Re: Darwin builds

on 7/24/01 12:16 PM, Darrell S. Begay at [EMAIL PROTECTED] wrote: > please post your document, i would like to see if i missed anything. ( This is what is checked into our source control, so we remember how to do this for each revision. It is only about a 10-20 minute operation. Apple's libope

Re: Testing SSL on OpenBSD

hi Sakui, It is onboard in the base install of OpenBSD.. see.. /etc/rc.conf read the comments there on httpd.. bye Sakui wrote: I wondering if someone could giude me on obtaining some code just to see if OpenSSL works on Apache? Sakui  __

Testing SSL on OpenBSD

I wondering if someone could giude me on obtaining some code just to see if OpenSSL works on Apache?   Sakui     OpenSSL Project   http://www.openssl.orgUser Support Mailing List  [E

Re: Darwin builds

it finally built, started ALL over again as a mere mortal, removing the old libs from /usr/lib and doing all the aforementioned steps, and it DID make and install. WHEW...now to complete mod_ssl, which is what this entire exercise was all about!! THANKS for ALL your help, Mark, i DO appreciate it

No Subject

Yaowen Chen Software Engineer of Ensuite [EMAIL PROTECTED] www.teleias.com Phone:(416) 366-3335 ext 211 __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMA

OpenSSL Cert+Sign & Netscape

Hi All, I have build with OpenSSL my own Root Certificate to sign The certificate I want to create for my personal use. Does anyone knowns how to inplement my Root CA Certificate, my Personal Certificate and Signature into my Netscape Communicator 4.7 Any ideas would be very appreciated Ciao!

RE: Darwin builds

please post your document, i would like to see if i missed anything. -darrell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of CJ Holmes Sent: Tuesday, July 24, 2001 11:12 AM To: [EMAIL PROTECTED] Subject: Re: Darwin builds I actually have a document wh

BUF_MEM...

Hello! I've got a question about buf_mem The BIO_get_mem_ptr, Does it make a copy of the bytes in the byte array where is used? That is, Is there any function to free a BUF_MEM ? This is my source code BIO *bio=BIO_new(BIO_s_mem()); BUF_MEM *buf_mem=NULL; BIO_get_mem_ptr(bio,&buf_me

Re: Darwin builds

I actually have a document where I explain how I go about porting OpenSSL and making shared libraries from it. There are only a very few changes to the source code and a few lines added to the configure script. I can post it, if anyone is interested. Maybe the development team will make the cha

Re: client verify callback

On Tue, Jul 24, 2001 at 02:45:17PM -0230, Cory Winter wrote: > Hi, > > If a client implements it's own verify callback and that callback prompts > the user for input. (ie. Yes/No to allow connection) Is there a mechanism > which would prevent this action from blocking the server? Currently my > s

Re: client verify callback

Cory Winter <[EMAIL PROTECTED]> writes: > If a client implements it's own verify callback and that callback prompts > the user for input. (ie. Yes/No to allow connection) Is there a mechanism > which would prevent this action from blocking the server? Currently my > server which accepts all connec

client verify callback

Hi, If a client implements it's own verify callback and that callback prompts the user for input. (ie. Yes/No to allow connection) Is there a mechanism which would prevent this action from blocking the server? Currently my server which accepts all connections on a single thread denies connections

RE: EVP initialization question

> So, does EVP_CIPHER_CTX_cleanup free the context's memory as well as > clearing it, or is that left to me? I can't seem to find that > in the man pages... A quick inspection of the code, suggests that NO memory is actually allocated (the EVP_CIPHER_CTX contains pre-sized buffers for all the ne

Re: FTP over SSH2

hi Dustin, Well for one it would no longer be FTP per se.. if you want to offer encrypted ftp service you could say for instance try some of the SSLed FTP stuff.. Try freshmeat for pointers.. Note that those clients that can do SSLed ftp only encrypt the control port not the data port..

RE: EVP initialization question

Thanks for your reply. So, does EVP_CIPHER_CTX_cleanup free the context's memory as well as clearing it, or is that left to me? I can't seem to find that in the man pages... Thanks again, Haig On 24 Jul 2001 12:36:22 +0100, Dale Peakall wrote: > > I guess I'm unclear about whether a context is

Solaris 8 problems with libcrypto, Openssl packages 0.9.6

I downloaded and installed both Openssh and Openssl from packages downloaded at sunfreeware.com, but when I try to start the ssh daemon I get this error:   ld.so.1: /usr/local/sbin/sshd: fatal: libcrypto.so.0: open failed: No such file or directoryKilled   I have checked the LD_LIBRARY_PATH

signing and stuff

Okay I give up I'm trying to write a program that creates a key and certificate request, and then signs it given a CA (yes it will prompt for passwords and stuff). I'm having big problems though. X509_REQ_verify() on the request and its key returns "21878:error:0D07908D:asn1 encoding routines:AS

be its own CA

when i sign a csr with my own-CA key (i dont know if it's the good way ...) apache refuse to start could it be because it don't know this CA and refuse a false signed cert the ssl log looks like that: [24/Jul/2001 16:02:25 00189] [error] OpenSSL: error:0B080074:x509 certificate routines:X

AES

   Hello,   Has Rijndael already been released in Openssl 0-9-6b or is it only supposed to be released in version 0-9-7?   Thanks.

openssl-0.9.5a porting to Lynx

Hi, I tried to install openssl-0.9.5a in Lynx, so that I would have libssl and SSLeay support.I gave, #./Configure -lbsd gcc This added the option -lbsd to the Makefile and Makefile.ssl Next, #make This ran good until gcc -o openssl (list of options including -lbsd ) where it gave an error messag

Openssl on Tandem

Hi all, I have installed Openssl-0.9.6a on Tandem NSk on OSS without atalla support. No major problems encountered during compilation.I am able to encrypt data using smime but unable to decrypt. I get padding check error as mentioned below. The private key /certificate used to do these o

be a self CA

hello, i try to be my self CA i read and test some howto but it stell doesn't work i know how creates a csr for a web site i know how sign it by myself i know how creat a CA but i don't know how the CA is suposed to sign a scr for now i've tryed to sign the csr in the same way i sign it with

Re: obtaining OID strings for DN components from a request?

"Kim, Peter" wrote: > > Hi, > > I must have an old version of OpenSSL. > > In fact, I was looking for a function with a name similar to what you > pointed out. I had found a function called OBJ_txt2nid(), so I figured > there would be a OBJ_nid2txt() function or something similar. > > I looke

configure with "no-sock" for WinNT

> Hi, > I am a newbie here. Please help me. > I am trying to configure openssl for different options. I am using > openssl-0.9.6a on WinNT4.0 OS. I could successfully remove some of the > ciphers using the > no-cipher ; cpher = rc2, rc5,... > I faced a problem while configuring it for "no-sock

RE: EVP initialization question

> I guess I'm unclear about whether a context is something that's applicable to an > entire session or simply to one message. I tried it the former way, but > when I went to encrypt the second message, it included a part of the first > message that it had encrypted, which leads me to believe that

Re: Compile error on Maurice loadkeys

Mohamed: Add an extra NULL parameter to the end of the arguments in each of these two functions in the loadkeys.h and/or loadkeys.c files. Joe //--- Mohamed Nadjar wrote: > > I am a new user of openssl and I try to understand how it works by > looking at the demos! > But I have the

CA cert not in a file?

I have a self-signed CA certificate and a server certificate signed by the CA. Now, I'd like to store both certificates in a database rather than on files. How does this work with the load_verify_locations() function? How can I make sure that the server can find the CA cert when it needs it? How

Re: Behaviour of SSL_read()

On Tue, Jul 24, 2001 at 09:11:32AM +0100, Michael Playle wrote: >I've noticed that SSL_read() will either read from the socket, or > return buffered data, but never both. That is, if there are (eg) 1000 > bytes of data waiting to be read, and I call SSL_read() asking for > 1500 bytes, it will

RE: FTP over SSH2

Dustin, There's a commercially available product known as SecureFX that will do what you want -> www.vandye.com. You can trial it for 30 days. [EMAIL PROTECTED] --- [EMAIL PROTECTED] wrote: > Dustin, > OpenSSH has something called sftp, in sshd_config > You can setup > sftp_server as sub

Newbie..

sorry for my ignorance.. : ( ill be using a module in a webserver... that needs certificate.pem and key.pem how do i create the files? can someone direct me to the right path. i already read http://www.openssl.org/docs/HOWTO/certificates.txt --

Configuration question?

Hi, I am a newbie here. Please help me. I am trying to configure openssl for different options. I am using openssl-0.9.6a on WinNT4.0 OS. I could successfully remove some of the ciphers using the no-cipher ; cpher = rc2, rc5,... I faced a problem while configuring it for "no-sock" option, with

RE: FTP over SSH2

Title: RE: FTP over SSH2 Dustin,     OpenSSH has something called sftp, in sshd_config You can setup sftp_server as subsystem. But I haven't seen pure ftp over SSH. Cheers, Pawel -Original Message- From: Dustin Wiseman [mailto:[EMAIL PROTECTED]] Sent: Monday, July 23, 2001 10:

Behaviour of SSL_read()

Hi, I've noticed that SSL_read() will either read from the socket, or return buffered data, but never both. That is, if there are (eg) 1000 bytes of data waiting to be read, and I call SSL_read() asking for 1500 bytes, it will return only the 1000 buffered bytes, rather than reading from th