Re: Previous question was dumb, here's a smarter one...

1999-07-02 Thread Dr Stephen Henson
Juan Carlos Castro y Castro wrote: > > How do I generate a valid RSA structure from the n (modulus) and the e > (10001h most often, I see) alone? > You can generate a valid public key from both of those, just do an: RSA *key; key = RSA_new(); Then fill in the key->e and key->n BIGNUM members

Re: Netscape Password Protected Certs Fail with Apache

1999-07-02 Thread Bodo Moeller
On Thu, Jul 01, 1999 at 05:10:09PM +0200, Lutz Jaenicke wrote: > On Thu, Jul 01, 1999 at 10:08:11AM -0400, Howard Uman wrote: >> If I protect my certificates in Netscape with a password, when I >> enter the password, the request hangs until it times out (this >> actually doesn't happen every time

Re: SSL_OP_NETSCAPE_CA_DN_BUG

1999-07-02 Thread Bodo Moeller
On Thu, Jul 01, 1999 at 05:47:42PM +0200, Pierre De Boeck wrote: > I have noticed that the SSL_OP_NETSCAPE_CA_DN_BUG option > enables to modify slightly the DER-encoding of the CA's DNs > that a TLS server sends to a client during the > SSL3_ST_SW_CERT_REQ_A/B phase of the handshake. > > I supp

Re: Netscape Password Protected Certs Fail with Apache

1999-07-02 Thread Lutz Jaenicke
On Fri, Jul 02, 1999 at 01:21:51PM +0200, Bodo Moeller wrote: > On Thu, Jul 01, 1999 at 05:10:09PM +0200, Lutz Jaenicke wrote: > > On Thu, Jul 01, 1999 at 10:08:11AM -0400, Howard Uman wrote: > > >> If I protect my certificates in Netscape with a password, when I > >> enter the password, the requ

RE: Netscape Password Protected Certs Fail with Apache

1999-07-02 Thread Howard Uman
I don't know. Haven't tried a unix netscape. Currently running with Windows Netscape client (3.61 or 3.5x) against Apache running on Solaris. -H ~ Howard Uman - [EMAIL PROTECTED] Netegrity, Inc., 245 Winter St., Waltham, MA 02451 TEL: (781) 890-1700 x225 FAX: (781) 487-7791

Re: Interesting Handshake behaviour

1999-07-02 Thread Sarah Bateman
Thanks Bodo and Guatam (name or part of an ID, I'm not sure!) for all your advice, time and effort. I've just tried the non-blocking handshake with a later version of openssl (0.9.2.b) and everything works beautifully. I believe that the non-blocking accept in 0.8.1 is indeeed broken (as suggeste

Re: CRLDistributionPoints

1999-07-02 Thread Sergio Rabellino
ssl wrote: > > Sure it can, like my openssl.cnf : > > crlDistributionPoints=URI:http://sgiinda.csc.cuhk.edu.hk/1.crl > > need not be https because the crl is signed by CA. > And pretty good checked by IE and outlook express, if you > click the check box "Check for server certificate revocation"

Re: openssl and WebSite

1999-07-02 Thread Charles Arsenault
Thanks. Is there a way to force apache/modssl to use ssl2 or ssl3 in a reverse proxy situation? Charles. OpenSSL> s_client -connect website.ora.com:443 -ssl2 CONNECTED(0003) depth=0 /C=US/ST=California/L=Sebastopol/O=O'Reilly and Associates/OU=Software/CN=website.ora.com verify error:num=

Problems building openssl 0.9.3a on Solaris 2.5.1

1999-07-02 Thread Sarah Bateman
Have downloaded openssl 0.9.3a and attempted to build it using: ./config --prefix=/bagpuss/sarahg/openssl --openssldir=/bagpuss/sarahg/openssl/0_9_3a no-asm This worked ok. make failed with the following: /tmp/openssl/openssl-0.9.3a > make making all in crypto... making all in crypto/md2... ma

Re: Netscape Password Protected Certs Fail with Apache

1999-07-02 Thread Michael Stroeder
Howard Uman wrote: > > I don't know. Haven't tried a unix netscape. Currently running with > Windows Netscape client (3.61 or 3.5x) against Apache running on Solaris. IMHO Netscape 3 cannot handle RSA keys above 1024 Bit. Maybe your CA has such a RSA key? Ciao, Michael. __

How to Install VeriSign certificate withe OpenSSL

1999-07-02 Thread zli
Hello: I am using Apache server with Openssl, I just purchased VeriSign digital ID. When I tried to install the digital ID, it asked me to run "getca" command, but I don't think Openssl supports it. Could anybody who has the experience share with me for the information? Your help is greatly app

RE: rsa_oaep_test

1999-07-02 Thread Hemant Jain
Here is a test data that does not work with rsa_oaep_test.c Can someone tell me what could be wrong? unsigned char n[]="\ \xe6\x26\x21\x09\x23\xb9\x84\x1f\x8e\x16\x0e\x81\x04\x34\xcc\xcb\ \x95\x07\x25\x79\x37\x2e\x71\xd4\xf7\x49\x0a\x55\xc4\xd2\xc7\x03\ \x76\x26\xc9\x38\xaa\x36\x3f\x11\x2b\xd5\x0

Compile problems on versions greater than 0.9.2b

1999-07-02 Thread Dave
Hi all, It seems whatever has changed from version 0.9.2b to the current releases of OpenSSL is affecting compilation on a BSDI 4.01 platform. I have tried it on multiple BSDI 4.01 boxes, to no avail. To me it looks simply like a library is missing although I cannot figure out which one. Here is

Re: CRLDistributionPoints

1999-07-02 Thread ssl
Don't know whether it helps : comment out the line : crl_extensions = crl_ext and the [crl_ext] section. On Fri, 2 Jul 1999, Sergio Rabellino wrote: > ssl wrote: > > > > Sure it can, like my openssl.cnf : > > > > crlDistributionPoints=URI:http://sgiinda.csc.cuhk.edu.hk/1.crl > > > > need not