Private keys and PKCS#12

2000-09-25 Thread Marco Donati
I've solved my problem and I'd like to thank everybody who wrote me. I modified my low level sequence (the code I posted) to build a pkcs12 bundle with one bag, keeping "shrouded" private key, so i used PKCS12_MAKE_SHKEYBAG/PKCS12_pack_p7data INSTEAD of PKCS12_MAKE_KEYBAG/PKCS12_pack_p7encdata.

Fail in installing 0.9.6 shared lib at RedHat 6.2

2000-09-25 Thread Avinanta T.
I have a problem in make install openssl-0.9.6 at RedHat 6.2, any suggestion ? Thanks in advance, Avinanta T. [EMAIL PROTECTED], [EMAIL PROTECTED] # ./config --prefix=/usr/local/openssl-0.9.6 \ --openssldir=/usr/local/openssl-0.9.6 \ shared # make # make test # mak

Re: Generating RSA key pair / Rand error / Solaris 7 ++

2000-09-25 Thread David Taylor
Jørgen Skogstad wrote: > > I am having some minor troubles trying to build a RSA keypair in > which I hoped to do a self signed CA certificate later on .. but > the RSA key pair generation failed with the beneatch mentioned > error; > > 08:20 root@nexus [ /home/kroot > openssl genrsa -des3 -out

Generating RSA key pair / Rand error / Solaris 7 ++

2000-09-25 Thread Jørgen Skogstad
Hi there .. I am having some minor troubles trying to build a RSA keypair in which I hoped to do a self signed CA certificate later on .. but the RSA key pair generation failed with the beneatch mentioned error; 08:20 root@nexus [ /home/kroot > openssl genrsa -des3 -out ca.key 2048 warning, no

How can i enable SSL security for DCOM?

2000-09-25 Thread Murali Kannan
I am working with Windows 2000 server. When i launching a Active X control through web server and accessing the DCOM from the server through Active X control. Here I set the page as secure(SSL-By getting sample certificate from Verisign). But the transcation between the Active X  and DCOM

OpenSSL Code Signing

2000-09-25 Thread Yazard
Hello all, I am trying to use OpenSSL 0.9.6 for code/object signing (tarball, RPMS, binary files, shared libraries, text docs, MS Word documnents :) Simple command 'openssl smime -sign -in object_name -out object_name.sig -outform DER -signer my_cert.pem' seems to work quite good (dumpasn1 output)

No Subject

2000-09-25 Thread Adrian Sutherland
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: Solaris 5.7 Configure/Install problem

2000-09-25 Thread David Taylor
David Taylor wrote: > > I am trying to build 0.9.6 for Solaris 5.7 with Workshop 5.0 > in 32 or 64 bit mode, but config fails silently: > > > % ./config > > WARNING! Detected WorkShop C 5.0. Do make sure you have > > patch #107357-01 or later applied. > > Operating system: sun4u-whateve

Re: changing of passphrase

2000-09-25 Thread Leland V. Lammert
At 05:53 PM 9/25/00 -0700, you wrote: >Hi, can someone help me? I'm trying to change the >passphrase that is use to start the ssl-apache. Thanks. Buy a new Cert. Lee __ OpenSSL Project h

RE: idea and copyright

2000-09-25 Thread David Schwartz
> In the worst case, can somebody point me to another free simmetric > algorithm with a 128 bit key ??? RC4 would be my recommendation. Twofish would be a good alternate. DS __ OpenSSL Project

Solaris 5.7 Configure/Install problem

2000-09-25 Thread David Taylor
I am trying to build 0.9.6 for Solaris 5.7 with Workshop 5.0 in 32 or 64 bit mode, but config fails silently: > % ./config > WARNING! Detected WorkShop C 5.0. Do make sure you have > patch #107357-01 or later applied. > Operating system: sun4u-whatever-solaris2 > WARNING! If you wish to

Re: Newbie question: Compiling OpenSSL under VC++ 6.0

2000-09-25 Thread zhu qun-ying
In your VC installation, you should be able to found a batch file under C:\progra~1\micros~2\vc98\bin, it is named "vcvars32.bat", just run the batch file under your DOS prompt, it will setup all the environment for you. -- (~._.~) Öì Ⱥ Ó¢ (Qun-Ying) (65) 874-6743 ( O ) TrustCopy

Re: Newbie question: Compiling OpenSSL under VC++ 6.0

2000-09-25 Thread ApacheSSL
When you install vc, you forget to run VCVARS32.BAT, so nmake can not find some enviroment variable like INCLUDE, if you really a newbie about VC, I suggest you install VC again, and let vc run the batch file, else, you can run it every time you start dos prompt or set them to system variable man

Newbie question: Compiling OpenSSL under VC++ 6.0

2000-09-25 Thread Paul Baranowski
Please forgive this newbie question. I am trying to compile OpenSSL 0.9.5a (if I should upgrade to the newest let me know) under VC++ 6.0. I am new to both. I have read through all the documentation and looked at the mailing lists but I have not been able to figure everything out so far. I was

Re: bad mac decode in ssl handshake

2000-09-25 Thread Michael Lee
Tim Tassonis wrote: > www.genowebpayment.de:443 > > I haven't got an idea what web server they're using, but I can connect > successfully with Netscape Communicator 4.75 under Linux for instance. You can find out what server a SSL-enabled web site is running at Netcraft: http://www.netcraft

Add custom extension to X509

2000-09-25 Thread eamonn long
Hi all, I'm want to add a custom extension to X509 certificates and am trying to figure out how to do this but there doesn't seem to be much written about it. Could someone point me at a readme or perhaps some sample code that might aid me. Initally I started with objects.h and added a new macr

RE: Newbie: RANDFILE problem

2000-09-25 Thread "Roy, Sébastien"
Title: Newbie: RANDFILE problem Yes   *** Sebastien Roy - www.ivision.com mail : [EMAIL PROTECTED] *** -Original Message-From: [EMAIL PROTECTED

Re: bad mac decode in ssl handshake

2000-09-25 Thread Richard Levitte - VMS Whacker
From: Tim Tassonis <[EMAIL PROTECTED]> timtas> What I found out as well: timtas> timtas> - openssl s_client -ssl2 works timtas> - openssl s_client -ssl3 works timtas> timtas> So, only when I specify no protocol, the error occurs. What could that timtas> mean? That the server doesn't like TLS1

Re: Win32 binaries needed.

2000-09-25 Thread David Maurus
Craig Manley wrote: > Hi all, > I've got the free Borland C++ 5.5 compiler but I can't compile the > source on Win98. Has anybody got already compiled Win32 binaries (or a > complete setup) that I could download? You can grab them here (temporary): http://www.mailbag.de/Out32dll.zip The zip con

Re: bad mac decode in ssl handshake

2000-09-25 Thread Tim Tassonis
Hi Arun On Fri, 22 Sep 2000, Arun Venkataraman wrote: > > Looks like the webserver handles SSLv3 properly but not SSLv23 (why?). I > tried: > "openSsl> s_client -debug -sslv3 -connect www.genowebpayment.de:443" and > it > worked fine. You're right, I managed to connect like this as well. The W

Re: Private Keys and PKCS#12

2000-09-25 Thread Dr S N Henson
Marco Donati wrote: > > >PKCS#12 files under OpenSSL are intended to have a key and a matching > > certificate. AFAIK the same is true of Windows and Netscape > > import/export routines. > > yes, but what if you stil have to request it to a CA... > > > What do you want a private key alone in PK

EVP_DecodeValid ???

2000-09-25 Thread Max Liccardo
Hi folks, I have to decode a base 64 string but I don't know the result lenght.. I tried to use the bio_read after a push of a b64 filter but I obtain always a string larger than the real string I expect so I noticed the EVP_DecodeValid function. I seems to do the right job, i.e., it returns t

Win32 binaries needed.

2000-09-25 Thread Craig Manley
Hi all, I've got the free Borland C++ 5.5 compiler but I can't compile the source on Win98. Has anybody got already compiled Win32 binaries (or a complete setup) that I could download? P.S. I'm not a C programmer so I have no hope in figuring out how to compile it myself. -Craig Manley. __

Private Key File!!!

2000-09-25 Thread Ravi Mittal
Hi All, I don't know where to get the Certificate Key File from??? Actually I have just created the CA and a Certificate with the help of Openssl CA.sh script... Don't have any file for the private key. Pls. throw some light!!! Regards Ravi

Re: Private Keys and PKCS#12

2000-09-25 Thread zhu qun-ying
Marco Donati wrote: > > > I generate the key, then use it to sign a certificate request (PKCS#10). > The PKCS#10 is sent to a CA. > When the certificate is issued by the CA it is downloaded (via LDAP) and > stored into the original P12 with its key > > I need it in PKCS12 for compatibility w

Validating client (a bug?)

2000-09-25 Thread Ari Pirinen
Hello. I have a problem validating the client. I'm using OpenSSL 0.9.5a for a HTTP server I've written. And as a browser IE 5, and have successfully created a certificate for it with CA.pl and imported it into the browser. But when I connect to my server, comes an error: error:140890C7:SSL routin