Certificate for IE (Insertion problem)

2000-05-04 Thread Olivier Reymann
Hi, I have a problem when I try to insert a user certificate (PKCS12 format) into IE. I can enter the passphrase before insertion. The passphrase is validated but during the insertion IE tells me that data in the certificate are invalid but with Netscape Communicator the same certificate could

Re: patent issues

2000-05-04 Thread Mark J Cox
> Which is about to expire in a few months, if I remember correctly :-) Then we get into the new MultiPrimes patent instead. For details: http://www.apacheweek.com/issues/00-04-21#rsa2000 Mark Mark J Cox, .. www.awe.com/mark Apache Software Foundation .

Re: crash on BIO_free call.

2000-05-04 Thread Richard Levitte - VMS Whacker
From: Tonu Samuel <[EMAIL PROTECTED]> tonu> ssl: SSL_new(0x81f4650) tonu> ssl: BIO_new_socket(8 ,0) tonu> ssl: SSL_set_bio(0x8201688, 0x8201fa0 ,0x8201fa0) [...] tonu> ssl: SSL_free(0x8201688) tonu> ssl: BIO_free(0x8201fa0) Don't do BIO_free() on BIO's that you have handed over to an SSL* (which

Structure missing

2000-05-04 Thread S.Balaji
Hi all, Where do you find the definition for ssl_ctx_st structure? It has been typedefed to SSL_CTX in ssl.h. But it's definition is missing. It would be really helpful if someone can mail me the file in which I can find it's definition. I have the latest OpenSSL-0.9.5a sources. Thanks i

Re: patent issues

2000-05-04 Thread Lutz Jaenicke
On Thu, May 04, 2000 at 10:39:05AM +0100, Mark J Cox wrote: > > Which is about to expire in a few months, if I remember correctly :-) > > Then we get into the new MultiPrimes patent instead. For details: > http://www.apacheweek.com/issues/00-04-21#rsa2000 Well, but then, who cares? The Multi

Re: crash on BIO_free call.

2000-05-04 Thread Steve Sampson
What's it do in 0.9.5 ?? - Original Message - > Short description is: I do what I want with Openssl > 0.9.3a then I try to free all resources but this causes core dump on > BIO_free() call. __ OpenSSL Project

Re: crash on BIO_free call.

2000-05-04 Thread Tonu Samuel
Richard Levitte - VMS Whacker wrote: > Don't do BIO_free() on BIO's that you have handed over to an SSL* > (which you obviously do with SSL_set_bio()), SSL_free() does that for > you. Thank you for reply. I have some more less important at now questions: - What is the right source for informati

CA utility question

2000-05-04 Thread Jure Zitnik
Does anybody know how do I create self signed certificate using the ca utility ??? I'm trying to set up the top-level authority and I was able to generate keys, certificate request, but the ca droppes out when I try to generate self-signed certificate, because it can't find the CA certificate spec

Re: openssl-0.9.5a Install Error: lrsaref

2000-05-04 Thread Brian J. Rohan
I found that if I installed by using the line ./config -prefix=/usr/local/ssl \ -L/../rsaref-2.0/local/ rsaref =fPIC I left out the `pwd` option, everything compiled perfectly!! Brian __ OpenSSL Project

Re: openssl-0.9.5a Install Error: lrsaref

2000-05-04 Thread Brian J. Rohan
I found that if I installed by using the line ./config -prefix=/usr/local/ssl \ -L/../rsaref-2.0/local/ rsaref =fPIC I left out the `pwd` option, everything compiled perfectly!! __ OpenSSL Project

openssl <-> iaik interop certificates

2000-05-04 Thread Cory Winter
Hi, I'm trying to get interoperability between OpenSSL and IAIK using PKCS8 encoded DSA certs and keys created with the Java toolkit. I understand that the OID used for OpenSSL DSA signed certificates is different then that used for Java IAIK certificates. This is the source of my problem when i

Without, RSA why doesnt it connect?

2000-05-04 Thread Brian Snyder
Hi all. When compiled without RSA, I can't seem to connect to servers. Arent they all capable of of using multiple algorithms, so shouldnt a server just negotiate down the protocol and not use RSA when my client connects? Is this possible (ive always thought it would be), does it take special

Re: crash on BIO_free call.

2000-05-04 Thread Richard Levitte - VMS Whacker
From: Tonu Samuel <[EMAIL PROTECTED]> Subject: Re: crash on BIO_free call. Date: Thu, 04 May 2000 14:58:13 +0300 Message-ID: <[EMAIL PROTECTED]> tonu> Richard Levitte - VMS Whacker wrote: tonu> tonu> > Don't do BIO_free() on BIO's that you have handed over to an SSL* tonu> > (which you obviously

Re: openssl <-> iaik interop certificates

2000-05-04 Thread Dr Stephen Henson
Cory Winter wrote: > > Hi, > > I'm trying to get interoperability between OpenSSL and IAIK using PKCS8 > encoded DSA certs and keys created with the Java toolkit. > > I understand that the OID used for OpenSSL DSA signed certificates is > different then that used for Java IAIK certificates. Thi

Re: FTP and SSL

2000-05-04 Thread Mark Phillips
At 06:07 PM 5-3-2000 -0400, you wrote: > > > > Has anyone gotten this to work? I have been trying for quite a > while, but > > to no avail > > > >Are you using an FTP server that supports the AUTH SSL or AUTH TLS method? >Does your FTP client support the AUTH SSL or AUTH TLS method?

Re: patent issues

2000-05-04 Thread EKR
Lutz Jaenicke <[EMAIL PROTECTED]> writes: > On Thu, May 04, 2000 at 10:39:05AM +0100, Mark J Cox wrote: > > > Which is about to expire in a few months, if I remember correctly :-) > > > > Then we get into the new MultiPrimes patent instead. For details: > > http://www.apacheweek.com/issues/00-0

RE: OpenSSL/IIS/no-rsa?

2000-05-04 Thread Wade L. Scholine
> -Original Message- > From: Daniel van der Zee [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, May 03, 2000 3:15 PM > To: [EMAIL PROTECTED] > Subject: OpenSSL/IIS/no-rsa? > > > Hi, > > I am trying to build some openssl based client code that connects to a > standard MS-IIS web server (en

Re: FTP and SSL

2000-05-04 Thread Jeffrey Altman
> At 06:07 PM 5-3-2000 -0400, you wrote: > > > > > > Has anyone gotten this to work? I have been trying for quite a > > while, but > > > to no avail > > > > > > >Are you using an FTP server that supports the AUTH SSL or AUTH TLS method? > >Does your FTP client support the AUTH SSL or AU

Re: BF_cbc_encrypt()

2000-05-04 Thread Houman Ghaemi
I suppose the value of ivec could be a random value, but because you are using a block cipher I am not sure about the size of the ivec. I have not personally used this function you can probably ask Dr. Hensen for help. Sorry I could help anymore.     Paul Khavkine wrote: So what is it supposed to

RE: Decrypting a key

2000-05-04 Thread Salz, Rich
>Is there anyway to determine what the PEM pass phrase is for >a given key? Make (educated) guesses and see if it works. If there were anything "faster" then what would be the point of using that to protect a private key? /r$ __

Re: Without, RSA why doesnt it connect?

2000-05-04 Thread EKR
Brian Snyder <[EMAIL PROTECTED]> writes: > Hi all. When compiled without RSA, I can't seem to connect to servers. > Arent they all capable of > of using multiple algorithms, so shouldnt a server just negotiate down the > protocol and not use RSA when my client connects? Is this possible (ive >

Re: FTP and SSL

2000-05-04 Thread Richard Levitte - VMS Whacker
From: Mark Phillips <[EMAIL PROTECTED]> markp> >Are you using an FTP server that supports the AUTH SSL or AUTH TLS method? markp> >Does your FTP client support the AUTH SSL or AUTH TLS method? markp> markp> markp> The FTP client (NetFinder - markp> http://www.ozemail.com.au/~pli/netfi