Re: what's this error?

2000-07-18 Thread Richard Levitte - VMS Whacker
From: Jie Gao [EMAIL PROTECTED] J.Gao [Tue Jul 18 10:16:57 2000] [error] OpenSSL: error:14094412::lib(20) :func(148) :reason(1042) J.Gao J.Gao How is error message interpreted? with openssl errstr: $ openssl errstr 14094412 error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad

Re: getting shared dynamic libraries

2000-07-18 Thread Phil Howard
Gerd Schering wrote: On Mon, 17 Jul 2000, you wrote: How can I get shared dynamic libraries (e.g. .so files) of libssl and libcrypto? I've tried "./Configure linux-elf" and that does not give me any more than the 2 .a files. do a "make linux-shared". This builds the libs in the

PKCS12 unpack error

2000-07-18 Thread Angus Lee
Hi, VC6 reported that there're error with the following line: if (!(asafes = M_PKCS12_unpack_authsafes(p12))) return 0; The error was: error C2664: 'ASN1_seq_unpack' : cannot convert parameter 4 from 'void (struct pkcs7_st *)' to 'void (__cdecl *)(void)' None of the functions with this name in

Memory leak, again

2000-07-18 Thread Berki Lukacs Tamas
Hi! I have just the same problem as Bill Rebey. I have an SSL server which verifies client certificates by setting SSL_CTX_set_verify to SSL_VERIFY_PEER|SSL_FAIL_IF_NO_PEER_CERT, and every time an SSL_accept succeeds, there is a memory leak of approximately 10k (!) I call OpenSSL functions in

Re: PKCS12 unpack error

2000-07-18 Thread Pablo J. Royo
Hi I had the same problem, and I didn't find how to solve it except #undefining that M_XXX macros in my source file,then #defining it correctly.After using them in my file, you can letf then unchanged again if you like. I´d like to know if there is a better (and elegant) way to do it. Here it

Re: Memory leak, again

2000-07-18 Thread Lutz Jaenicke
On Tue, Jul 18, 2000 at 12:09:24PM +0200, Berki Lukacs Tamas wrote: I have just the same problem as Bill Rebey. I have an SSL server which verifies client certificates by setting SSL_CTX_set_verify to SSL_VERIFY_PEER|SSL_FAIL_IF_NO_PEER_CERT, and every time an SSL_accept succeeds, there is a

compiler problems

2000-07-18 Thread Marco Friedrich
Hello! I'am a Newbie in openssl. I have problems with compile the last openssl-version. ./config rsaref --prefix=/usr/local --openssldir=/usr/local/openssl When i start make the compiler exit with the following message. Without the rsaref-option in the config-script the compiler runs without

Re: compiler problems

2000-07-18 Thread Richard Levitte - VMS Whacker
From: Marco Friedrich [EMAIL PROTECTED] mf ./config rsaref --prefix=/usr/local --openssldir=/usr/local/openssl mf mf When i start make the compiler exit with the following message. Without mf the rsaref-option in the config-script the compiler runs without any mf problems. Why the

form signing and verification

2000-07-18 Thread Vivek Dasgupta
Hi How to sign form data and verify at server? I have netscape 4.72 with PKCS#11 CRYPTO MODULES I have also tested javascript method crypto.signText at client side to sign form data. It displays communicator window to signing but gives internal error after pressing OK. On server side does

Re: form signing and verification

2000-07-18 Thread Andrey Angelov
Vivek Dasgupta wrote: I have netscape 4.72 with PKCS#11 CRYPTO MODULES I have also tested javascript method crypto.signText at client side to sign form data. It displays communicator window to signing but gives internal error after pressing OK. for me on Netscape 4.73 works OK. Check client

Need some help/advice - OpenSSL + NT + PWS 4.0

2000-07-18 Thread Pavel Tzekov
Hello there, Is it possible to implement custom SSL secured connection using the above environment ? What I mean is to override the default SSL implementation of PWS 4.0 with somekind of OpenSSL based server / IIS filter so when I connect to port 443 the listening app to negotiate SSL

SSL connection through proxy?

2000-07-18 Thread laurenz_brein
Is it possible to establish an SSL connection through a HTTP proxy with OpenSSL? If yes, how? Thanks, Laurenz Brein Telephon: ++43-1-21145/3256e-mail: [EMAIL PROTECTED] __ OpenSSL Project

Re: (no subject)

2000-07-18 Thread Arun Venkataraman
I believe that for SSL_connect() a return value of 0 also indicates an error. In such a case, you should delve deeper and figure out the exact text message of the error (as lutz suggested). You may see what you have been looking for. Arun. "The online world is a cool place to visit, but you

RE: Default SSL cipher string?

2000-07-18 Thread Brian Snyder
Sorry i should have mentioned, what about for sslv3, not tls? thanx, brian -Original Message- From: Rene G. Eberhard (keyon) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 18, 2000 3:32 PM To: [EMAIL PROTECTED] Subject: RE: Default SSL cipher string? Does the defualt

IE5 Not Accepting Certificates

2000-07-18 Thread Hubbard, David
Hi all, I'm rather new to openssl so please forgive me if this is a basic question. I've got an apache server running 1.3.12 with mod_ssl 2.6.5 and openssl 0.9.5a. I've made myself a CA and signed my own server certificate, so I've got a ssl.key/server.key and an ssl.crt/server.crt. I've got

Attached files

2000-07-18 Thread Richard Dybowski
I am completely new to SSL so please forgive the naivety of my question. I wish to set up an encryption system by which a colleague can encode a database and send the corresponding ciphertext to me as an attached e-mail file. After decoding the attachment and analyzing the database, I will

caught SIGTERM, shutting down

2000-07-18 Thread Matthew Chapman
I have installed Apache 1.3.12 / mod_perl 1.22 / mod_ssl 2.6.5 Every time I start httpd via /usr/local/apache/bin/apachectl startssl it gives the following error message in error.log [Tue Jul 18 15:11:43 2000] [notice] caught SIGTERM, shutting down [Tue Jul 18 15:11:54 2000] [notice]

Re: Signing AND encrypting a message with smime

2000-07-18 Thread Dr Stephen Henson
Alexander Skwar wrote: But how do I sign *AND* encrypt? I tried this: openssl smime -sign -signer client-cert.pem -encrypt -inkey client-cert.pem\ -to [EMAIL PROTECTED] -from [EMAIL PROTECTED] -in InFile -out OutFile That wont work, it will just encrypt with the way the smime command

NetBSD make test

2000-07-18 Thread Igor Pruchanskiy
Hello, i am having a really weird problem. I don't seem to be able to run make test. Any help would be greatly appreciated. First i ran $make test and go this Doing certs Segmentation fault - core dumped ICE-CA.pem does not

Re: caught SIGTERM, shutting down

2000-07-18 Thread Mads Toftum
On Tue, Jul 18, 2000 at 04:18:51PM -0500, Matthew Chapman wrote: I have installed Apache 1.3.12 / mod_perl 1.22 / mod_ssl 2.6.5 You should be asking this on the mod_ssl list instead. Every time I start httpd via /usr/local/apache/bin/apachectl startssl it gives the following error

(no subject)

2000-07-18 Thread Paul Faccenda
SSL_connect is returning 0 - the error code is 2, "system lib" I believe that for SSL_connect() a return value of 0 also indicates an error. In such a case, you should delve deeper and figure out the exact text message of the error (as lutz suggested). You may see what you have been

Re: (no subject)

2000-07-18 Thread Arun Venkataraman
That means nothing more to me that it does to you :) Try ERR_error_string(ERR_get_error(), NULL) instead. Arun. "The online world is a cool place to visit, but you really don't want to live there." This message is for the named

'req' fails

2000-07-18 Thread Bill Rebey
When executing the command openssl req -new -x509 -days 3650 -key CAPrivateKey.pem -out CACert.pem It fails complaining that the PRNG isn't seeded. There is no '-rand' option for 'req' like there is for other stuff, and I can't come up with a way to run two command simultaneously so

Re: Signing AND encrypting a message with smime

2000-07-18 Thread Alexander Skwar
On Tue, Jul 18, 2000 at 10:26:24PM +0100, Dr Stephen Henson wrote: That wont work, it will just encrypt with the way the smime command currently works. It should really throw an error message. Thanks, figured that out myself :-) And yes, it really should throw an error message. This is

Re: 'req' fails

2000-07-18 Thread Lewis McCarthy
Bill Rebey writes: There is no '-rand' option for 'req' like there is for other stuff, Hmm, the man page at http://www.opentls.org/docs/apps/req.html documents a "-rand" option for "openssl req". -Lewis __ OpenSSL Project

Re: 'req' fails

2000-07-18 Thread Richard Levitte - VMS Whacker
From: Lewis McCarthy [EMAIL PROTECTED] lewis.mccarthy Bill Rebey writes: lewis.mccarthy There is no '-rand' option for 'req' like there is for other stuff, lewis.mccarthy lewis.mccarthy Hmm, the man page at http://www.opentls.org/docs/apps/req.html lewis.mccarthy documents a "-rand" option

RE: Need help... Fatal error when running nmake -f ms\ntdll.mak

2000-07-18 Thread Harry Ng
Thanks, DR. Steve. I renamed the ML.EXE AND ML.ERR to ml.exe and ml.err and it's working fine. I am trying to setup Apache SSL and I am running into another problem. I tried to run the "fixpatch" or "patch -p1 SSLpatch" by following the readme.ssl, but I can't run any patch files, since the

RE: Need help... Fatal error when running nmake -f ms\ntdll.mak

2000-07-18 Thread Harry Ng
Thanks Mark, I renamed the ML.EXE AND ML.ERR to ml.exe and ml.err and it's working fine. I am trying to setup Apache SSL and I am running into another problem. I tried to run the "fixpatch" or "patch -p1 SSLpatch" by following the readme.ssl, but I can't run any patch files, since the system

NES/NSAPI problem (formerly no subject)

2000-07-18 Thread x
That means nothing more to me that it does to you :) Try ERR_error_string(ERR_get_error(), NULL) instead. The message after SSL_connect fails is: [error:::lib(0) :func(0) :reason(0)] I think that some basic initialization has not been successful under NES/NSAPI. tried seeding the