RE: Resources about setting up CA?

2001-02-06 Thread Elisee NGAN TAMBA
Go to http://www.openca.org -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of LI CHEUK FAI Sent: Wednesday, February 07, 2001 8:41 AM To: [EMAIL PROTECTED] Subject: Resources about setting up CA? Hello, I have worked with Openssl to do various t

Resources about setting up CA?

2001-02-06 Thread LI CHEUK FAI
Hello, I have worked with Openssl to do various tasks like self cert signing by setting up simple CA with script sign.sh came with modssl. But if I am going to setup a formal CA for my company's internal use, I think I may need more preparation. For instance, I have to setup a LDAP server for C

Re: Direct read of RSA public key

2001-02-06 Thread Dr S N Henson
chris luchini wrote: > > I'm trying to do a modification of the /demos/sign/sign.c code. > > I had it working, but have managed to mess up my certificates/keys and > can't > seem to re-create ones that will function. > > 1) what I'd _like_ to do is generate an RSA private/public key pair and >

RE: /dev/random for Solaris x86 ?

2001-02-06 Thread Andy Malato
I usually just use a file with random data, it works fine for configuring apache-ssl. ---Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Wyman Eric Miles Sent: Tuesday, February 06, 2001 7:02 PM To: [EMAIL PROTECTED] Subject: Re: /dev/rando

Direct read of RSA public key

2001-02-06 Thread chris luchini
I'm trying to do a modification of the /demos/sign/sign.c code. I had it working, but have managed to mess up my certificates/keys and can't seem to re-create ones that will function. 1) what I'd _like_ to do is generate an RSA private/public key pair and then read them in directly, without ha

Re: SUNWski package ?

2001-02-06 Thread Wyman Eric Miles
SUNWski is Solaris 2.5.1/2.6 only, last I heard. I tried it under 7 and it does run (in 32-bit mode), though not correctly and not in 64-bit mode at all. Under Solaris, ANDIrand is a better choice. On Tue, 6 Feb 2001, Ricardo Stella wrote: > > I downloaded the 105710 patch to install the SUN

Re: /dev/random for Solaris x86 ?

2001-02-06 Thread Wyman Eric Miles
We just compiled ANDIrand under Solaris 8/INTEL and it works fine. On Tue, 6 Feb 2001, Ricardo Stella wrote: > > What solution is out there for the Intel port of Solaris 7 or 8 ? > > Thanks... > > -- > -- > Ricardo Stella

Installation Problems

2001-02-06 Thread Julie Ruiz
Hello my name is Julie Ruiz I am trying to install the OpenSSL but it fails. I am working on Windows NT Workstation 4.0 so I installed the Mingw32 package. GNU make and Perl for Win32 I followed the intructions for the win32 platform working with the GNU C (Mingw32) but when I try to compile th

SUNWski package ?

2001-02-06 Thread Ricardo Stella
I downloaded the 105710 patch to install the SUNWski package. Being a patch, it seems the goal here is just to install the SUNWski portion which comes as a package, correct ? So I did (ie installed just the SUNWski pkg). But it ain't working... I do have a Solaris 7 system in which I did inst

/dev/random for Solaris x86 ?

2001-02-06 Thread Ricardo Stella
What solution is out there for the Intel port of Solaris 7 or 8 ? Thanks... -- -- Ricardo Stella O.I.T. (609)896-5000 x7436 _suAve_ Rider University *** SPAM

Re: can I obtain certificate expiry dates using openssl?

2001-02-06 Thread Greg Stark
Yes, openssl can help here. When you build the openssl package a number of useful utilities are also built along with the libraries. One of these is called openssl. If cert.pem is a certificate in PEM format, then openssl x509 -in cert.pem -dates -noout will give you two dates, the second of whi

Re: SSL samples under win32

2001-02-06 Thread lucian
I used free() for dealocation stuff, because Free() isn't any more in windows. I have win nt and things seem to work fine. But let me make some tests tomorrow. Ok? The real problem for me are client_s and server_s witch could not work on my win nt machine. I think that those examples are made to w

can I obtain certificate expiry dates using openssl?

2001-02-06 Thread Dicks, Gareth M
Hi, I'm after some advice and tips please! I want to write a simple script (ksh?) that interrogates the SSL certificates on our Web servers (NES 3.6) and automatically alerts via unicentre when the certificates are close to expiring. I've been told that openssl can provide the tools to obtain t

Re: SSL samples under win32

2001-02-06 Thread Gleison Santos
Hi, The problem is in your Makefile (include order of ssl and crypto). Try a Makefile something like: CC=gcc CFLAGS= -g -I../../include -I../../ssl -I../../crypto -Wall LIBS= -L../.. -lssl -lcrypto EXAMPLES=cli all: $(EXAMPLES) cli: cli.o $(CC) cli.o -o cli $(LIBS) clean: rm -f $(EXAMPLES

RE: make not found

2001-02-06 Thread lgazis
However, ./config is a shell script which calls ./Configure, which itself is a shell script which calls "make". So Richard's account of the error seems likely to be the actual cause. Lynn Gazis -Original Message- From: gavin.java [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 06, 20

Re: make not found

2001-02-06 Thread gavin.java
It would be obvious if I was using the "make" command but what I'm trying to do is install openssl using the ./config and that's the error I'm receiving. Gavin > From: Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> > Date: Tue, 06 Feb 2001 18:16:50 +0100 (MET) > To: [EMAIL PROTECTED], [EMAIL

OK, dumb question ( very sorry!)

2001-02-06 Thread Greg_Banschbach/Sandata%SANDATA
Ok, I see my question posted in the mailing list. and I want to make a follow up question. How? Very sorry . Sincerely, Greg __ OpenSSL Project http://www.openssl.org User Support Maili

Re: make not found

2001-02-06 Thread Richard Levitte - VMS Whacker
From: "gavin.java" <[EMAIL PROTECTED]> gavin.java> I'm trying to install openssl0.9.5a for OSX Server 1.2 and Apache 1.3.14. gavin.java> During the ./config I'm receiving an error "make not found". gavin.java> What is going on ? That should be obvious from the message. It tries to use the prog

Re: replacing SCO bc with GNU bc, but.....

2001-02-06 Thread simos
On Tue, 6 Feb 2001 [EMAIL PROTECTED] wrote: > > Hi guys, > > I had to install GNU bc on SCO Openserver 5.0.5, when the > make test failed on the "bc" portion.The GNU bc lives in > /usr/local/bin > as you would expect. I don't want to alter the OS or filesystems. But > I do want ope

make not found

2001-02-06 Thread gavin.java
I'm trying to install openssl0.9.5a for OSX Server 1.2 and Apache 1.3.14. During the ./config I'm receiving an error "make not found". What is going on ? Gavin __ OpenSSL Project http://www.openss

Re: replacing SCO bc with GNU bc, but.....

2001-02-06 Thread Boyd Lynn Gerber
On Tue, 6 Feb 2001 [EMAIL PROTECTED] wrote: > I had to install GNU bc on SCO Openserver 5.0.5, when the > make test failed on the "bc" portion.The GNU bc lives in > /usr/local/bin > as you would expect. I don't want to alter the OS or filesystems. But > I do want openssl to use GNU

Re: Man in the middle attacks

2001-02-06 Thread Louis LeBlanc
You are correct about IE 5.x not checking the CRL by default, but be careful in using this. I recently found a bug with Windows 95, 98, and NT where if you checked the box in Internet Options to tell IE to verify the CRL, it would do so, but if a CRL link was provided, all other certificate verif

replacing SCO bc with GNU bc, but.....

2001-02-06 Thread Greg_Banschbach/Sandata%SANDATA
Hi guys, I had to install GNU bc on SCO Openserver 5.0.5, when the make test failed on the "bc" portion.The GNU bc lives in /usr/local/bin as you would expect. I don't want to alter the OS or filesystems. But I do want openssl to use GNU bc without changing anyones PATH environme

RE: Web Page containing images runs slow over ssl connections

2001-02-06 Thread Thomas Bätzler
Hi, > Walgamotte, David [SMTP:[EMAIL PROTECTED]] asked: > When ever I install the verisign certificate on a website it slows down > dramatically. This site contains > graphical menus in the SSL sections. [...] > Any work around or fix for this > Which server software are you running and

RE: random state, openssl.cnf and RAND_edg("/var/run/egd-pool")

2001-02-06 Thread Michael Wojcik
> From: John Hughes [mailto:[EMAIL PROTECTED]] > > Sounds like the threading engine in UW is using timer interrupts. > > This may cause other "slow" system calls to EINTR-out, too, so > > OpenSSL may need EINTR loops around socket reads and writes (if > > it doesn't already have them). > Nope,

RE: PERL and secure Sockets

2001-02-06 Thread Fisher, James
Install CRYPT::SSLeay how to - Open dos prompt - type ppm - type "install Crypt::SSLeay" - type "y" - done Then you can just use a normal LWP request and just put an s on the end of https. If you need lower level functionality you will have to get the io-socket-ss

Re: SSL samples under win32

2001-02-06 Thread Juan Carlos Castro y Castro
No, the space is allocated by X509_NAME_oneline(). In the demo source, it's deallocated by Free() (with a capital F), but this function is not available in Win32. Using free() (lowercase F) causes a GPF. My doubt is, what should I use? Juan lucian wrote: > Hi Juan! > I spretty simple: with free

Re: Key length with IE and Xenroll?

2001-02-06 Thread Maxime Dubois
Thanks for help, It worked, I have now a certificate with a 1024bits key. Now I need to make sure all users will have an appropriate windows version (with the good CSP). Regards Maxime. > Maxine, > > See if the following snippet works. > ... > > codebase="xenroll.dll" > id=Enroll

Re: Secure File Uploads

2001-02-06 Thread simos
On Tue, 6 Feb 2001, Matt Oldham wrote: > > Pardon the ignorant question, but I am trying to figure out if Open SSL is what I am >looking for. I need a method of allowing users to performm a secure file upload via >a web page. Ideally, I want an open source (free) solution. Is OpenSSL what I

Re: Secure File Uploads

2001-02-06 Thread Jeffrey Burgoyne
You can do a file upload in normal HTTP communication with the upload feature. If you have a secure web server, then it would be secure as well. Look at the two problems as seperate and distinct. First make your server secure (it may already be secure) and openssl is a good choice (if you are usi