Compile problem under NT4

System is NT4 SP3, VC5, NASM, openssl-0.9.6 perl Configure ms\do_nasm nmake -f ms\ntdll.mak I am getting rand_win.c(581) error 2400 inline assembler syntax error in 'opcode'; found newline fatal error Any pointers? Thanks

Certificate Chaining

Hello All, I have a question regarding the use of certificates in IE 5+ and Netscape 4.7+. We have written a small customised SSL web server using OpenSSL, etc... This web server is only to be made available to employees of the customer company, using SSL to secure the link and a login mechanism

Re: Certificate Chaining

Hi Steve. I think I can help you on this one. Give me a call at 215-538-3535 and ask for Tom Nichols. Steve wrote: Hello All, I have a question regarding the use of certificates in IE 5+ and Netscape 4.7+. We have written a small customised SSL web server using OpenSSL, etc... This web

Confused about certificates and keys for browser users

OK, I've installed OpenSSL, rebuilt Apache with the proper module and the WWW server is checking for certificates, but now I'm faced with the prospect of setting up users (e.g. browsers) to access WWW pages over HTTPS. I've looked at the OpenSSL documentation and documentation from Netscape,

RE: Confused about certificates and keys for browser users

Title: RE: Confused about certificates and keys for browser users Hi, you can go to http://developer.netscape.com/docs/manuals/security/pkin/index.htm for some information. Cary -Original Message- From: Tom Johnson [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 9:47 AM

SSL_CTX_set_verify[_depth] the second attempt

Hi! Yesterday we discussed the exact behaviour of SSL_CTX_set_verify_depth(). According to our results I have filled in the missing pieces and made changes as necessary to my draft of the corresponding manual page. I would kindly ask the participants of our discussion (and everybody else, of

Re: SSL_CTX_set_verify[_depth] the second attempt

On Wed, Oct 11, 2000 at 04:24:31PM +0200, Lutz Jaenicke wrote: According to our results I have filled in the missing pieces and made changes as necessary to my draft of the corresponding manual page. Press "a" to attach before pressing "y" to send out :-) Lutz -- Lutz Jaenicke

Re: SSL_CTX_set_verify[_depth] the second attempt

Looks good to me. -Ekr __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: Net::SSLeay/Net::LDAPS problem

It's a common problem with SSLeay and OpenSSL, it assumes a finite file. So just do this: head -100 /dev/urandom $HOME/.random And use that to seed the PRNG... or some systems have a /var/run/random-seed, which only gets updated at boot time and readable only by root Edwin Jie Gao wrote:

Re: Net::SSLeay/Net::LDAPS problem

From: Edwin Chiu [EMAIL PROTECTED] Edwin.Chiu It's a common problem with SSLeay and OpenSSL, it assumes Edwin.Chiu a finite file. So just do this: Edwin.Chiu Edwin.Chiu head -100 /dev/urandom $HOME/.random That's trusting there will be 100 \n's in a finite and relatively short time, isn't it?

Proxied SSL server

I'd like to place an Apache SSL server (Apache + mod_ssl + openssl) behind a firewall machine that does port-forwarding via ipmasqadm so that the SSL server can operate on a private IP address. This is already done for our mail services, but as its set up now, the web server doesn't seem to be

Checking an SSL connection . . .

Hello again, everyone. I have solved some of the problems I have been having with setting verification mode and depth, I think. (Thank you Lutz!) I have also approached the problem of ensuring the connection is successful on a nonblocking socket. What I was trying to do is use SSL_state() to

Re: SSL_CTX_set_verify[_depth] the second attempt

Looks good, Lutz, but I suspect you meant SSL_set_verify on line 26, rather than SSL_CTX_set_verify. Lou Lutz Jaenicke wrote: On Wed, Oct 11, 2000 at 04:24:31PM +0200, Lutz Jaenicke wrote: According to our results I have filled in the missing pieces and made changes as necessary to my

Re: Crypt::SSLeay

I get this message when I try to use lwp with crypt SSLeay "Bad file number SSL negotiation failed" what could be the reason chris - Original Message - From: Christopher Sagayam To: [EMAIL PROTECTED] Sent: Tuesday, October 10, 2000 10:01 AM Subject:

Problem with: SSL3_GET_CLIENT_CERTIFICATE

Title: Problem with: SSL3_GET_CLIENT_CERTIFICATE Hi, I'm a newbie to SSL and I really need some help... I've installed openssl-0.9.5a with mod_ssl-2.6.6-1.3.12 and apache_1.3.12 (on port 8443) on Sun Solaris 2.6. The compiling went well and I've created a certificate with : make

invalid CA certificate error in server cert verification on OpenSSL 0.95a

Hi, I am trying to verify a server cert that is signed by a Intermediate CA (like Verisign International Server CA) but am getting a "Invalid Certificate" error. I understand from the mailing list that this is a known issue and there is a fix for this problem (the extended key usage

Re: SSL_CTX_set_verify[_depth] the second attempt

On Wed, Oct 11, 2000 at 12:23:58PM -0400, Louis LeBlanc wrote: Looks good, Lutz, but I suspect you meant SSL_set_verify on line 26, rather than SSL_CTX_set_verify. Yes, has been fixed. Thanks, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus

Error in make install process

Hi there, Actually I've posted this once. But I haven't got an answer yet. Hope I didn't bother you guys there ... I'm trying to build and set up a SSL enabled Apache on Sun solaries 2.6., using Apache+Apache_SSL+OpenSSL. I encountered problems in building OpenSSL. I downloaded OpenSSL 0.9.6.

Shared Libs installation

I recently downloaded OpenSSL 0.9.6, compiled and installed it. I had to use static libs because when passing the 'shared' option to 'config' it gets near the end of a 'make install', and says: ranlib: [lib name here]: File format not recognized Particulars: Slackware Linux system, kernel

Re: Checking an SSL connection . . .

Ok, it looks like I was mistaken here. The SSL_state() does in fact return the SSL connection status flag, but it is only set to SSL_ST_CONNECT|SSL_ST_BEFORE in some cases, and only when the SSL_connect fails because the handshake didn't complete. There are nearly half a dozen states that could

Re: invalid CA certificate error in server cert verification on OpenSSL 0.95a

Ramkumar Venketaramani wrote: Hi, I am trying to verify a server cert that is signed by a Intermediate CA (like Verisign International Server CA) but am getting a "Invalid Certificate" error. I understand from the mailing list that this is a known issue and there is a fix for

Compile bug with no-idea.

Compiling openssl-0.9.5a on Solaris where the source have been CVS'ed (Eg. with no symlinks in the source.) ./config --prefix=/usr/local --openssldir=/usr/local/openssl no-idea make links will not create symlinks to idea in include/openssl/ to crypto/idea/idea.h and test/ideatest.c The compile

certificate verification

Greetings, I am writing a client/server app in which the client needs to validate that the server it is connecting to is actually who it claims to be. The server is using a self-signed certificate. The logic would (hopefully) be along the lines of: 1. establish an SSL connection to a

Re: Confused about certificates and keys for browser users

Hi Tom, Try, SSLVerifyClient require SSLVerifyDepth 10 as a guess... Sam C. OK, I've installed OpenSSL, rebuilt Apache with the proper module and the WWW server is checking for certificates, but now I'm faced with the prospect of setting up users (e.g. browsers)

public shell

I have a public shell company available for a reverse merger. I will email full details if interested. __ OpenSSL Project http://www.openssl.org User Support Mailing List

Error building 0.9.6 with ms\mingw32 on NT4

Hi, I am getting the error below when trying to build the 0.9.6 distribution using Mingw32 on Windows NT 4 SP6. (I can build 0.9.5a with the same machine.) Where can I get the missing files? gcc -o tmp/rand_win.o -Ioutinc -Itmp -DL_ENDIAN -DDSO_WIN32 -fomit-frame-pointer -O3 - m486 -Wall