Re: documentation on openssl.cnf options

1999-05-19 Thread Dr Stephen Henson
Michael wrote: > > I have searched high and low for some detailed documentation on the > contents and meaning of the various pieces in the openssl.cnf file. > > In the distribution withing ssleay.txt (req.1 section), there is > mention of a document "conf.doc" which doesn't seem to be around. >

Re: SSL_connect

1999-05-19 Thread Bodo Moeller
"Scheltema, R.A." <[EMAIL PROTECTED]>: >With the > examples given with the OpenSSL-distribution I've been able to make a (as of > yet) minimal server to which Netscape and IExplorer can connect and exchange > information. The problem

I've done something dumb?

1999-05-19 Thread Michael
apache 1.3.6 openssl 92b everything seems to work. If I connect with a self signed test cert, I get a dialog in the browser but when I get to the end it says "connection reset by peer". This occurs with all NS browsers, MSIE does a similar thing s_client tells me # openssl s_client -connect l

RE: Unsatisfied symbols umoddi3 and muldi3

1999-05-19 Thread Jon Parry-McCulloch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >I've just started trying to use the OpenSSL library, and I'm getting a link >error when trying to link to the ssl and crypto libraries. >/opt/aCC/lbin/ld: Unsatisfied symbols: > __umoddi3 (code) > __muldi3 (code) >I don't have the option of bu

RPM for RH6

1999-05-19 Thread GOMEZ Henri
Hi !!! Just uploaded latest RPMs for apache-mod_ssl and openssl 0.9.2. Built on a RH5.2 box but with patches to make them for on RH6.0. They must run on 5.2 and 6.0 systems. PS: Users of mod-php3, you also have to get imap-4.5-4 I will upload to incoming.redhat.com, since imap released by Redhat

Re: I've done something dumb?

1999-05-19 Thread Lutz Jaenicke
On Tue, May 18, 1999 at 05:45:52PM -0800, Michael wrote: > apache 1.3.6 openssl 92b > > everything seems to work. If I connect with a self signed test cert, > I get a dialog in the browser but when I get to the end it says > "connection reset by peer". This occurs with all NS browsers, > MSIE d

Re: want to patch mod_ssl for servlet API usage (+ssh/RH6 patch)

1999-05-19 Thread Tim
Tim wrote: > > > When you really want to patch this into mod_ssl you can insert it into > > ssl_hook_Auth() where similar things are already done for the faked Basic Auth > > facility. OTOH you can also write a stand-alone mod_foobar.c which creates > > such variables in it's own API auth hook.

Re: I've done something dumb?

1999-05-19 Thread Michael
Aahhh. never mind. Really was dumb. I unlinked apache -> apache-1.3.6 so gcache was not found on startup. The error is a result of the missing gcache. I is interesting that the server goes through the entire ssl certificate exchange with the client before bombing. Michael > apache 1.3.6 o

Re: documentation on openssl.cnf options

1999-05-19 Thread Michael
> > Can someone please point me at something a little more substantive. > > > > All the older documents are in ssleay.txt, some of the stuff in > there is alas pretty out of date and the references haven't been > fixed up yet. So 'conf.doc' is in fact in ssleay.txt. > > The new extension option

Need Help. errors in building openssl 0.9.2b.

1999-05-19 Thread Dinesh Somani
Hi I am trying to build openssl 0.92b for apache. SO I downloaded and built the openssl-0.9.2b package. The make went fine, BUT 'make test' failed as follows: ... openssl:Error: 'idea-ecb' is an invalid command. Help! I have also attached the complete output of ``make test''. Thanks Dinesh 39

Re: documentation on openssl.cnf options

1999-05-19 Thread Bodo Moeller
"Michael" <[EMAIL PROTECTED]>: > In > particular, the new x509_extensions are particularly troublesome > because they cause some clients to not function properly if > incorrectly included in certificates. I can't find any descri

Re: RPM for RH6

1999-05-19 Thread Harry Zink
> PS: Users of mod-php3, you also have to get imap-4.5-4 I will upload > to incoming.redhat.com, since imap released by Redhat didn't contains > libimap. Could you please upload to a more accessible location, since the redhat incoming location is almost always overloaded? Thanks, Harry

Re: OpenSSL-0.9.2b on Digital Unix-4.0e compile problems

1999-05-19 Thread Sylvain Robitaille
On Wed, 12 May 1999 15:27:17 -0400 (EDT), I wrote: > I'm trying to compile OpenSSL, with the Digital C compiler (alpha-cc), > but I'm running into troubles. (on DU 4.0d and 4.0e) As suggested by Ulf Möller, I obtained the latest development source and that seems to function as expected. (Of cou

Re: I've done something dumb?

1999-05-19 Thread Bodo Moeller
On Tue, May 18, 1999 at 05:45:52PM -0800, Michael wrote: > apache 1.3.6 openssl 92b > > everything seems to work. If I connect with a self signed test cert, > I get a dialog in the browser but when I get to the end it says > "connection reset by peer". This occurs with all NS browsers, > MSIE

argh :/ utter frustration.

1999-05-19 Thread Norman Aronsen
I went through all the trouble of looking up apache 1.3.6, and finding all the compatibility issues of frontpage and ssl, only to be told that he (my boss) does NOT want to upgrade. which brings me down in a bit of frustration - we have apache 1.2.4 (the version that was distributed with our bsd s

access violation when calling d2i_X509_fp()

1999-05-19 Thread Dave Clark
WinNT 4.0, OpenSSL 0.9.2b I'm getting an access violation at 0xC005 when I attempt to call d2i_X509_fp to read the contents of a DER-encoded cert into an X509 struct. I've traced it down to the C RTL fread() call in function file_read() in bss_file.c. All the parameters passed into fread()

MSIE and ssl-unclean-shutdown

1999-05-19 Thread Paul Rubin
I believe I'm encountering this problem and have been reading over some of the old messages. Question: some of the messages say that the fix involves setting both ssl-unclean-shutdown *and* nokeepalive for MSIE browsers, while some other messages seem to say it's ok to just use ssl-unclean-shutd

OpenSSL Bugs on Alpha (4.0x/cc)

1999-05-19 Thread Sergio Rabellino
Hi, I have some strange things on dec-alpha machine, with cc. The software i wrote on sun, using some EVP_PKEY and BIO/b64 routines, run correctly on solaris 2.x and crash without any errors on alpha( Segmentation fault reading a cert in PEM format - memory allocation ?). The same software ru

OpenSSL Installation Help Request

1999-05-19 Thread Paul Haskell, CON, EDS-D/SIDDOMS
OpenSSL Version:openssl-0.9.2b Operating System: IRIX 6.2 IP22 Hardware Platform: SGI Challenge S Compiler: cc, c89 - MIPS and MIPSpro C compiler Problem Description: I used ./Configure irix-cc to configure OpenSSL for this system. The use of make to build the l

RE: SSL_connect

1999-05-19 Thread Per Nilsson
This is a "feature" of OpenSSL 0.9.2b, you need to call SSL_set_connect_state before the SSL_connect. This is not needed in older and newer versions (I've asked the same question and was told it would be fixed on OpenSSL 0.9.3x) /Per Nilsson > -Original Message- > From: [EMAIL PROTECTED]

Re: documentation on openssl.cnf options

1999-05-19 Thread Dr Stephen Henson
Michael wrote: > > > Thanks for replying, I have all the above. I've even had requests for > what I've accumulated. However, a comprehensive description of the > config items and there proper useage is badly needed for some of us > openssl or ssleay to do more than simply generate csr's and keys

Re: access violation when calling d2i_X509_fp()

1999-05-19 Thread Patrik Carlsson
Please, give us some more information (like code)! --Patrik Dave Clark wrote: > WinNT 4.0, OpenSSL 0.9.2b > > I'm getting an access violation at 0xC005 when I attempt > to call d2i_X509_fp to read the contents of a DER-encoded cert > into an X509 struct. > > I've traced it down to the C RT

Re: Need Help. errors in building openssl 0.9.2b.

1999-05-19 Thread Bodo Moeller
On Wed, May 19, 1999 at 12:59:21PM -0700, Dinesh Somani wrote: > I am trying to build openssl 0.92b for apache. > SO I downloaded and built the openssl-0.9.2b package. > The make went fine, BUT 'make test' failed as follows: > ... > openssl:Error: 'idea-ecb' is an invalid command. You compiled t

Re: documentation on openssl.cnf options

1999-05-19 Thread Haskell, Paul
Attempting to access http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt from the Internet results in something this: Access Forbidden The webpage you requested is not available: 1.If you are within the University of Auckland: Log on to NetAccount. Make sure your a

Re: access violation when calling d2i_X509_fp()

1999-05-19 Thread Dr Stephen Henson
Dave Clark wrote: > > WinNT 4.0, OpenSSL 0.9.2b > > I'm getting an access violation at 0xC005 when I attempt > to call d2i_X509_fp to read the contents of a DER-encoded cert > into an X509 struct. > > I've traced it down to the C RTL fread() call in function > file_read() in bss_file.c. Al

Re: documentation on openssl.cnf options

1999-05-19 Thread Bodo Moeller
"Haskell, Paul" <[EMAIL PROTECTED]>: > Attempting to access > http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt from the > Internet results in something this: > Access Forbidden [...] I noticed this soon after having sent off my e-mail message with that URL ... I've alredy sent e-mail

RE: argh :/ utter frustration.

1999-05-19 Thread David B. Rees
On 19-May-99 Norman Aronsen wrote: > I went through all the trouble of looking up apache 1.3.6, and finding all > the compatibility issues of frontpage and ssl, only to be told that he (my > boss) does NOT want to upgrade. which brings me down in a bit of > frustration - we have apache 1.2.4 (the

Re: CA infrastructure program?

1999-05-19 Thread Michael Portz
David Guerrero wrote: > > Eugene Crosser wrote: > > > > I am considering creation of a CA for company internal purposes. > > "ca" program included in SSLeay/OpenSSL would be OK but it has > > limitation of 255 total issued certificates. And text database > > would be inconvenient for several tho

Sorry for the openssl-announce message

1999-05-19 Thread Ralf S. Engelschall
Sorry for the message which was sent out to some subscribers of openssl-announce today (it went out not to all, I've stopped processing). It was my fault in approving the contents (it _was_ OpenSSL specific), but overlooking the fact that the poster used openssl-annnounce instead of openssl-users

Connection Problem

1999-05-19 Thread Peter Southey
Hi I am supporting this site: www.thesciencefair.com it connects fine with IE4, but it give the "Netscape has encountered bad data from the server". The server is IIS 4.0. When I connect with openssl s_client -connect www.thesciencefair.com:443 it doesn't connect, but when connecting with openss

Re: MSIE and ssl-unclean-shutdown

1999-05-19 Thread Ralf S. Engelschall
In article <[EMAIL PROTECTED]> you wrote: > I believe I'm encountering this problem and have been reading over > some of the old messages. > > Question: some of the messages say that the fix involves setting > both ssl-unclean-shutdown *and* nokeepalive for MSIE browsers, > while some other mes