Re: Old Certificates Unreadable?

1999-07-26 Thread Rod Farmer
Geee Drew, you would have thought by now you'd be able to hand secure server problems by yourself ;) Not that I can mind you ;) Rod . __ OpenSSL Project http://www.openssl.org User Support Maili

OutLook multiple recipients encryption??

1999-07-26 Thread NortonNg
Hi all, I am able to use openssl to encrypt/decrypt, sign/verfiy messages to/from SMIME format, but i wonder how to encrypt message that has multiple recipients to smime format. Does anyone know about that?? For an example, the message bel

Re: Passing user data to password callbacks

1999-07-26 Thread Dan Razzell
Damien Miller <[EMAIL PROTECTED]> wrote: > I want to add the facility to pass user data to password callback > functions. e.g. > > RSA *PEM_read_bio_RSAPrivateKey(BIO *bp, RSA **x, pem_password_cb *cb) > > becomes > > RSA *PEM_read_bio_RSAPrivateKey(BIO *bp, RSA **x, pem_password_cb *cb, char *u

Re: Passing user data to password callbacks

1999-07-26 Thread Dan Razzell
> What you propose would make libcrypto require libssl as well > ... > there are other ways to access the PEM routines apart from the SSL** > functions. You don't always have a SSL_CTX to relate to. Okay, makes sense to me. Then there is no coupling with SSL_CTX to exploit, and "void *" is good

Creating a certificate from an ARRAY*

1999-07-26 Thread Tom Schuring
Hello, I'm running into some problems when I try to re-create a certificate from a BYTE array. I use the d2i_X509_bio function to create the Certificate. When I then try to extract the public key out of the Certificate and I check the key with RSA_check_key it gives me a Access violation. I re-

Old Certificates Unreadable?

1999-07-26 Thread Andrew Heath
Dear All, I have just compiled and installed the latest openssl (OpenSSL 0.9.3a 29 May 1999) with Apache SSL (apache_1.3.6+ssl_1.35) After installing the program, I have tried to start the server, and it fails to read my old RSA secure key as per the error message below: [Tue Jul 27 12:37:59 1999

Re: SSL Proxy problems

1999-07-26 Thread bugs . bunny
> >> 3. Because stunnel is (as far as I can tell) a fork-model > >> application, I am not yet confident it will have the performance > >> necessary to support the volume of traffic we expect. > > > Stunnel uses threads instead of processes if possible. > > Belibe me, anyway, that thread overhead

Re: Passing user data to password callbacks

1999-07-26 Thread Damien Miller
On Mon, 26 Jul 1999, Dan Razzell wrote: > Damien Miller <[EMAIL PROTECTED]> wrote: > > > I want to add the facility to pass user data to password callback > > functions. e.g. NB the changes have already been added to the CVS repository. > It's good to see this question raised again! > > I ha

Self-signed cert vs. Navigator 4.06?

1999-07-26 Thread nobody
I'm trying to generate a simple self signed cert that Navigator will accept but it's not working. Navigator pops up a window that says "The security library has encountered an improperly formatted DER-encoded message." What am I missing? The cert generation and s_server's output: % openssl

Re: Bad Protocol Version Number

1999-07-26 Thread Bodo Moeller
Jim Peters <[EMAIL PROTECTED]>: > I'm using OpenSSL 0.9.2b / mod_ssl 2.2.7 / Apache 1.3.6 and trying to get > it up and running. Wrong mailing list (try [EMAIL PROTECTED]), obsolete library version (try 0.9.3a). > When I try to use a cert that was created using 0.9.0b > libs

Re: SSL Proxy problems

1999-07-26 Thread Bodo Moeller
"Michal Trojnara" <[EMAIL PROTECTED]>: >> 3. Because stunnel is (as far as I can tell) a fork-model >> application, I am not yet confident it will have the performance >> necessary to support the volume of traffic we expect. > Stunnel uses threads instead of processes if possible. > Belibe me, a

Re: Confirming Status of SSL & RSA

1999-07-26 Thread Holger Reif
Crispin Cowan schrieb: > > Holger Reif wrote: > > > The mailing list's opinion is right. If you want to confirm > > yourself just check the cipher suite offerings in your navigator > > and your MSIE. > > How do I do that? I checked all the cipher suite info I could in my Netscape > 4.61 browse

RE: SSL-C vs OpenSSL

1999-07-26 Thread Wade L. Scholine
We are using SSL-C to conform to US patent laws. It is based on SSLeay-0.9.0. I was able to develop my app with OpenSSL 0.9.2b and rebuild with SSL-C 1.0.0 just by changing the -I and -L macros in my makefile. > -Original Message- > From: Ray Hodel [mailto:[EMAIL PROTECTED]] > Sent: Frida

RE: How To Load User Client Certificate ?

1999-07-26 Thread Wiersema, Todd
I was just doing that. I found an example; http://www.camb.opengroup.org/RI/www/prism/wwwj/ But the link doesn't seem to work now. I used the following simplified version; #!/usr/local/bin/perl #print "Content-type: text/html\n\n"; require 5.003; use strict; use CGI; my $cert_dir = "/ssl