Re: 'req' fails

On Tue, Jul 18, 2000 at 06:03:40PM -0400, Bill Rebey wrote: When executing the command openssl req -new -x509 -days 3650 -key CAPrivateKey.pem -out CACert.pem It fails complaining that the PRNG isn't seeded. There is no '-rand' option for 'req' like there is for other stuff, and

Quick Dirty guide for OpenSSL

Hi all, I am new to this group. I hope there are many experts who are already done a lot in SSL. It would be of great help to me if anyone would provide me with a Quick Dirty for installing configuring OpenSSL+mod_ssl on Apache. Sample scripts examples would be of great help to me. Thanks

Re: Quick Dirty guide for OpenSSL

On Wed, Jul 19, 2000 at 01:43:43AM -0700, Premson P R wrote: Hi all, I am new to this group. I hope there are many experts who are already done a lot in SSL. It would be of great help to me if anyone would provide me with a Quick Dirty for installing configuring OpenSSL+mod_ssl on

ssl_set_connect_state

Hi, Could anyone help me with this function ? Some examples use it before ssl_connect whereas others do not. What is it used for ? And in which case is it needed ? thanks Francis DELHAYE __ OpenSSL Project

Re: NES/NSAPI problem (formerly no subject)

On Tue, Jul 18, 2000 at 11:28:44PM -0400, x wrote: That means nothing more to me that it does to you :) Try ERR_error_string(ERR_get_error(), NULL) instead. The message after SSL_connect fails is: [error:::lib(0) :func(0) :reason(0)] Did you think of SSL_load_error_strings() to

s_client and RENEGOTIATING

I'm using "OpenSSL s_client" in a program that sometimes pipe more than just a few lines through it (like, say, 50k). Quite often when I do that, s_client just prints RENEGOTIATING and then hangs. This is against a stunnel:ed service, if it matters. Piping just short commands (a line or

Problems auto-installing IE certificates with xenroll

I'm astonished the solution to this problem isn't all over the web, what with IE being the browser of around 80% of web users and client certificates being a fairly major part of what SSL is about, but from searching Google and this list, I can't find a solution... I can't get certificates

Re: NES/NSAPI problem (formerly no subject)

x wrote: That means nothing more to me that it does to you :) Try ERR_error_string(ERR_get_error(), NULL) instead. The message after SSL_connect fails is: [error:::lib(0) :func(0) :reason(0)] I think that some basic initialization has not been successful under NES/NSAPI.

Re: IE5 and CRL distribution points.

Darren Reed wrote: IE5 appears to insist on adding a number (01, etc) on the end of the Netscape CA Revocation Url and if not present, reports an error about not being able to verify the user because it can't get a CRL. This is correct behaviour. See:

Re: form signing and verification

On Wed, 19 July 2000, Yuji Shinozaki wrote: How are you creating foo.b64? What does it look like? Thanks The problem was with '\n' characters not taken care of in the signature file. Now both the following commands work properly. openssl base64 -d -in $valid \ | openssl pkcs7 -out

Re: form signing and verification

On Wed, 19 July 2000, Yuji Shinozaki wrote: How are you creating foo.b64? What does it look like? Thanks The problem was with '\n' characters not taken care of in the signature file. Now both the following commands work properly. openssl base64 -d -in $valid \ | openssl pkcs7 -out

can crypto.signText use md5?

Hi In crypto.signText documentation it is written that it hashes using SHA. Can it be made to use md5 for digital signature on a form data? Thanks Vivek ___ $1 million in prizes! 20 daily instant winners. AltaVista

Re: Attached files

Sorry for my false teachings about PGP, and thank you for appointing my errors. Well, about S/MIME message size, I've got more precise figures. I have created a e-mail message in MS Outlook Express and Netscape Messenger with a single binary attachment of 1026 KB (large enough for minimizing