i2d_RSAPublicKey, d2i_RSAPubliKey.

2000-12-01 Thread Rafa Marín López
Hello. I have a problem with this situation: I have this code in function A: char keystr[1024]; ... RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); unsigned char *ptr; int derlen ptr=keystr; derlen=i2d_RSAPublicKey(rsa,&ptr); ptr=keystr; In a function B: unsigned char *ptr;

padding errors with RSA :(

2000-12-01 Thread mjvolders
Hi, When I try to encrypt/decrypt with RSA I get errors, mainly padding errors. When I use RSA_PKCS1_PADDING i get unknown padding type when decrypting crypted text. When I use RSA_NO_PADDING i get an error that my *from is smaller then *to. I don't understand this error. isn't it OK to have a b

Lack of Documentation

2000-12-01 Thread cronus hades
I have followed the small ammount of documentation that came with OpenSSL and Apache-SSL but I still haven't a clue how to create a certificate - what is needed file wise and how to install them when I create them... I am getting this error message but don't even know where to start looking for a

https not working with IE5.5 high encryption and Verisign

2000-12-01 Thread Scott_Anderson
Hello anyone know why SSL not working on the server once i upgraded my browser to IE5.5 1- the server doesn't even seem like it is there at all with https: I don't get cert warning just get error page from browser dns no error log on system. 2- some people with IE5.5 can access the server some c

Net::SSLeay EGD patch

2000-12-01 Thread Ed Kubaitis
Hello all, Attached is a patch that adds OpenSSL RAND_egd support to Net_SSLeay.pm-1.05. With this patch, Net_SSLeay built with OpenSSL 0.9.6 passes 'make test' on a system without /dev/urandom: SunOS 5.6 Generic_105181-06 sun4u sparc SUNW,Ultra-2. (However, it hasn't been tested in production.)

Entrust certificates with Apache/openSSL

2000-12-01 Thread Aurobindo (Robin) Sundaram (+1 512 331 3743)
Hi, We're having problems loading a custom certificate into an Apache web-server. Has anyone seen these errors, and if so, how do we fix them? It appears to be an Entrust/openSSL issue, since Verisign certs can be loaded. Apologies if this question is not on the list's charter. Thanks, Robin

Re: Entrust certificates with Apache/openSSL

2000-12-01 Thread Richard Levitte - VMS Whacker
From: "Aurobindo (Robin) Sundaram (+1 512 331 3743)" <[EMAIL PROTECTED]> sundaram> We're having problems loading a custom certificate into an sundaram> Apache web-server. Has anyone seen these errors, and if so, sundaram> how do we fix them? It appears to be an Entrust/openSSL sundaram> issue, si

Re: Looking for an HTTPS client for NT C/C++

2000-12-01 Thread Deepak Taneja
Hello , i'm using Win95,Vc++ I'm getting problem in compiling the RSA,SHA,HMac,DH algo . Is HMAC is necessary after compuding the digest from md5 . Have u compiled the openssl library successfully. If yes then which OS and Which compiler thanx & regards Deepak Vadim Fedukovich wrote: >

i2d_RSAPublicKey,d2i_RSAPublicKey

2000-12-01 Thread Rafa Marín López
Hello. I have a problem with this situation: I have this code in function A: char keystr[1024]; ... RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); unsigned char *ptr; int derlen ptr=keystr; derlen=i2d_RSAPublicKey(rsa,&ptr); ptr=keystr; In a function B: unsigned char *ptr;

Re: ADD : read and write RSA keys

2000-12-01 Thread Ng Pheng Siong
On Fri, Dec 01, 2000 at 09:05:23AM +0100, [EMAIL PROTECTED] wrote: > first when I export the public key with PEM_write_RSAPublicKey() or > PEM_write_PUBKEY() > it is impossible to read it in via PEM_read_bio_RSAPublickey(). I get the > error "EXPECTING PUBLIC KEY", why ?? If you write with PEM_wr

How can I unsubscribe?

2000-12-01 Thread Joao Santos
Thanks  

RE: Crypt::SSLeay

2000-12-01 Thread Ron . W . Flolid
I posted this question previously and had only a single response. My hope is that someone else has seen this problem and might be so kind as to offer some suggestion for resolution. I'm trying to install the Crypt::SSLeay module and have a problem with the make in that I receive a failure indicati

Yet another question about client side session caching . . .

2000-12-01 Thread Louis LeBlanc
Ok, I have a general idea of how to manage my own client side caching. My client already maintains a record for each server it connects to, and can store either a copy of the session, or a pointer to that session back in the SSL_CTX session cache. Which is better? I am trying to preserve the ca

error in during handshake

2000-12-01 Thread Fentony Sudjono
Hi, I've downloaded a source that interface openSSL from Java. The program itself works well under LINUX and Windows. Under windows i compiled the program and openssl as dll. And on LINUX i compiled it as shared objects. I did the same on Solaris, but when i tried to connect to https site, it th

Problem using domainComponent oid

2000-12-01 Thread Peter J Slot
Hej, When using an external oid file containing -- 0.9.2342.19200300.100.1.25 DC domainComponent -- Generating a csr gives the following correct subject: -- Subject: DC=DK, DC=BAELUM, OU=Servers, CN=Baelum CA Authority -- When generating a a self signed crt shows the oid in the subject an issue

*.o files

2000-12-01 Thread Mohamed Aly
I just downloaded OpenSSL and was trying to compile it usemg MAKE. It seems that I should have *.o files ( like bn_asm.o) as I understand from the Makefile, however the tar file didn't have any .o files, Where can I find these files? Mohamed Aly Systems Analyst Pason Systems Corp. Calgary, Canada

Re: *.o files

2000-12-01 Thread Sean Walton
You shouldn't have *any* .o files. All files in the tar file are original source so your make should create them. If the make did not produce them, you may have a problem with your configuration. -Sean Walton Mohamed Aly wrote: > I just downloaded OpenSSL and was trying to compile it usemg M

Re: Crypt::SSLeay

2000-12-01 Thread Lutz Jaenicke
On Fri, Dec 01, 2000 at 07:40:57AM -0600, [EMAIL PROTECTED] wrote: ... > libssl.a is in /usr/local/ssl/lib. The default library that I use is > /usr/local/ssl. The full results of the make are included below. I would > appreciate any and all commented regarding this problem. BTW. I'm trying to >

Re: Yet another question about client side session caching . . .

2000-12-01 Thread Louis LeBlanc
Here I go responding to my own post again. Now I know why there were no answers. Seems I missed it the last time it was posted. I think I have it now. Thanks all. L Louis LeBlanc wrote: > > Ok, I have a general idea of how to manage my own client side caching. > > My client already maintain

Maybe this is a more intelligent question . .

2000-12-01 Thread Louis LeBlanc
Not so much session caching this time, but cache stats. Is there a way to reset these other than directly accessing the structure members - for instance when the cache is purged? I noticed they did not get reset when the cache gets purged using SSL_CTX_flush_sessions(ssl_ctx,0). I also did not f

Open SSL on VxWorks based Pentium platform?

2000-12-01 Thread David Neiss
Has anyone ported the Open SSL libraries to be compiled for a Pentium processor running VxWorks with the gnu toolset? If so, would you share your build flags and "Configure" file modifications? Are there any issues that you ran into in getting the code to run on target? thanks for any info. _

how to add x509v3 extension

2000-12-01 Thread Kikuyo Nagamatsu
Hi all, I am a very beginner of OpenSSL. I want to add one of x509v3 extensions (AuthorityInfoAccess) to a certificate, but I can't. How can I know the way to add extensions? Is there some document? Or,if there is someone who did it, can you show me the way? (I'm using 0.9.5a) Now I have two p

Re: how to add x509v3 extension

2000-12-01 Thread Dr S N Henson
Kikuyo Nagamatsu wrote: > > Hi all, > I am a very beginner of OpenSSL. > > I want to add one of x509v3 extensions (AuthorityInfoAccess) > to a certificate, but I can't. > How can I know the way to add extensions? Is there some document? > > Or,if there is someone who did it, can you show me t

random key problem

2000-12-01 Thread Fentony Sudjono
Hi I ran "openssl s_client -connect localhost:443 -state" to test my openssl installation on solaris, and here is the output I got from the box: unable to load 'random state' This means that the random number generator has not been seeded with much random data. Consider the RANDFILE environment

Re: how to add x509v3 extension

2000-12-01 Thread Kikuyo Nagamatsu
Thank you for your rapid reply, I'm going to read the openssl.txt very well. (really to say, I could not understand that meaning well..I'm sorry.) When I made a self-certificate using following command, openssl req -x509 -newkey rsa:1024 -keyout selfkey.pem -out selfcert.pem I can find