wrong defines SN_xyz

2002-04-02 Thread Michael Bell
Hi, after I found the wrong definitions of SN_surname and SN_serialNumber I looked around and find the next problems in crypto/objects/ : SN_titletitle (now T) SN_description description (now D) SN_givenNamegn

Re: EVP_CipherInit() doesn't check for weak DES keys (0.9.6)

2002-04-02 Thread Ben Laurie
James Yonan wrote: Given that the EVP level is supposed to offer callers a cipher-independent interface, where the caller doesn't necessarily know the idiosyncracies of the underlying cipher, wouldn't it make sense for evp/e_des3.c to call des_set_key_checked() instead of

create cert non interactively

2002-04-02 Thread Sarath Chandra M
Title: Message Hi, Is there way to create certificates using openssl in a noninteractive mode ? All the required values (common name, email, organization, ou etc) will be captured using a unix shell script and passed to openssl commands. Is it possible. Any help will be highly appreciated.

Re: wrong defines SN_xyz

2002-04-02 Thread Richard Levitte - VMS Whacker
From: Lutz Jaenicke [EMAIL PROTECTED] Lutz.Jaenicke On Tue, Apr 02, 2002 at 09:25:00AM +0200, Michael Bell wrote: Lutz.Jaenicke after I found the wrong definitions of SN_surname and SN_serialNumber I Lutz.Jaenicke looked around and find the next problems in crypto/objects/ : Lutz.Jaenicke

Re: EVP_CipherInit() doesn't check for weak DES keys (0.9.6)

2002-04-02 Thread James Yonan
James Yonan wrote: Given that the EVP level is supposed to offer callers a cipher-independent interface, where the caller doesn't necessarily know the idiosyncracies of the underlying cipher, wouldn't it make sense for evp/e_des3.c to call des_set_key_checked() instead of

[PATCH] kssl_ctx_setprinc

2002-04-02 Thread D. Russell
[resend, this time cc'd to [EMAIL PROTECTED]] All, The current kssl_ctx_setprinc does not handle instances. I may have a principal of: [EMAIL PROTECTED], [EMAIL PROTECTED] or (technically) [EMAIL PROTECTED]. The current implementation will only place [EMAIL PROTECTED] in

Re: [PATCH] kssl_ctx_setprinc

2002-04-02 Thread Richard Levitte - VMS Whacker
From: D. Russell [EMAIL PROTECTED] russelld [resend, this time cc'd to [EMAIL PROTECTED]] russelld All, russelld russelld The current kssl_ctx_setprinc does not handle instances. I may have russelld a principal of: [EMAIL PROTECTED], [EMAIL PROTECTED] or russelld (technically) [EMAIL

OpenSSL/Java JSSE Handshake problem...

2002-04-02 Thread Kevin Regan
I've run into the handshake problem with OpenSSL and Java JSSE. If I change the method used to create the SSL context from TLSv1_server_method to SSLv23_server_method, the problem is fixed. However, I'd like to know what the problem actually is and if this incompatibility will ever be fixed?

Re: OpenSSL/Java JSSE Handshake problem...

2002-04-02 Thread Lutz Jaenicke
On Tue, Apr 02, 2002 at 02:34:00PM -0600, Kevin Regan wrote: I've run into the handshake problem with OpenSSL and Java JSSE. If I change the method used to create the SSL context from TLSv1_server_method to SSLv23_server_method, the problem is fixed. However, I'd like to know what the