Changes to openssl genrsa

2001-10-11 Thread Dave Barter
I hope I have the right list for this, my apologies if I don't. I would like to modify the openssl genrsa program to quietly generate keys, ie. Not print the '.' and '+' characters to STDOUT when generation occurs. Basically I would like to add the flag -quiet to the genrsa command line. I

RE: SSL3_GET_RECORD:bad mac decode on SSLv23

2001-10-11 Thread Amnon Cohen
Hi Oscar Thanks for the reply! How do browsers manage to connect to these defective servers? Is there any way we can make OpenSSL emulate browser behaviour? Thanks Amnon -Original Message- From: Oscar Jacobsson [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 10, 2001 7:42

How can I pass argument????

2001-10-11 Thread Blue
dear; Itest openssl for CA by write script exec command manage CA by perl ('exec'). But I have problem when I use 'openssl -req -new ' .Because when I key ' openssl req -new -key rsa.key -out cert.cer -passin pass:password ' next have promt for input (ex. country,Email,...) Really I

Re: Changes to openssl genrsa

2001-10-11 Thread Götz Babin-Ebell
Dave Barter wrote: I hope I have the right list for this, my apologies if I don't. I would like to modify the openssl genrsa program to quietly generate keys, ie. Not print the '.' and '+' characters to STDOUT when generation occurs. Basically I would like to add the flag -quiet to the

Re: SSL3_GET_RECORD:bad mac decode on SSLv23

2001-10-11 Thread Richard Levitte - VMS Whacker
From: Amnon Cohen [EMAIL PROTECTED] There are very few (if at all?) browsers that do TLS1 by default, as far as I remember. This can be shown with s_client this way (Oscar, s_client does SSLv23 by default, just so you know :-)): openssl s_client -connect commerce.www.ibm.com:443 -no_tls1

Re: Changes to openssl genrsa

2001-10-11 Thread Richard Levitte - VMS Whacker
From: Dave Barter [EMAIL PROTECTED] dave I would like to modify the openssl genrsa program to quietly generate dave keys, ie. Not print the '.' and '+' characters to STDOUT when generation dave occurs. Basically I would like to add the flag -quiet to the genrsa dave command line. A very quick

Please help me.

2001-10-11 Thread Shai
Can u help me? I have this error message: 81431:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded:md_rand.c:492:You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html What libraries do i need to include to overcome this problem?

Re: making use of an SSL handshake in a new way

2001-10-11 Thread Bodo Moeller
On Wed, Oct 10, 2001 at 01:29:54PM -0400, Olga Kornievskaia wrote: [...] USENIX web site: http://www.usenix.org/events/sec01). We modified the OpenSSL handshake code to get a transcript of an SSL handshake (no protocol modification were done) the reasons are stated in the paper.

Re: Please help me.

2001-10-11 Thread Erwann ABALEA
On Sat, 13 Oct 2001, Shai wrote: Can u help me? I have this error message: 81431:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded:md_rand.c:492:You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html What libraries do i need to include to overcome

Re: SSL3_GET_RECORD:bad mac decode on SSLv23

2001-10-11 Thread Oscar Jacobsson
Hi Amnon! IIRC, enabling TLSv1 in IE5 would result in not being able to connect to such a buggy server, which I assume would be for the same reason as with s_client. IE6 however seems to be able to connect, which I think (although this is only me guessing here) is due to it detecting the bad

Wish I could help but no time : (

2001-10-11 Thread Roman Hunt
Dunno what you guys think of this but . . . . roman:70$ ls roman:71$ touch test openssl base64 test Memory fault (core dumped) roman:72$ ls openssl.coretest roman:73$ Have a good day, roman === |Some people use their computers

Iper1 per l'e-commerce

2001-10-11 Thread blumoda
SpettabileAzienda, Vi presentiamo il nuovo software professionale per l'e-commerce Iper1 è la soluzione migliore per aprire un negozio online, è un programma

Any ideas?

2001-10-11 Thread John Cebasek
Hi All: So I'm here trying to get 0.9.6b working on a Mac, and after much work, I've got this trace being written. HTTP Generating HTTP/1.x Request Headers HTTP Generating General Headers Buffer.. Flushing 0x0e77b430 HTSSL New... Created new SSL Object 0x0e788690

Re: Wish I could help but no time : (

2001-10-11 Thread Richard Levitte - VMS Whacker
From: Roman Hunt [EMAIL PROTECTED] natlprog roman:71$ touch test openssl base64 test Actually, you probably could have used /dev/null instead of test :-). natlprog Memory fault (core dumped) Definitely a bug. I just fixed it. It will be present in the next snapshot and the next releases.

Re: making use of an SSL handshake in a new way

2001-10-11 Thread Olga Kornievskaia
On Thu, 11 Oct 2001, Bodo Moeller wrote: I contemplate adding to OpenSSL (0.9.7 -- 0.9.6c is for bugfixes only) a new callback hook that can be used for handling this. The application-defined callback would be called for every message received or sent. Then the application itself can

Re: Changes to openssl genrsa

2001-10-11 Thread Dave Barter
On Thursday 11 October 2001 11:52, you wrote: From: Dave Barter [EMAIL PROTECTED] dave I would like to modify the openssl genrsa program to quietly generate dave keys, ie. Not print the '.' and '+' characters to STDOUT when generation dave occurs. Basically I would like to add the flag

Re: making use of an SSL handshake in a new way

2001-10-11 Thread Bodo Moeller
On Thu, Oct 11, 2001 at 04:54:52PM -0400, Olga Kornievskaia wrote: On Thu, 11 Oct 2001, Bodo Moeller wrote: I contemplate adding to OpenSSL (0.9.7 -- 0.9.6c is for bugfixes only) a new callback hook that can be used for handling this. The application-defined callback would be called for

Re: How can I pass argument????

2001-10-11 Thread Dr S N Henson
Blue wrote: Question?? 1 How can I pass argument (ex. country,Email,...) in one instruction 2 I try find Example but few.Please suggest url fot Ex. You need to create a file with the field information in it and pass that using the -config command line option. Check out the

Re: Please help me.

2001-10-11 Thread Richard Levitte - VMS Whacker
From: Shai [EMAIL PROTECTED] shai_34 Can u help me? shai_34 I have this error message: shai_34 81431:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded:md_rand.c:492:You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html shai_34 What libraries do i need

Orders of PKCS7 certificate chain

2001-10-11 Thread Wang, Kate
Hi, everyone, Here is another novice question. Is there any easy way to find out the subject certificate out of a PKCS7 certificate included the whole chain? Or more specifically, if I use openssl PKCS7 command to convert a PKCS7 certificate into PEM format, or openssl pkcs12 to convert pkcs12

Re: Orders of PKCS7 certificate chain

2001-10-11 Thread Michael Sierchio
Wang, Kate wrote: Hi, everyone, Here is another novice question. Is there any easy way to find out the subject certificate out of a PKCS7 certificate included the whole chain? Or more specifically, if I use openssl PKCS7 command to convert a PKCS7 certificate into PEM format, or

Re: Differences between TLS and SSL

2001-10-11 Thread Michael Sierchio
Joaquim Quinteiro Uchoa wrote: I'm needing, urgently, to know the differences between TLS and SSL protocols... I don't need big details, only one or two paragraphs about the difference. SSLv3 was devised by Paul Kocher with Phil Karlton and Alan Frier for Netscape. TLS is an IETF