About "challenge password"

1999-08-16 Thread ywliu
Hi all, A quick question. When generating a CSR, I notice there is a question called " challenge password". What is it and what does it serve for ? BTW, can I safely leave all the two "extra" attributes blank ? Yen-Wei Liu __

Re: BN_print_fp() problem with OpenSSL 0.9.4?

1999-08-16 Thread Nicholas Brawn
On Mon, 16 Aug 1999, Dr Stephen Henson wrote: > Maybe 2 :-) > > I'd say dh->pub_key is NULL because you are just generating parameters > and not a public/private key pair. > > If you want keys as well then call DH_generate_key() on 'dh'. Thanks. That's what comes from cutting & pasting previou

Re: certs

1999-08-16 Thread Bodo Moeller
Joel T. Geiger <[EMAIL PROTECTED]>: > How can I specify to OpenSSL that I don't want to use any certificates? Is > it even possible to complete the client/server handshaking without having at > least a server-side certificate? It is possible using anonymous DH (see RFC 2246). You'll have to co

Re: Connecting to https web sites

1999-08-16 Thread nobody
Joshua Chamas <[EMAIL PROTECTED]> wrote: > Bodo Moeller wrote: > > openssl s_client -ssl2 -bugs -connect banking.wellsfargo.com:443 > > > > should work. Look in the s_client source to see what exactly this does > > (it sets all the bug workaround options). > > Hey, > > Its seems that with an

Re: openssl pkcs12 and Expect

1999-08-16 Thread Dr Stephen Henson
Arend van der Veen wrote: > > Hi, > > I am using Expect to automate certificate generation. The last step > involves exporting the certificate into pkc212 format. Everything works > great when I type the commands directly. However, when I execute the > command in Expect the output file has ze

certs

1999-08-16 Thread Joel T. Geiger
How can I specify to OpenSSL that I don't want to use any certificates? Is it even possible to complete the client/server handshaking without having at least a server-side certificate? I know that other packages allow this type of functionality, but OpenSSL does not seem to permit it. Am I way

[ANNOUNCE] MySSL update

1999-08-16 Thread Jan Tomasek
Hello, I want to let known that I release new version of MySSL. MySSL is OpenSource project which accessing OpenSSL libray to users of Borland Delphi. If anyone of list owner think, that I'm bordering list members, please write and I will stop this posting. Thanks for apprehension. -- I change

Re: BN_print_fp() problem with OpenSSL 0.9.4?

1999-08-16 Thread Dr Stephen Henson
Nicholas Brawn wrote: > > I've just tried out something under the latest openssl library, and it's > coredumping in BN_print() (after i call BN_print_fp). The actual code > snippet is here: > > void > dh_genparams() > { > DH *dh; > FILE *output; > > fprintf(stderr,"Gener

Re: please help a newbie

1999-08-16 Thread Leland V. Lammert
At 10:08 AM 8/16/99 -0400, you wrote: >Hello all. I am brand new to OpenSSL and I'm hoping that one of you can >point me towards some (current) sample code or another appropriate resource. >I am working on a project with a rapidly-approaching deadline, so I don't >have a lot of time to search thr

Re: https and POST functions using Net::SSLeay ???

1999-08-16 Thread Joshua Chamas
Luke Higgins wrote: > > Hello all, > > I just installed Net::SSLeay and OpenSSL-0.9.4 on my redhat 6.0 system and was > looking for an example of using Net::SSLeay to perform a POST request on a > https site that requires authentication. The example in the Net::SSLeay > distribution (examples/g

please help a newbie

1999-08-16 Thread Guatam . X . Dev
Check out the demo apps directory... ;> > Hello all. I am brand new to OpenSSL and I'm hoping that one of you can > point me towards some (current) sample code or another appropriate resource. > I am working on a project with a rapidly-approaching deadline, so I don't > have a lot of time to s

please help a newbie

1999-08-16 Thread Joel T. Geiger
Hello all. I am brand new to OpenSSL and I'm hoping that one of you can point me towards some (current) sample code or another appropriate resource. I am working on a project with a rapidly-approaching deadline, so I don't have a lot of time to search through the actual OpenSSL source trying to l

Re: How to Check Common Name in Server's Certificate

1999-08-16 Thread yos
Dear I found a function X509_NAME_get_text_by_NID(). I think it's OK. Thanks >I'm trying to make a simple https client. >This client application uses openssl-0.9.4 >on Sun SPARC Solaris (SunOS 5.5.1) machine. > >For checking server's common name,I'm trying >to implement as follows: > >

Re: problems with OpenSSL on HP-UX

1999-08-16 Thread Scott Dellinger
I apologize for posting this a second time. My mail client (or my brian, one or the other) was acting up, and it didn't appear that my original message had gone through. -- Scott Dellinger Systems Administrator, JMU Technical Services [EMAIL PROTECTED] ___

https and POST functions using Net::SSLeay ???

1999-08-16 Thread Luke Higgins
Hello all, I just installed Net::SSLeay and OpenSSL-0.9.4 on my redhat 6.0 system and was looking for an example of using Net::SSLeay to perform a POST request on a https site that requires authentication. The example in the Net::SSLeay distribution (examples/get_authenticated_page.pl) works fin

Re: ? Connect to https://banking.wellsfargo.com/

1999-08-16 Thread Bodo Moeller
Thomas Reinke <[EMAIL PROTECTED]>: >> Does that server ("Netscape-Commerce/1.12" last I checked) support >> anything but SSL 2?! > From www.e-softinc.com/probe/probe.html: > > Site being probed: https://banking.wellsfargo.com:443 > Web Server: Netscape-Enterprise/3.6 SP2 > Operating

BN_print_fp() problem with OpenSSL 0.9.4?

1999-08-16 Thread Nicholas Brawn
I've just tried out something under the latest openssl library, and it's coredumping in BN_print() (after i call BN_print_fp). The actual code snippet is here: void dh_genparams() { DH *dh; FILE *output; fprintf(stderr,"Generating new DH parameters, please be pati