Re: Compile errors

2000-08-11 Thread Jon-Pierre Gentil
I'd say that you've got a grunged file, because line 216 should look like this: [starting with line 211-220, for clarity] } else if (!strcmp(*args,"-passin")) { if (args[1]) { args++; passargin = *args;

RE: Compile errors

2000-08-11 Thread Barnes, Michael L.
Make sure that your download was not corrupt or something, because there is no occurance of "mf" anywhere in the file. Mike > -Original Message- > From: Ashley Horn [mailto:[EMAIL PROTECTED]] > Sent: Friday, August 11, 2000 1:05 PM > To: [EMAIL PROTECTED] > Subject: Compile errors > >

Compile errors

2000-08-11 Thread Ashley Horn
I am trying to install openssl on Linux Slackware 7.0 and I get the following errors when running make: pkcs12.c: In function `pkcs12_main': pkcs12.c:216: warning: implicit declaration of function `mf' pkcs12.c:216: parse error before `{' pkcs12.c:216: parse error before `__result' make[1]: *** [

Re: Cert objects?

2000-08-11 Thread Rodrigo Coronado
Dr Henson told me this a few weeks ago: "The actual values which occur in req_distinguished names are not arbitrary ASCII strings, they are the names of ASN1 objects defined in crypto/objects/objects.h not all of these are relevant to DNs though." Look at that file and you'll figure it out. Pick

Re: Problem with root cert on web page.

2000-08-11 Thread Rodrigo Coronado
Yes you can. I did in IE 5.9 it and it worked just fine. This is my Perl code: #!/usr/bin/perl require 5.003; use strict; use CGI; my $cert_dir = "/usr/local/ssl/private"; my $cert_file = "CAcert.pem"; my $query = new CGI; my $tipo = $query->param('FORMAT'); if ($tipo eq 'DER') { $cert_file = "CA

Re: openssl enc question

2000-08-11 Thread Eric Murray
On Fri, Aug 11, 2000 at 10:19:05AM -0600, dreamwvr wrote: > hi, >have a https server that is doing RSA as well as ok encyption but wanted > to change it so it could offer the strongest encryption available using > openssl on the pervasive browsers or at least support that if the browser > doe

Re: transport layer question

2000-08-11 Thread Richard Levitte - VMS Whacker
From: Albert Serra <[EMAIL PROTECTED]> Serra> - Is it possible to use OpenSSL on top of RTSP, or UDP? as Serra> there has been contradictory answers. It's possible if you add the reliability yourself. UDP is in itself unreliable, and would therefore in itself not be suitable. Serra> - If it

RE: transport layer question

2000-08-11 Thread Jon Sjoberg
Albert,   SSL can run over ANY reliable transport layer (IP or not).   Making UDP reliable, with out all the overhead and performance implications of TCP, is possible and in a few instances desirable.   Hope this helps, Jon   -Original Message-From: [EMAIL PROTECTED] [mailto:[E

openssl enc question

2000-08-11 Thread dreamwvr
hi, have a https server that is doing RSA as well as ok encyption but wanted to change it so it could offer the strongest encryption available using openssl on the pervasive browsers or at least support that if the browser does.. then drop down to a lower grade when that is all that the browse

Re: transport layer question

2000-08-11 Thread Rich Salz
SSL/TLS requires a transport protocol that is like TCP: each byte sent by "A" is received by "B" exactly once, and in order. If you want to use OpenSSL on top of anything other than a TCP socket, you will have to write some code that interfaces your transport into the OpenSSL "BIO" framework.

Re: transport layer question

2000-08-11 Thread Eric Rescorla
Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> writes: > From: Doris Diedrich <[EMAIL PROTECTED]> > > dido> Nope, it doesn't. > dido> As far as I know, SSL works on top of UDP too. > > Hmm, have you actually tested this? With the cipher DES-CBC3-SHA for > example? Have you any idea what wo

Re: transport layer question

2000-08-11 Thread Albert Serra
So, - Is it possible to use OpenSSL on top of RTSP, or UDP? as there has been contradictory answers. - If it is possible, what you have to modify from the Openssl C code? - The specifications what they pretend to mean, that it is possible if the transport protocol is reliable. If you'd read the S

RE: transport layer question

2000-08-11 Thread Dale Peakall
> SSL/TLS can only work on top of TCP. Rubbish, a collegue of mine integrated SSLeay into our OSI stack, and was able to run SSL on top of TP0/X.25, TP4/(CLNP), as well as TP0/RFC 1006 -> TCP. __ OpenSSL Project

Re: transport layer question

2000-08-11 Thread Rich Salz
> run SSL over UDP, with a layer that provides reliable delivery. > Of course that's duplicating the functionality of TCP, but > people reinvent the wheel all the time... But there are times when it is quite appropriate to build a guaranteed delivery protocol on top of UDP. RPC systems are a goo

Re: Attempting to re-connect with the same session id

2000-08-11 Thread Eric Murray
On Fri, Aug 11, 2000 at 08:38:02AM -0500, [EMAIL PROTECTED] wrote: > Hi there, > > Once a session is close does anyone know the syntax (how) to reconnect using > the same previously used session id. > > Any help with this would be much appreciated - Mike S. apps/s_client.c does session reuse.

Re: import certificate in ie

2000-08-11 Thread Martin Szotkowski
in IE5 you can use xenroll.InstallPKCS7(sz10) but I don't know if sz10 may be X.509 or only PKCS#7 Martin - Original Message - From: "Arnaud De Timmerman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 11, 2000 7:44 AM Subject: import certificate in ie > > > Dear all,

Re: transport layer question

2000-08-11 Thread Eric Murray
On Fri, Aug 11, 2000 at 01:45:37PM +0200, Doris Diedrich wrote: > Nope, it doesn't. > As far as I know, SSL works on top of UDP too. "As far as I know" means "I didn't try it" :-) Try it on a loaded network. Let us know if it works. > Have a look in the spec for this. If you'd read the SSL

Re: Problem linking the examples in WinNT4

2000-08-11 Thread Oscar Jacobsson
Sergio Gallego Sacristana Martinez wrote: > MSVCRT.lib(MSVCRT.dll) : error LNK2005: [function] already defined in > LIBCD.lib(sprintf.obj) > > Could somebody help me?? Here's my two cents worth, anyway. The linker is complaining because it's finding two copies of the C runtime library. MSVCRT.

Re: Problem with root cert on web page.

2000-08-11 Thread Markus Wagner
Hi Benny, I'd like to get the example code, too. Thank you, Markus Benny Chandra wrote: > > Hi Wyatt, > You cannot import any certificate to IE using MIME types > application/x-x509-ca-cert. I suggest you follow the way of MS Certificate > server importing root certificate. It send the certif

Attempting to re-connect with the same session id

2000-08-11 Thread EXT-Mike . Savard
Hi there, Once a session is close does anyone know the syntax (how) to reconnect using the same previously used session id. Any help with this would be much appreciated - Mike S. __ OpenSSL Project

Re: transport layer question

2000-08-11 Thread Richard Levitte - VMS Whacker
From: Doris Diedrich <[EMAIL PROTECTED]> dido> Nope, it doesn't. dido> As far as I know, SSL works on top of UDP too. Hmm, have you actually tested this? With the cipher DES-CBC3-SHA for example? Have you any idea what would happen if a packet was missing? Undetected? -- Richard Levitte \

Portal de Comercio Exterior

2000-08-11 Thread ComexSite
Visite e participe do maior Portal de Comercio Exterior brasileiro   http://www.comexsite.com

Re: "unable to get local issuer certificate" and stat of hash file error

2000-08-11 Thread Kenneth Karoliussen
># openssl x509 -hash -noout -in airrp.pem >c89aa68b It was a typo in the example given above. The input file was actually called "mycert.pem", not "airrp.pem" as submitted earlier in the last message. I didn't generate wrong hash of a different certificate :-) The same problem still persists.

Re: transport layer question

2000-08-11 Thread Jeffrey Altman
SSL/TLS can only work on top of TCP. SSL/TLS is a connection oriented protocol. It does not provide support for connectionless sockets. That is the reason that WTLS was developed for wireless devices. > Nope, it doesn't. > As far as I know, SSL works on top of UDP too. > Have a look in the spec

"unable to get local issuer certificate" and stat of hash file error

2000-08-11 Thread Kenneth Karoliussen
I have a rather curious problem while performing a verify of a VeriSign signed certificate. # openssl x509 -hash -noout -in airrp.pem c89aa68b The link is directed towards the certificate file: lrwxr-xr-x 1 root wheel 14 Aug 11 10:05 c89aa68b.0 -> mycert.pem #openssl verify -verbose -CAp

Re: please tell me

2000-08-11 Thread William C Klein
You should be able to find it on the Easy Access 2.0 media for Sol. Bill On Fri, 11 Aug 2000, mrick wrote: > sorry > I can't find "SUNski package from Sun patch 105710-01(space)" > Please tell me where can i get it? > thanks > cheers > maverick > -

Re: transport layer question

2000-08-11 Thread Doris Diedrich
Nope, it doesn't. As far as I know, SSL works on top of UDP too. Have a look in the spec for this. alas, I don't know if OpenSSL works on top of other protocols, but it shoukd: you might want to use BIO's to fake 'normal' sockets. On Thu, 10 Aug 2000, Eric Murray wrote: > On Thu, Aug 10, 2000 a

Problem linking the examples in WinNT4

2000-08-11 Thread Sergio Gallego Sacristana Martinez
Hello!! I tried to compile the examples included in OpenSSL and after setting the libraries Libeay32.dll Ssleay32.dll and RSAglue.lib on the link settings (input) of MS Visual C++ 6.0 I get this error: MSVCRT.lib(MSVCRT.dll) : error LNK2005: _sprintf already defined in LIBCD.lib(sprintf.obj)

Cert objects?

2000-08-11 Thread Bumpass, Brian
I am a newbie at this I have made good progress so far. I have created certs.. CA, from CSR, and from scratch. I have converted them to PKCS12 format. I have successfully deployed them to both browser and server. I want to add more information and confirm its existence in the certificate. S

RE: import certificate in ie

2000-08-11 Thread Benny Chandra
I don't think IE have any automatic way of importing client certificate. Microsoft Certificate server use a semi automatic (if you don't want to say manual) way of installing root CA in IE. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Arnaud De Timmerm

import certificate in ie

2000-08-11 Thread Arnaud De Timmerman
Dear all, I'm trying to import a certificate in IE5 (using xenroll.dll). It works with a cert i've just signed with the root CA, but now with the root CA itself. I mean ***

Re: transport layer question

2000-08-11 Thread Bodo Moeller
On Thu, Aug 10, 2000 at 09:32:36PM +0200, Richard Levitte - VMS Whacker wrote: >> Yep, it's all you need. It should be stated in the TLS RFC; I > Oh, and writing the BIO method for RTSP, not to be forgotten... Or use memory BIOs or a BIO pair. __

Multiple CA certificates

2000-08-11 Thread Claudio Campetto
In my environment a single CA has multiple keys to sign certificates. I made some attempts, but I didn't find a way to make openssl successfully import them in the certificate store. Furthermore, looking at the code, I found that the verification routine looks for certificates in the store using t

please tell me

2000-08-11 Thread mrick
sorry I can't find "SUNski package from Sun patch 105710-01(space)" Please tell me where can i get it? thanks cheers         maverick

Re: Base64Encoding

2000-08-11 Thread Richard Levitte - VMS Whacker
From: Abdelilah Essiari <[EMAIL PROTECTED]> aes> When we decodeUpdate several times, depending on how we break the string aes> aes> "YQ==" we get two answers: aes> aes> 1) "a" which is a string of length 1 aes>update "YQ" aes>update "==" aes> aes> 2) "a\0" which is a string of length 2

entropy gathering on windows

2000-08-11 Thread Ian Upright
I'm primarily looking for an implementation of an entropy gathering daemon for the windows platform, written in C or some other compiled language, not perl. I'm wondering if anyone has integrated OpenSSL to work with the entropy gathering daemon called Yarrow. http://www.counterpane.com/yarrow.h