SSL-MZ telnetd - All networks ports in use.

Hello, I use SSL-MZ telnetd on HP-UX 11.00. When the number of connected clients reach 150, I get an error "All networks ports in use", although I have enough devices in /dev/pty (around 600). Has anyone an idea where the problem could be? Michael _

smime message problem

Hi, Here is my problem: I have written some code that generates smime message (encrypted message). When I am try to read this message with Netscape under Linux or with "openssl smime ..." all is good, but I can not read this message with Netscape under Windows or with Outlook. They both say that

Re: MS Crypto API

I, I've generated a PKCS#7 using CryptoAPI (NTSP6) using CryptSignMessage(). This PKCS#7 is verified by PKCS7_Verify() function call. The only problem I found is that using a detached signature the CryptoAPI generated signature hasn't a PKCS#1 type-1 padding and PKCS7_Verify() will fail. In all my

STL and openSSL don't mix?

Hello everybody, I've written some C++ stuff, and some wrappers for OpenSSL which compile fine on VC++ 6.0, however when I put them together the compiler is complaining because openSSL uses variable names like "modulus" and "list" which are also used by the STL stuff. Anyone know a way around t

Re: CRL Distribution Points

All you need is to modify the openssl.cnf and insert a line like this in the Certificate Extensions section crlDistributionPoints=URI:http://www.my.com/my.crl,URI:http://www.oth.com/my.crl See doc/openssl.txt in the distribution source tree for more information. Glenn Horton wrote: > >

Re: Programmers reference for Openssl APIs

I was discussing this with some collegues the other day; if someone wrote a book called "Implementing SSL using openSSL" they would make an absolute killing. Why doesn't anyone do it? Tat. Louis LeBlanc wrote: > > Lutz Jaenicke wrote: > > > > On Wed, Dec 06, 2000 at 12:36:47PM -0800, Hegde, R

Re: cert signing - using -config with x509

I, some time ago a wrote a this patch to ca.c. This adds a new option "-pkixDN". When used this option strips the Email from the DN. Also you need to modify openssl.cnf to make a copy of the email address in the SubjectAltName ("subjectAltName=email:copy"). "Dr. Donal O'Mahony" wrote: > Also -

RE: CRL Distribution Points

Hello, > All you need is to modify the openssl.cnf and insert > a line like this in the Certificate Extensions section > > crlDistributionPoints=URI:http://www.my.com/my.crl,URI:http://www. > oth.com/my.crl > > See doc/openssl.txt in the distribution source tree for more > information. Is a ht

Re: SSL-MZ telnetd - All networks ports in use.

On Mon, Apr 02, 2001 at 07:39:20AM +0200, Michael Sramek wrote: > I use SSL-MZ telnetd on HP-UX 11.00. When the number of connected > clients reach 150, I get an error "All networks ports in use", although > I have enough devices in /dev/pty (around 600). Has anyone an idea where > the problem cou

Re: STL and openSSL don't mix?

Tat, I had the same problem until I changed the include order of the header files to look like this: // 1. Include OpenSSL-stuff extern "C"{ #include ... } // 2. Include STL-stuff #include #include #include ... // 3. Specify namespace using namespace std; Basically, you shouldn't include

Re: CRL Distribution Points

You can add any URL or URN identifiers. However, some applications may or may not recognize your identifier. If your application is Netscape Navigator or IE, there are no problems sice both supports LDAP URL schema. Both LDAP and HTTP are the most widely used. Reiner Buehl wrote: > > Hello, >

Re: SSL-MZ telnetd - All networks ports in use.

I`ve tried it, the output seems like this: time(seconds)unlimited file(blocks) unlimited data(kbytes) 1048576 stack(kbytes)131072 memory(kbytes) unlimited coredump(blocks) 4194303 nofiles(descriptors) 1000 There shoudln`t be a problem, I think... Best r

Re: SSL-MZ telnetd - All networks ports in use.

On Mon, Apr 02, 2001 at 09:50:15AM +0200, Michael Sramek wrote: > I`ve tried it, the output seems like this: > > time(seconds)unlimited > file(blocks) unlimited > data(kbytes) 1048576 > stack(kbytes)131072 > memory(kbytes) unlimited > coredump(blocks) 419

Solaris 2.6 compilation probs

Hi all, I need to compile openSSL 0.9.6 to work with KDE 2.1.1. I am using Solaris 2.6, but usually use gnu gcc and binutils when compiling software on my workstation. This would not install (compile was fine) openSSL. When I had a look in the Makefile, there was something about not using gnu

Extra trailing bytes in DES output

Hi all, I am new to crypto so please allow my ignorance. I use "openssl enc -des ..." to encrypt data and the output always has 8 extra trailing bytes. For example, if the length of input data is 8 bytes, the output is 16 bytes. If the input is 16 bytes long, the output is 24 bytes. Can someone

RE: installation problem on win95/98

I had this problem earlier when I was trying to compile it for Win2K. Are you using VC++? If so, go into the \bin directory and run vcvars32.bat. Evidentally, VC++ doesn't set up the environment very well. You need to run this in the same dos session right before you run nmake. Try that out an

non-blocking BIO

Hi! I was wondering how to set non-blocking mode on in my helper application (using OpenSSL). I found a BIO example at: http://www.openssl.org/docs/crypto/BIO_f_ssl.html# which worked fine until I tried to make it nonblocking by adding: BIO_set_nbio (sbio, 1); in the code, right before

OpenSSL client-server connectivity problem

Hi, i downloaded the openssl cryptographic library and toolkit from the openssl web site. The compile and make has been done to produce dlls and lib files. I have a openssl server running on my machine (port 4433). Now when i try to make a client using: openssl s_client -connect (my_server_i

Re: A Question

A QuestionPlease check out (http://www.openssl.org/docs/ssl/SSL_get_error.html#) and collect all possible error information before posting, including the underlying socket error code if applicable. Thank, _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED]

Need info about SSL

Hi I'm Yoann Thomas from Wellincom in France. I'd like to know if SSL protocol can be used in multi card application. Can SSL protocol manage more that one crypto card in a computer. Thank you for your answer. Best regards yoann

Re: OpenSSL client-server connectivity problem

What is your command line for the server end? Tat. Puneet Parashar wrote: > > Hi, > > > i downloaded the openssl cryptographic library and toolkit from the openssl > web site. The compile and make has been done to produce dlls and lib files. > I have a openssl server running on my machine (p

SSLeay_MSVC5_hack

Hello, Does anyone know the reason for the SSLeay_MSVC5_hack in cryptolib.c. In what way is it supposed to work? There seems to be a problem when using sprintf and windows2000 and the non-debug-dlls of libeay32.dll and ssleay32.dll. Thanks, Thomas _

API to write certificates to certificate file

I'm implementing OpenSSL in a browser. After receiving a server certificate, is there an API for writing this to the certificate database (file) ? Thanks, Graeme __ OpenSSL Project http://www.

[ANN] HOWTO: Programming S/MIME in Python with M2Crypto

Hi, I'm pleased to announce the following: HOWTO: Programming S/MIME in Python with M2Crypto M2Crypto is a Python interface to OpenSSL. It makes available to the Python programmer SSL functionality to implement clients and servers, S/MIME v2, RSA, DSA, DH, symmetric ciphers, mes

additional certificate

hi,   i'm managing a Tis server that implements a Secure Socket on windows platform . I have used a 9.4 open ssl source dlls ported on windows platform. The server performs a 48 bit authentication by passing a PEM certificate to the client side. However i'd like to realize a 128 bit authent

My Client cert goes into "Other people"

Hello. I have looked everywhere but could not find any information. My problem is that my client certificates ends up in "Other People" when I install then with IE 5. How can I make them go into the "Personal" folder? I use > req -new -newkey rsa:512 to make the client cert request and >

RE: My Client cert goes into "Other people"

Hi, The reason that ur certificate goes to "Other People" group as the Microsoft Crytographic Service Provider does not have the private key corresponding to the public key present in the certifcate. In oredr to do that if u can have a certificate file in pkcs#12 specified format, which will have

libfisdef.h missing

I am trying to build the openssl-0_9_6a-beta3. I have a VAX running vms 6.2 and Compaq C V6.2-003. I get the following error when compiling and cannot find the libfisdef.h in any directories. Can someone point me to this file?: $ CC/OBJECT=SYS$DISK:[-.VAX.OBJ.CRYPTO]DSO_VMS.OBJ SYS$DISK:[.DSO]ds

Problem generating certificate

Hi All, I am doing a __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Problem generating certificate

Hi All, I am doing a c:\openssl\bin\openssl.exe x509 -req -CAkey c:\openssl\bin\ca.key -CAcreateserial -CA c:\openssl\bin\ca.crt from within my java program using Runtime.exec I am streaming the CSR string from an html form to the inputstream of the openssl program.. But everytime I get the f

RE: Problem generating certificate

Could the problem be that your "CSR string" contains Java characters (16-bit UNICODE) when you really want 8-bit byte data? Instead of Runtime.exec'ing the openssl.exe, why not run a test program that saves stdin to a file? Then you could actually see what your sending to openssl instead of assu

RE: non-blocking BIO

Did you do a select() after the BIO_do_connect()? Steven -- Steven Reddie <[EMAIL PROTECTED]> Senior Software Engineer Computer Associates Pty Ltd (Australia) > -Original Message- > From: Wirta, Ville [SMTP:[EMAIL PROTECTED]] > Sent: Monday, April 02, 2001 11:54 PM > To: '[EMAIL PROTECT