FW: :SSLeay install horks

2000-10-17 Thread Oren Seliger
-Original Message- From: R.Munden [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 17, 2000 8:24 PM To: [EMAIL PROTECTED] Subject: Net::SSLeay install horks This is what I'm getting from Net::SSLeay-1.05: openssl-0.9.3a is installed AIX 4.3 installed RS/6000

Net::SSLeay install horks

2000-10-17 Thread R.Munden
This is what I'm getting from Net::SSLeay-1.05: openssl-0.9.3a is installed AIX 4.3 installed RS/6000 Standard AIX C compiler perl 5005_03 installed from IBM package (I didn't do it) Any Ideas? /tmp/Net_SSLeay.pm-1.05 ->make clean rm -rf SSLeay.

Re: Trouble Compiling 0.9.6 on Mac OS X Server

2000-10-17 Thread Aaron Faby
> Did you unpack that in the same spot as an older version of OpenSSL? > Did you run Configure? No, and yes sh config no-idea -fPIC | Aaron Faby <[EMAIL PROTECTED]> | | Implementation Specialist, PowerSchool, Inc. | | http://www.power

Error building on Compaq alpha with osf4.0f

2000-10-17 Thread Allan E Johannesen
> "dohoff" == dohoff <- Doug Hoffman <[EMAIL PROTECTED]>> writes: dohoff> I've run into a problem trying to compile openssl-0.9.6 on a Compaq dohoff> Alpha running OSF1 v4.0. The compiler is DEC C V5.9-008 on Digital UNIX dohoff> V4.0 (Rev. 1229). The ./config correctly identifies the os an

Re: compiling 0.9.6 with VC5

2000-10-17 Thread Michael Kurtinitis
I've had success adding the following line somewhere before the offending _asm block: #define rdtsc __asm _emit 0x0F __asm _emit 0x31 Looking, back, however, this is probably a MS specific bandaid. Cheers, Mike Kurtinitis [EMAIL PROTECTED] > From: Ales Pour <[EMAIL PROTECTED]> > Organization:

Re: Verify & Key/Passphrase callback issues

2000-10-17 Thread Lutz Jaenicke
On Tue, Oct 17, 2000 at 06:37:49PM +0200, [EMAIL PROTECTED] wrote: > 1. VerifyCallback cannot use X509_xxx functions. This is just taken from > the apps source of the OpenSSL-0.9.5a distribution. How or why it is not > working properly I cannot tell. > > static int VerifyCallback(int aniState, >

Re: Compile problem under NT4

2000-10-17 Thread Michael Kurtinitis
Jim, That message appears because of a bit of assembly in rand_win.c that uses an opcode not supported by the inline assembler. Specifically the Pentium opcode 'rdtsc' isn't recognized. Fortunately all you need to do is add the following somewhere before the _asm {} block (in OpenSSL 0.9.6 it's a

Error building on Compaq alpha with osf4.0f

2000-10-17 Thread dohoff - Doug Hoffman
I've run into a problem trying to compile openssl-0.9.6 on a Compaq Alpha running OSF1 v4.0. The compiler is DEC C V5.9-008 on Digital UNIX V4.0 (Rev. 1229). The ./config correctly identifies the os and hardware arch but when I do the make it blows out building SHA: make[2]: Leaving directory `/u

Re: Test CA structure

2000-10-17 Thread Dr S N Henson
[EMAIL PROTECTED] wrote: > > Hi, > > I've created a CA cert/key for testing but I want to be able to test a longer > cert chain. Does any one know what should be in the config file if I want to > create a CA cert req which I would sign with the root CA cert. I have tried: > > basicConstraints=C

Re: Having a problem with BIO_base64 in OpenSSL 0.9.6

2000-10-17 Thread Dr S N Henson
[EMAIL PROTECTED] wrote: > > Hello, > > > Specifically, I create a new BIO_s_mem. Write to it with either BIO_puts or > BIO_write. Then do a BIO_push(b64bio, mbio). Then BIO_read(b64bio, mybuf, > len). It returns -1. When I ask if I should retry it says yes, but there is > no output on the seco

Re: Move from Netscape to Openssl

2000-10-17 Thread Dr S N Henson
Ricardo Stella wrote: > > So with the CA's server's private key and cert (converted in pem format) > I would be able to use them as the CA for openssl, therefore issue certs > based on this ? > > Thanks... > Yes that should be possible. Steve. -- Dr Stephen N. Henson. http://www.drh-consul

Having a problem with BIO_base64 in OpenSSL 0.9.6

2000-10-17 Thread Edh
Hello, I'm trying to integrgate BIO_s_mem with BIO_base64. If I do a BIO_push(), then write to the returned value, the data is base64 encoded ok and I can retreive it using the ctrl supplied pointer. However, when I try the reverse, (read, thereby invoking a decode) I get no output. Specifically

Test CA structure

2000-10-17 Thread arehn
Hi, I've created a CA cert/key for testing but I want to be able to test a longer cert chain. Does any one know what should be in the config file if I want to create a CA cert req which I would sign with the root CA cert. I have tried: basicConstraints=CA:TRUE But in runtime verification it s

RE: Jsse client & openssl server

2000-10-17 Thread Sean Walker
It has been quite a while since I've written my own server, but the first thing I would do is add all ciphers to the server instead of restricting the server to one cipher like you have. When you get a connection, log the cipher that it connected with. Then you can limit it to just that one cipher

Installation on win32

2000-10-17 Thread Frédéric Donnat
Hi , I've already install openssl on linux with success and i'm trying to install it on win95. I've done each step according to the "install win32" file since i've to setup and the config files and certificates manually. What does this sentence mean ? On linux install you have to "certificate and

Verify & Key/Passphrase callback issues

2000-10-17 Thread m . teunissenvanmanen
Hello, I've encountered some problems using the OpenSSL toolkit. Unfortunately, I cannot seem to find the right answers, and I'm hoping if there's anyone out there able to help me. Using OpenSSL-0.9.5a and compiling with both Borland C++ & Linux/G++ and they share the same problems! 1. Verify

Re: compiling 0.9.6 with VC5

2000-10-17 Thread Steve
Sorry, got a crossed line there. (This stuff is completely making me go bald. ) Grin, Stephen. - Original Message - From: "Ales Pour" <[EMAIL PROTECTED]> > No, :-) > I meant - /G5 option isn't enough for VC5 to deal with Pentium > instructions in inline assembler? ___

SSL error

2000-10-17 Thread hasen
[EMAIL PROTECTED] wrote: > > Hi, > > I have a RedHat Linux 6.2 with apache-1.3.12-2 and openssl-0.9.5-2 > > I purchased a cryptographic key from Verisign for the site > www.superobra.com. > > Configured httpd.conf.ssl and put the site at production. > It works, transactions ar

SSS error

2000-10-17 Thread hasen
Hi, I have a RedHat Linux 6.2 with apache-1.3.12-2 and openssl-0.9.5-2 I purchased a cryptographic key from Verisign for the site www.superobra.com. Configured httpd.conf.ssl and put the site at production. It works, transactions are made adequatedly most times, but eventualy

Jsse client & openssl server

2000-10-17 Thread Mattias Marberg
Hello, I'm a newbie in openssl... I try to create a simple ssl client using jsse and a simple ssl server using Openssl (using example server serv.cpp). To make the communication even simpler I use cipher suites with no authentication (SSL_DH_anon_WITH_3DES_EDE_CBC_SHA for jsse & ADH-DES-CBC3-SHA

Re: compiling 0.9.6 with VC5

2000-10-17 Thread Jim Hud
I changed the code as follows, sorry it is not in diff format. Essentially remove the assembly language section and define and set tsc=0 which causes the later code to use another random gen method. static int have_perfc =1; static int have_tsc = 0;//add line #ifndef __GNUC__ /*

Re: compiling 0.9.6 with VC5

2000-10-17 Thread Ales Pour
Steve wrote: > The /G5 option does not exist for BC++ Ver3.0. I think it should be -5 > Stephen No, :-) I meant - /G5 option isn't enough for VC5 to deal with Pentium instructions in inline assembler? A. __ OpenSSL Project

Re: compiling 0.9.6 with VC5

2000-10-17 Thread Steve
- Original Message - From: "Ales Pour" <[EMAIL PROTECTED]> > Hmmm... so /G5 option (ntdll.mak) isn't enough? The /G5 option does not exist for BC++ Ver3.0. I think it should be -5 Stephen __ OpenSSL Project

Re: compiling 0.9.6 with VC5

2000-10-17 Thread Ales Pour
Steve wrote: > The line in question is an assembly instruction: rdtsc, which is a Pentium > (or beyond...) only instruction. You have to set your compiler options > accordingly. Having said this, that command causes havoc with BC v3.0 IDE Hmmm... so /G5 option (ntdll.mak) isn't enough? Ales ---

Re: compiling 0.9.6 with VC5

2000-10-17 Thread Steve
The line in question is an assembly instruction: rdtsc, which is a Pentium (or beyond...) only instruction. You have to set your compiler options accordingly. Having said this, that command causes havoc with BC v3.0 IDE (the command line compiler works OK with the appropriate flag) regardless of

RE: SSL_read() in non-blocking mode

2000-10-17 Thread Wallace, William
If the read was successful you should get the number of bytes back. If the result is <= 0 try calling SSL_get_error to see whether an error occured, or the read operation simply blocked waiting for more data. If the later is the case, do a select (or whatever) on the socket to monitor for the arri

SSL_read() in non-blocking mode

2000-10-17 Thread angeloc
I am using OpenSSL in non-blocking mode. It appears that a read operation always returns a value of <= 0. How can I determine the success of the read operation? cc any replies to [EMAIL PROTECTED] Angelo __ OpenSSL Project

Re: R: compiling 0.9.6 with VC5

2000-10-17 Thread Ales Pour
Albino Rossi wrote: > Hello, > try to remove the line 580 from rand_win.c. > Albino Rossi Hi, sure this helps :-) So it's not a crucial piece of code? Thanks! Ales __ OpenSSL Project http://www.op

R: compiling 0.9.6 with VC5

2000-10-17 Thread Albino Rossi
Hello, try to remove the line 580 from rand_win.c. Albino Rossi > -Messaggio originale- > Da: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]Per conto di Ales Pour > Inviato: martedì 17 ottobre 2000 15.45 > A: [EMAIL PROTECTED] > Oggetto: compiling 0.9.6 with VC5 > > > > Hello, > I'm try

How I can generate certificates to use with IIS 4.0

2000-10-17 Thread Luiz Carneiro
Hi... How can I use openssl to generate certificates to use with IIS 4.0? Thanks, Luiz Carneiro __ OpenSSL Project http://www.openssl.org User Support

compiling 0.9.6 with VC5

2000-10-17 Thread Ales Pour
Hello, I'm trying to build DLLs with VC5. Here's what happened: D:\Prac\_Misc\openssl-0.9.6>nmake -f ms\ntdll.mak Microsoft (R) Program Maintenance Utility Version 1.62.7022 Copyright (C) Microsoft Corp 1988-1997. All rights reserved. Building OpenSSL cl /Fotmp32dll\rand_win.obj -Ii

Re: Move from Netscape to Openssl

2000-10-17 Thread Ricardo Stella
So with the CA's server's private key and cert (converted in pem format) I would be able to use them as the CA for openssl, therefore issue certs based on this ? Thanks... Dr S N Henson wrote: > > Ricardo Stella wrote: > > > > We were using Netscape Cert. Server 1.01. It was it's own root CA.