Re: Memory leak in SSL_CTX_new / SSL_CTX_free thru a call to CRYPTO_get_ex_new_index()

2000-09-13 Thread Amit Chopra
Actually, I saw the same leaks, but since they were fixed in size, I did not bother about them. But now that someone has raised this question, can't the memory be freed at some point of time instead of leaking? I must say though, that very mysteriously this leak has disappeared from my code, now t

Re: Installation Problem

2000-09-13 Thread Premson P R
Hi, The problem is with your "make" utility in linux. But i believe red hat 6.2 has all the tools required for compiling. I have Apache1.3.12+Mod_SSL+OpenSSL running beautifully on my RH6.2. Check out your make utility . if possible try reinstalling the make utility. By the way are u able t

Re: Beta1 fail on cygwin32/mingw32 on NT4

2000-09-13 Thread zhu qun-ying
As more information on the mingw32 platform: The code needed tlhelp32.h is for win95 only not for NT. the tlhelp32.h is suppose only work in Win95 and later, not in NT at least 4.0. It is said to to be supported under NT 5.0. -- (~._.~) Öì Ⱥ Ó¢ (Qun-Ying) (65) 874-6743 ( O ) ()~*~

Re: Serious Bug in ssl3_get_record

2000-09-13 Thread Fung
But I know SSLv23_method has bugs at this version 0.9.5a. I really hope that 0.9.6 can solve all problems I have found so far. > Have you tried using the SSLv23_method() instead of the SSLv3_method()? > The problem is that if I use SSLv3_method to connect to a client that > supports SSLv2 ONLY.

Re: Serious Bug in ssl3_get_record

2000-09-13 Thread Jeffrey Altman
Have you tried using the SSLv23_method() instead of the SSLv3_method()? > The problem is that if I use SSLv3_method to connect to a client that > supports SSLv2 ONLY. Then we function ssl3_get_record always returns "WRONG > VERSION NUMBER". Should I try to connect again with SSLv2_method?? > > O

Installation Problem

2000-09-13 Thread Jackson Ching
Hi, I'm new to this SSL and am trying to install Apache 1.3.12+Mod_SSL+OpenSSL. I'm using RedHat Linux 6.2 kernel 2.2.16 perl version 5.005_03 built for i386-linux here are the steps i did, as a root [root@localhost /]# tar xvfz openssl-0.9.5a.tar.gz

Re: windows client needed

2000-09-13 Thread Jeffrey Altman
> > I've been trying, unsuccessfully to find a windows based (binary > > preferred) telnet client that supports SSL, specifically that can > > communicate with an openssl enabled server. > > Try SecureCRT: > > http://www.vandyke.com/products/securecrt/ SecureCRT supports SSH, not SSL.

Re: Serious Bug in ssl3_get_record

2000-09-13 Thread Fung
The problem is that if I use SSLv3_method to connect to a client that supports SSLv2 ONLY. Then we function ssl3_get_record always returns "WRONG VERSION NUMBER". Should I try to connect again with SSLv2_method?? On Sat, Sep 09, 2000 at 09:19:34AM +0800, Fung wrote: > If you look at the source c

BIO and proxy?

2000-09-13 Thread zhu qun-ying
Hi, I have not dug into the source code yet, but I want to know how to use the proxy support? Does it work transparently with those web proxy server, acting as a tunnel for communication between two sites? Thanks -- (~._.~) Öì Ⱥ Ó¢ (Qun-Ying) (65) 874-6743 ( O ) ()~*~() (_)-(_)

Re: Security Library...

2000-09-13 Thread Dr S N Henson
Jeff Parker wrote: > > I'm having a similar problem. I get the out of memory error every time > I try to use Netscape, both on Windows and Solaris. However, it works > fine with Internet Explorer. > > I am porting openssl-0.0.5a to an imbedded, proprietary operating > system. There is no fi

Re: windows client needed

2000-09-13 Thread Michael Lee
> I've been trying, unsuccessfully to find a windows based (binary > preferred) telnet client that supports SSL, specifically that can > communicate with an openssl enabled server. Try SecureCRT: http://www.vandyke.com/products/securecrt/ __

Re: Security Library...

2000-09-13 Thread Jeff Parker
I'm having a similar problem. I get the out of memory error every time I try to use Netscape, both on Windows and Solaris. However, it works fine with Internet Explorer. I am porting openssl-0.0.5a to an imbedded, proprietary operating system. There is no file system, so the certificates and p

Re: problems installing new verisign certificate

2000-09-13 Thread Dr S N Henson
Martha Greenberg wrote: > > I was able to convert the certificate with openssl pkcs7, and I installed > the first part of it. However, now when I view the page in netscape, I get > the message: > > safetymarket.safetydirector.com is a site that uses encryption to > protect transmitted informat

Re: problems installing new verisign certificate

2000-09-13 Thread Martha Greenberg
I was able to convert the certificate with openssl pkcs7, and I installed the first part of it. However, now when I view the page in netscape, I get the message: safetymarket.safetydirector.com is a site that uses encryption to protect transmitted information. However, Netscape does not recogni

Message status - undeliverable

2000-09-13 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: DWILBUR Information about your message: Subject: Can't read the trusted-ca.crt file

Can't read the trusted-ca.crt file

2000-09-13 Thread Louis LeBlanc
I am working with an application that is to generate https requests, verification of the server is being done. Unfortunately, I cannot get the trusted certificate file read. This is the error message: error:02001002:system library:fopen:No such file or directory However, I am printing the certfi

Re: Using OpenSSL in command line mode for our own CA?

2000-09-13 Thread vincent
Hi Rodrigo! Thanks for your guiding! I'll have a look!! Best Regards, Vincent Rodrigo Coronado wrote: > > This is a basic way to do that: > > http://www.ultranet.com/~fhirsch/Papers/cook/ssl_cook.html > > And so does this (but more complete): > > http://slwww.epfl.ch/SIC/SL/CA/ > > And, f

Cert Request and Signing issues

2000-09-13 Thread Brahm Windeler
I am trying to use OpenSSL as a CA but am running into some problems. I am using the openssl.cnf and CA.sh to configure and run it. Here are the issues I've come across. 1) Email usage in DN and subjectAltName: I would like to put a person's email address in the subjectAltName but NOT ha

RE: invalid CA certificate error in server cert verification.

2000-09-13 Thread Kane, Brandon (NJAOST)
Thanks, that fixed it. Guess the error code threw me off... -Brandon -Original Message- From: Dr S N Henson [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 13, 2000 5:19 PM To: [EMAIL PROTECTED] Subject: Re: invalid CA certificate error in server cert verification. "Kane, Brandon

no site name

2000-09-13 Thread Kari Suomela
I created some test certificates using CA.pl. They work otherwise ok, but the browser reports the certificate not having the correct site name. I was not prompted to enter it, so where does it get read from? KS __ OpenSSL Pr

Re: invalid CA certificate error in server cert verification.

2000-09-13 Thread Dr S N Henson
"Kane, Brandon (NJAOST)" wrote: > > I'm trying to verify a server certificate, as part of a cert chain. One of > the CA certs, a verisign intermediate cert, fails in the verify process. I'm > getting a "invalid CA certificate" error in the callback function. What's > strange is that if I call:

Re: Memory leak in SSL_CTX_new / SSL_CTX_free thru a call to CRYPTO_get_ex_new_index()

2000-09-13 Thread Richard Levitte - VMS Whacker
From: "Martin Skinner" <[EMAIL PROTECTED]> N8Schwaermer> So, a single call to CRYPTO_get_ex_new_index() allocated N8Schwaermer> these memory blocks and nothing frees them. N8Schwaermer> Am I missing something? This is perfectly normal. What happens is that a number of functions are registered f

Re: Windows 2000

2000-09-13 Thread Richard Levitte - VMS Whacker
From: "Graham Shaw" <[EMAIL PROTECTED]> grahamshaw> Does anyone know if OpenSSL fully supports Windows 2000 grahamshaw> and if not whether this is likely to be added in the near grahamshaw> future. I have written an application that seems to work grahamshaw> on NT 4 but locks up on Windows 2000.

Re: Using OpenSSL in command line mode for our own CA?

2000-09-13 Thread Rodrigo Coronado
This is a basic way to do that: http://www.ultranet.com/~fhirsch/Papers/cook/ssl_cook.html And so does this (but more complete): http://slwww.epfl.ch/SIC/SL/CA/ And, finally, this guys already did the dirty work (even more complete) www.openca.org Also, look for alternatives: http://ospkibo

Memory leak in SSL_CTX_new / SSL_CTX_free thru a call to CRYPTO_get_ex_new_index()

2000-09-13 Thread Martin Skinner
Hello fellow developers: I have been trying to track down a memory leak in my spop3 client and have narrowed it down to the following KISS code: BTW: OpenSSL Version 0.9.5.a with MS VC++ 6.0 SP4 == // KISS-test // Initialize OpenSSL SSL_library_

Re: Windows 2000

2000-09-13 Thread Jeffrey Altman
> Does anyone know if OpenSSL fully supports Windows 2000 and if not whether > this is likely to be added in the near future. I have written an application > that seems to work on NT 4 but locks up on Windows 2000. > I've been using OpenSSL on Windows 2000 for over a year. J

Re: windows client needed

2000-09-13 Thread Jeffrey Altman
> I've been trying, unsuccessfully to find a windows based (binary preferred) > telnet client that supports SSL, specifically that can communicate with an > openssl enabled server. Kermit 95. Supports Telnet START_TLS as well as Tim Hudson's Telnet AUTH SSL and Telnet over SSL/TLS. http://www

windows client needed

2000-09-13 Thread Roger S Reynolds
I've been trying, unsuccessfully to find a windows based (binary preferred) telnet client that supports SSL, specifically that can communicate with an openssl enabled server. Apologies in advance for what has got to be a FAQ, but I have tried to find the info from the openssl web site and links

Re: Wildcard certificates.

2000-09-13 Thread Vadim Fedukovich
On Wed, 13 Sep 2000, Chan, Moses wrote: > Folks, > > Could somebody tell me how to generate free wildcard certificates? > Can I do this in OpenSSL? One of use of wilcard certificate is "security proxy". One should remember by doing this one effectively voids trust in server validation provide

Windows 2000

2000-09-13 Thread Graham Shaw
Does anyone know if OpenSSL fully supports Windows 2000 and if not whether this is likely to be added in the near future. I have written an application that seems to work on NT 4 but locks up on Windows 2000. Thanks Graham Shaw ___

Re: Trouble compiling on solaris

2000-09-13 Thread Ricardo Stella
Talk to your SysAdmin... I don't think you are ready for this yet... :-) Start with the following commands: > whereis perl If not found, then you have to find the executable. You could use: > find / -name perl -print Once its found, then make sure you add the directory to your path. Final

Wildcard certificates.

2000-09-13 Thread Chan, Moses
Folks, Could somebody tell me how to generate free wildcard certificates? Can I do this in OpenSSL? Thanks in advance! --Moses __ OpenSSL Project http://www.openssl.org User Support Mailing List