense to me: BN_rand(a,100,0,0); /**/ BN_rand(b,100,0,0); /**/ for (i=0; inum2; i++) { int bits = (100%BN_BITS2+1)*BN_BITS2*i*BN_BITS2;

Re: Problems With Open SSL 9.3a Make Test

2000-02-14 Thread Andy Polyakov
1) Environment: HP-UX svwww012 B.10.20 A 9000/735 2008535444 two-user license gcc version 2.7.2.3 2) Downloaded Package: openssl-0_9_3a_tar This version chosen for max compatibilty with Net_SSLeay.pm-1.05 (which is my ultimate desire to get operational) 3) Output of openssl version

Re: openssl-0.9.4 - bug?

2000-02-14 Thread Andy Polyakov
running redhat linux 6.1 tried: openssl-0.9.4 --- [root@x openssl-0.9.4]# ./config -t Operating system: i686-whatever-linux2 Configuring for linux-elf /usr/bin/perl ./Configure linux-elf [root@x openssl-0.9.4]# speed.o: In function `speed_main': speed.o(.text+0xbfe):

RE: PERL Module Problem...

2000-02-14 Thread Salz, Rich
The program should overwrites it's sensible environment variables as soon as it has read the content, therefore strongly reducing the problem. Assuming the ones that "ps" shows are in userspace not kernel space. Not always a safe assumption.

Re: Make failure with OpenSSL

2000-02-14 Thread Andy Polyakov
Everyman wrote: Using OpenSSL-0.9.4 on Solaris 2.6 with latests recommended patches And gcc 2.95.2 binutils GNU Bison GNU Flex tar 1.13 GNU make perl 5.00404 GNU automake GNU autoconf GNU libtool I can compile OpenSSL using sh config rsaref but when I run make I get the

Re: Make failure with OpenSSL

2000-02-14 Thread Andy Polyakov
Using OpenSSL-0.9.4 on Solaris 2.6 with latests recommended patches And gcc 2.95.2 binutils ... gcc -I. -I../include -DTHREADS -D_REENTRANT -DNO_ASM -DRSAref -O3 -fomit-frame-pointer -m486 -Wall -DL_ENDIAN -c cryptlib.c /usr/local/i386-pc-solaris2.6/bin/as: option `-s' is ambiguous