Re: Did anybody execute openssl with PHP?

2001-07-15 Thread Maxime Dubois
Hi and thanks for your reply, I finally resolved it: The problem comes from the "openssl ca" command, I find that all outputs are sent to bio_err instead of standard output, and that's confusing PHP/IIS. thanks again Regards Maxime - Original Message - From: "Brad House" <[EMAIL PROTEC

no shared cipher

2001-07-15 Thread Damitha Bogahawatta
I have removed demoCA directory and created new CA hierarchy using CA.pl -newca command. Then I have created server and client certificates using following commands. CA.pl -newreq CA.pl -sign I tried CA.pl -verify command for both server and client certificates and both were ok. When I tried to

Re: SSL reconnect problem

2001-07-15 Thread robert
- Original Message - From: Lutz Jaenicke <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 05, 2001 4:29 AM Subject: Re: SSL reconnect problem > On Thu, Jul 05, 2001 at 10:38:09AM +0800, Ng Ying Chyn wrote: > > The SSL client is able to connect for the first time, but whe

Re: Export questions.

2001-07-15 Thread Rich Salz
> knowledge than I of the current US crypto export laws. You can find out everything you need from the web pages of the US Bureau of Export Administration. It can be tough going. Don't take free advice, especially from non-lawyers. /r$ -- Zolera Systems, Securing web services (XML, SO

Re: OpenSSL Security Advisory: PRNG weakness in versions up to 0.9.6a

2001-07-15 Thread Kris Kennaway
Is it just me, or is this advisory not linked to on the main webpage? Kris PGP signature

RE: win32 + SSL_read + SSL_ERROR_SYSCALL

2001-07-15 Thread Reddie, Steven
I once saw something similar when using the Win32 pthreads library for the multithreaded app.  pthread_self called TlsGetValue (I think) which resets the error value.  pthread_self was being called when the error stack logged the error.   -Original Message-From: Thomas Jongepier [ma

Re: Did anybody execute openssl with PHP?

2001-07-15 Thread Brad House
Or how about using popen ?? you might have to specify an absolute path as well. -Brad Grant wrote: > > I am trying to execute this command "openssl ca -batch -msie_hack -in > > req.pem -out crt.pem -config myconf.cnf -key "mykey" " in a PHP sript with > > the exec function but the output of the

Re: Did anybody execute openssl with PHP?

2001-07-15 Thread Grant
> I am trying to execute this command "openssl ca -batch -msie_hack -in > req.pem -out crt.pem -config myconf.cnf -key "mykey" " in a PHP sript with > the exec function but the output of the command that should be retained in a > variable is partially sent to the output (the web page) causing disp

[Crypt::SSLeary] problems invoking proxy

2001-07-15 Thread Clifton Chan
Hi, I apologise in advance if this is a really simple query, but I have been trying all day to get a perl script to fetch content from an https page. I cannot get the lwp-ssl-test script that comes with the Crypt-SSLeay-0.29 distribution to work with a proxy; i.e. -proxy . When I go: ./lwp-s

Re: SSL_get_rfd() and SSL_get_wfd()

2001-07-15 Thread Richard Levitte - VMS Whacker
From: "Michal Trojnara" <[EMAIL PROTECTED]> Michal.Trojnara> Dear OpenSSL maintainers, Michal.Trojnara> Michal.Trojnara> Two of OpenSSL functions: Michal.Trojnara> int SSL_get_rfd(SSL *ssl); Michal.Trojnara> int SSL_get_wfd(SSL *ssl); Michal.Trojnara> are docummented in the manual, but n

Stunnel 3.15 has been released

2001-07-15 Thread Michal Trojnara
Changelog for version 3.15, 2001.07.15, urgency: MEDIUM: * Serious bug resulting in random transfer() hangs fixed. * Separate file descriptors are used for inetd mode. * -f (foreground) logs are now stamped with time. * New ./configure option: --with-tcp-wrappers by Brian Hatch. * pop3 protoc

SSL_get_rfd() and SSL_get_wfd()

2001-07-15 Thread Michal Trojnara
Dear OpenSSL maintainers, Two of OpenSSL functions: int SSL_get_rfd(SSL *ssl); int SSL_get_wfd(SSL *ssl); are docummented in the manual, but not implemented. It would be nice to have this problem fixed. Best regards, Michal Trojnara the author of stunnel ___

Export questions.

2001-07-15 Thread Vincent Toms
Hello All, I live in the US, and I have created an OpenSSL enabled application (thank you for the API btw) and I would like to know if any one has better knowledge than I of the current US crypto export laws. Those using my program would be connecting back to my computer here. From I hav

Re: client trust mgr configuration

2001-07-15 Thread Dr S N Henson
Bishr Tabbaa wrote: > > JAVASERVER: > + uses IAIK & Sun's implementation of SSL in Java > + ciphersuite = "SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA" > + mutual authentication disabled > > CCLIENT: > + uses OpenSSL implementation of SSL in C > + ciphersuite = SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA > + verify