RE: IE can't process 1024 bits cert?

2000-09-18 Thread Ludovic FLAMENT
Hy, thanks a lot. but i'm still confused of the cipher strength and key length. i always think 40-bit should be the key length of symmetric cipher algorithm and 512-bit is the key length of asymmetric cipher algorithm. It's just. 40-bit data encryption aglorithm is always

openssh dsa_verify still fails with openssl-0.9.6-beta2

2000-09-18 Thread Graham Murray
The dsa_verify failure for server_host_key which was seen in beta1 is still present in beta2. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL

Re: Problem: Adding certificate and private key to IIS 5.0

2000-09-18 Thread Thomas Christmann
First, thank you for your answer. You wrote: Both, the key and certificate _SHOULD_ be in PEM format refer to http://www.openssl.org/docs/apps/pkcs12.html# for details. Oh right, sorry, I didn't see it, but it says so on the site. Now, how can I "encode" the files to the .pem format? Is .pem

OpenSSL version 0.9.6 Beta 2 (problems with Win 98)

2000-09-18 Thread ukoeppe
I got a little bit of problem with the new beta 2 under Windows 98. The following line causes a program error: openssl req -x509 -newkey rsa:512 -keyout key.pem -out cer.pem I compiled it with Borland 5.5, since I don't have an assembler I turned off the "readtimer" function in rand_win.c .

Re: Problem: Adding certificate and private key to IIS 5.0

2000-09-18 Thread Mandar Behere
Hi, AFAIK, if you have generated the private key and CSR using IIS 4.0 supplied tool, then the certificate and private key will be in NET format. For details of extracting the key from IIS backup file and converting to PEM format look for the messages with subject "Using openssl to generate

Re: Does anybody launches ssl aware apache under WIN32 correctly?

2000-09-18 Thread Amit Chopra
[18/Sep/2000 14:03:55 00864] [info] Init: Loading certificate private key of SSL-aware server tjww.adaptview.com:443 [18/Sep/2000 14:03:55 00864] [info] Init: Requesting pass phrase via builtin terminal dialog Your log suggests that the terminal(the application window) is waiting for a

Re: OpenSSL version 0.9.6 Beta 2 (problems with Win 98)

2000-09-18 Thread Jeffrey Altman
Initialize the function pointers acquire, gen, release, netstatget, netfree to 0. Error-detail on desktop - OPENSSL verursachte einen Fehler durch eine ungültige Seite in Modul Unbekannt bei :0095a5d5. Register: EAX=0072f166 CS=017f EIP=0095a5d5 EFLGS=00010216 EBX=0095a5d0

Re: Does anybody launches ssl aware apache under WIN32 correctly?

2000-09-18 Thread ApacheSSL
Your log suggests that the terminal(the application window) is waiting for a passphrase to decrypt the private key. Enter there the passphrase that you entered when you generated the certifcate request/private key. Amit. First thank you for your answer, Amit The Apache log confused me,

Re: Verify signature of a multipart message

2000-09-18 Thread Dr S N Henson
Angus Lee wrote: = Original Message From [EMAIL PROTECTED] = I could use OpenSSL to decrypt this signed and encrypted message. Then when I verify the digital signature, OpenSSL told me that 'content and data present'. Is there anything wrong with my code? Can you send me a

Re: Problem: Adding certificate and private key to IIS 5.0

2000-09-18 Thread Thomas Christmann
Hi, AFAIK, if you have generated the private key and CSR using IIS 4.0 supplied tool, then the certificate and private key will be in NET format. For details of extracting the key from IIS backup file and converting to PEM format look for the messages with subject "Using openssl to

Re: Verify signature of a multipart message

2000-09-18 Thread Dr S N Henson
Angus Lee wrote: b4dec.txt is the original signed and encrypted message, while afterdec.txt is what I got after decryption. cityuca.pem is the CA certificate of the signer. OK. I've included a work around to the dev version of OpenSSL. It will be in OpenSSL 0.9.6. If you want to fix this

Problem compiling openssl engine beta2 on NT

2000-09-18 Thread Eric Korsia
I tried to compile on a Win32 platforom openssl engine beta2, and the OpenSSL beta2, and I recieve in both case this error: cl /Fotmp32dll\rand_win.obj -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DWIN32 -DWIN3 2_LEAN_AND_MEAN -DL_ENDIAN /Fdout32dll /GD -D_WINDLL -D_DLL

Re: OpenSSL version 0.9.6 Beta 2 (problems with Win 98)

2000-09-18 Thread ukoeppe
- Original Message - From: Jeffrey Altman [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, September 18, 2000 1:08 PM Subject: Re: OpenSSL version 0.9.6 Beta 2 (problems with Win 98) Initialize the function pointers acquire, gen, release, netstatget, netfree

Error code 0D067007

2000-09-18 Thread Stephen Clark
Hi I'm new to openssl having just implemented Apache 1.3.9 and openssl 0.9.4. Everything was fine until I installed the certificate from Verisign (via BT Trustwise). We are now getting the following errors: [Mon Sep 18 13:21:02 2000] [error] mod_ssl: SSL handshake failed (OpenSSL library error

RE: Apps over SSL

2000-09-18 Thread Mark H. Wood
On Fri, 15 Sep 2000, Soul Fire wrote: Thanks for the direction. I know that openssh would replace the need for telnet right off the bat but does it allow for other apps to ride over the encrypted stream as well? OpenSSH automagically sets up a tunnel for the X Window protocol, and I've also

MVS ports

2000-09-18 Thread Simone Ventola
Hello, I'm looking for a standard and free cryptographic library (like SSLeay, and OpenSSL of course) which can be easily compiled and linked to applications on IBM MVS - OS/390 machines. Please, help me! (^_^) Thanks in advance, see you soon, Simone --

Re: MVS ports

2000-09-18 Thread Douglas Wikström
Please turn off your reciept requesting "feature" of your mail client. /Douglas Simone Ventola wrote: Hello, I'm looking for a standard and free cryptographic library (like SSLeay, and OpenSSL of course) which can be easily compiled and linked to applications on IBM MVS - OS/390 machines.

Re: Problem compiling openssl engine beta2 on NT

2000-09-18 Thread Jeffrey Altman
Try replacing LMSTR with LPWSTR in crypto/rand/rand_win.c I tried to compile on a Win32 platforom openssl engine beta2, and the OpenSSL beta2, and I recieve in both case this error: cl /Fotmp32dll\rand_win.obj -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DWIN32

RE: Verify signature of a multipart message

2000-09-18 Thread Angus Lee
= Original Message From [EMAIL PROTECTED] = Ugh. I checked OpenSSL (Netscape?) 4.73 too and it does the same. The cause is that Netscape isn't properly excluding the content. It is including a zero length content. This is a recent addition to Netscape and is a bug. I'll see if I can

Re: Verify signature of a multipart message

2000-09-18 Thread Dr S N Henson
Angus Lee wrote: = Original Message From [EMAIL PROTECTED] = Ugh. I checked OpenSSL (Netscape?) 4.73 too and it does the same. The cause is that Netscape isn't properly excluding the content. It is including a zero length content. This is a recent addition to Netscape and is a bug.

Make Ends Meet

2000-09-18 Thread scott112
Subject: Invest $25 to get $500,000 in every 4 to 5 months!! Dear Friend: AS SEEN ON NATIONAL TV : ''Making over half million dollars every 4 to 5 months from your home for an investment of only $25 U.S. Dollars expense one time'' THANX TO THE

converting raw signature to PKCS#7 format

2000-09-18 Thread Vivek Dasgupta
Hi I have a library which signs data on a smart card and returns 128 bytes signature. Now the problem is how to convert it into PKCS#7 so that it can be verified by a PKCS#7 compliant verify tool. Is there any utility which can convert raw signature to a PKCS#7 object. The platform on

generating a certificate chain in pkcs7 format using OpenSSL?

2000-09-18 Thread Kimberly Palko
Does anyone know how to generate a certificate chain in pkcs7 form using OpenSSL? thanks, Kim __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL