Help with error codes needed...

2000-09-28 Thread Todd Chapman
Hi. I am having problems with an OpenSSL enabled application. Unfortunatley I'm not the author of the app. and don't know much about SSL programming. What I am trying to do is modify the code to produced more useful error messages. The client is failing on the call to SSL_connect and the server

help with CA utilities

2000-09-28 Thread Roger S Reynolds
Hi. I've been trying to figure out how to use the various openssl apps to manage certificates. I've had some success, but have had a devil of a time figuring out where it is putting various files, which files it is using as defaults, what is being created, what exactly is needed and so on. I'm

Réf. : Réf. : Re: signed encrypted email to IE

2000-09-28 Thread Arnaud De Timmerman
Uli and all, I've found the problem, I hope my solution will help in the future. If you want to send signed encrypted email to outlook or messenger, you have to sign THEN encrypt the all message. As far as I've seen encrypting THEN signing isn't a good solution since in that case two icons

Re: keys?

2000-09-28 Thread Alexander 'Alfe' Fetke
Hi, Steve ... On Wed, 27 Sep 2000, Steve Wang wrote: I am trying to set up a SSL server, using the "openssl s_server". It has an argument, "-key keyfile". What format should be the key in? try PEM format. i always got useful results with it. Alfe

SMTP server with SSL

2000-09-28 Thread Rosario Riccio
Hi all this question may sound strange... Does anyone know about some SMTP server that relies on SSL ??? Thanks a lot Rosario

Re: SMTP server with SSL

2000-09-28 Thread Costantino Imbrauglio
Yes: it's an obscure and esoteric tool called sendmail... Look for version 8.11 - Original Message - From: Rosario Riccio To: ML openssl-users Sent: Thursday, September 28, 2000 1:32 PM Subject: SMTP server with SSL Hi all this question may

Re: SMTP server with SSL

2000-09-28 Thread Lutz Jaenicke
On Thu, Sep 28, 2000 at 01:32:43PM +0200, Rosario Riccio wrote: Hi all this question may sound strange... Does anyone know about some SMTP server that relies on SSL ??? You can have TLS/SSL support for postfix, qmail, sendmail, zmailer, for the first two there are patchkits available, the

Session caching

2000-09-28 Thread Ari Pirinen
Hello. Apparently server side caching is not optional. At least IE5 fails with my server when validating the client if caching is not enabled. However, would someone please explain to me the function of SSL_CTX_set_session_id_context function call??? I hate to use functions which I have no idea

Re: SMTP server with SSL

2000-09-28 Thread Sergio Rabellino
Lutz Jaenicke wrote: On Thu, Sep 28, 2000 at 01:32:43PM +0200, Rosario Riccio wrote: Hi all this question may sound strange... Does anyone know about some SMTP server that relies on SSL ??? I've installed sendmail 8.11 with TLS/SSL support on a Solaris7/64 box and it's ok ! Then using

Browser's signature function

2000-09-28 Thread
Title: Browser's signature function Hi, As we know, SSL protocol do not support signature function. But Netscape does it by signtext javascript function call. How about IE? Does IE support signature function? If IE does not, is it possible that writing a Microsoft Crypto API ActiveX which

RE: key values mismatch

2000-09-28 Thread Dearnaley (EXT), Roger
I think from doing some searching on the net that my private key and my certificate don't match. What do I need to do to make them match? Replace the key file that Apache generated with the one from which you created the certificate request that you sent to the CA to get the certificate.

Re: Session caching

2000-09-28 Thread Lutz Jaenicke
On Thu, Sep 28, 2000 at 09:27:23AM -0400, Ari Pirinen wrote: However, would someone please explain to me the function of SSL_CTX_set_session_id_context function call??? I hate to use functions which I have no idea what they do. I've searched all over the documents, the sources etc. but just

Certificate problems?

2000-09-28 Thread Tim Tyler
OpenSSL experts, I am running Apache 1.3.12 on an AIX4.3 system. I installed the mod_sll along with openssl according to the Apache instructions. The dummy certificates work fine after doing a make certificate. Naturally, I wanted my on self authorized certificates. So I followed the

OpenSSL and Threads

2000-09-28 Thread Robert Brown
Many thanks to all who guided me on several Win32 issues I had last week. I have yet another trivial question that has probably been asked many times but with some context. I am trying to understand the general idea of having multi-threaded access to the OpenSSL API. In a very simple SSL

Why So Much Smart Money Is So High on Read-Rite !!

2000-09-28 Thread HotStocks
Link to article below: http://www.thestreet.com/comment/herbonthestreet/1096812.html Commentary: Herb on TheStreet.com Why So Much Smart Money Is So High on Read-Rite By Herb Greenberg Senior Columnist

Re: Browser's signature function

2000-09-28 Thread Mario Fabiano
¾G¹ÅÂ× wrote: Hi, As we know, SSL protocol do not support signature function. But Netscape does it by signtext javascript function call. How about IE? Does IE support signature function? If IE does not, is it possible that writing a Microsoft Crypto API ActiveX which access the IE

Digital Signature

2000-09-28 Thread Sean Walker
I need to get a persons name from a certificate. I can currently get the user's email address very easily. Can anyone tell me how to do this? Thanks, Sean Walker AtPac BEGIN:VCARD VERSION:2.1 N:Walker;Sean FN:Sean Walker EMAIL;PREF;INTERNET:[EMAIL PROTECTED] REV:2901T203920Z END:VCARD

Nescape certificate Problem

2000-09-28 Thread Peter Liem
Hi, I have a question on the Nescape certificate. I've signed the SPKI request from Netscape and then I put the signed certificate back to the client browser.However, I found that there is a problem in verifying this certificate in Netscape browser. When I click "Verify" button in