Re: error 80092004 in IE 5.5

Hi, I have installed every available patch to Windows and IE. I can import my CA certificates without problems, they are high keylength (1024). The user certificates are in pkcs7 format and fail every time with error 80092004. I tried to set all the IE internet security options to low, but no

Re: cipher ID values

There is no such list by intention. The authors of the spec didn't wanted to allow anybody to sample their own combination of different mechanisms which might be weak in the sum. So the decision was taken to define cipherSUITES. For your own purposes you might want to use values from the number

Re: error 80092004 in IE 5.5

Hi, For me after installing the High encryption patch it work fine. MSIE and also Netscape (before 4.73) already support CA Certificate with 1024 bits without installing any patch. You should check it out again. Regards, Sorot Daniel Hirscher wrote: Hi, I have installed every available

Re: Porblem installing PKCS#7 (user cert + CA cert) into Netscape 4.7

Ma'rt Laak wrote: Hello! Preface: I can successfully create and install client certificate into netscape from SPKAC request: openssl ca -config X -spkac X -out client.crt -days X and sending it back to browaser with header: Content-Type: application/x-x509-user-cert Question:

Re: RSA read and write to and from file

[EMAIL PROTECTED] wrote: Hi, I am having a problem with the RSA functions of the openssl package. I want to generate an RSA key pair. Write them to disk and use them later (this all in linux/AIX) I managed to generate a keypair. But then the problem starts. I cant find any functions

RE: RSA read and write to and from file

Title: RE: RSA read and write to and from file If you have a private key in an RSA structure and just want to write out the public components then you can use PEM_write_RSAPublicKey() and read it in with PEM_read_RSAPublicKey(). The key read back will then just contain the RSA public

How do I get the parent cert of the ssl peer?

Hi list! I'm currently implementing support for CRLs in our system. The CRLs are signed by the same CA that issued the certificate of the peer. Therefore, to verify the CRL, I need to find the certificate of the parent of the peer that I'm communicating with. During an SSL session, I can use

Question about SSL detection

Hi, All Is there a way in Perl or CGI to determine whether the browser is capable of using SSL, and, also, if the browser might have turned off the SSL option. I'm trying to send someone to either a secure or non-secure part of our site automatically. Any help appreciated. Jeff Vendetti

[Announce] M2Crypto 0.05

Hello, I am pleased to announce that M2Crypto 0.05 is now available: http://www.post1.com/home/ngps/m2 M2Crypto is a Python interface to OpenSSL's crypto, SSL and S/MIME functionality. What's in: - Compatible with both Python 2.0 and Python 1.5.2. - PyUnit unit tests; currently 40

RE: openssl 0.9.6

Louis, Thanks for the site.. As I am not a Programmer (per say) the 00README is Vague to me.. I did a make and all seems fine.. But instructions through me off after that.. Are there better instructions somewhere else.. or does someone already have some DOTHIS 1-5 instructions. Pat

i2d_RSAPublicKey

Hello, all. I have executed this instruction: char keystr[1024]; RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); i2d_RSAPublicKey(rsa,(keystr)); But resultant keystr is zeroed. Why? I have verified the RSA key pair and they are correct.

Re: i2d_RSAPublicKey

Rafa Marín López wrote: Hello, all. Hello, I have executed this instruction: char keystr[1024]; RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); i2d_RSAPublicKey(rsa,(keystr)); keystr is a I/O parameter, pointing past the DER coded key. You must use something like: char *ptr

Re: Solaris64 compile.

On Tue, Nov 28, 2000 at 09:13:43AM -0800, Bill Browning wrote: Has anyone done a Solaris64 compile with openssl 0.9.6 ? I have tried to do so (commands errors listed below) but am at a bit of a loss as to why this compile type works with the 0.9.5a tar file and not with the 0.9.6 tar file.

d2i_RSAPublicKey

Hello. RSA * d2i_RSAPublicKey(RSA **a, unsigned char **pp, long length); What does length param mean? Thank you. __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: d2i_RSAPublicKey

Rafa Marín López wrote: Hello. Hi. RSA * d2i_RSAPublicKey(RSA **a, unsigned char **pp, long length); What does length param mean? length is the length of the *pp data, that means it is the number of bytes that you want to convert from DER to internal form, starting at location *pp.

Re: OpenSSL connection problem

On Thu, Nov 30, 2000 at 01:43:16PM +0100, Wolfgang Marczy wrote: I have some problems establishing a SSL connection. I am writing on an SMTP server, which should accept SSL connections. I am sending mails with Netscape 4.7 (and Microsoft Outlook) over SSL, but the connection fails, because

Re: openssl 0.9.6

On Thu, Nov 30, 2000 at 11:16:19AM -0500, Zandi Patrick S TSgt AFRL/IFOSS wrote: Louis, Thanks for the site.. As I am not a Programmer (per say) the 00README is Vague to me.. I did a make and all seems fine.. But instructions through me off after that.. Are there better instructions

RE: Crypt::SSLeay Problem

Check and see if the file libssl.a is in the /usr/local/ssl/lib directory because it looks from your error message that it is missing that file. Ramdas -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 30, 2000 10:28 AM To: [EMAIL PROTECTED]

Checking SSL3 compliance

Hi Is there some utility out there which verifies if your application is following the SSL3 specification in terms of Ciphers/Handshakes etc? The intent is to verify that two applications are actually talking SSL3 without digging into the application code. Thanks ramdas

Re: Looking for an HTTPS client for NT C/C++

Paul, Thanks for your sage words. :-) Cheers, Geoff On Wed, 29 Nov 2000, Paul Allen wrote: I'm starting to get really tired of this useless discussion. I cannot imagine that it is the intent of the GPL to deny software authors acknowledgement for their work. It is simply not conceivable

Re: Checking SSL3 compliance

On Thu, Nov 30, 2000 at 11:02:44AM -0800, Hegde, Ramdas wrote: Is there some utility out there which verifies if your application is following the SSL3 specification in terms of Ciphers/Handshakes etc? The intent is to verify that two applications are actually talking SSL3 without digging

freeing memory

Hi, I'm always one for forgetting to give things back that I've used, like memory in my programs :-( I'm beginning to get to grips with openssl but before I proceed I would like a few pointers on freeing memory within openssl. If I consider the program below there are a few things I need

RE: Crypt::SSLeay Problem

Thanks for the response on the make problem. Yes, I had checked before sending my question and confrimed after I received your note that libssl.a is in /usr/local/ssl/lib. Size of the module is 293336 with chg. date of Nov. 30.

handling non-block sockets for win32

i am hoping win32 developers can lend out a hand. i cannot determine how to handle SSL_read and SSL_write using WSAAsyncSelect. for example: if i create a socket, and register it with WSAAsyncSelect for FD_READ and FD_WRITE, i can generate a windows' message map like the following: [in this