Client authentication succeeds with Netscape but failes with IE

2001-08-09 Thread Ori Yosefi
Hi all, I'm trying to write an application (an SSL server) that does client authentication. My application sends the certificate request using a renegotiate on an already open connection. When I connect to my applicatio with either an OpenSSL s_client or with Netscape, everything wroks fine. Th

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Eric Rescorla
Michael Shanzer <[EMAIL PROTECTED]> writes: > [1 ] > > --- Greg Stark <[EMAIL PROTECTED]> wrote: > > It would be easier to help you if you can get output > > from ssldump > > (www.rtfm.com/ssldump) for the failing connection > > attempt. > Attached is the output of ssldump. > Since I can not ge

Re: SSL_writev()?

2001-08-09 Thread Eric Rescorla
"Miles Sabin" <[EMAIL PROTECTED]> writes: > I've seen Tony Rogvall's post on this topic from a few months ago, > > http://marc.theaimsgroup.com/?l=openssl-users&w=2&r=1&s=writev&q=b > > and I'd like to raise it again. > > I have excactly Tonys problem: I want to be able to accumulate several

Re: How to generate a certificate request from HTML page

2001-08-09 Thread Jason Aras
there is a OpenSSL perl module that is just a front end to the openssl binary (i dont remember the url check CPAN), it should let you do it all. You can also just 'do it yourself' by passing all the arguments to openssl directly, it might not be a solution, but could be a starting point. -jay

When is it safe to renegotiate?

2001-08-09 Thread Martin Sjögren
It sounds and feels like a stupid question, but when is it actually safe to do a renegotiation? Here's my problem: A client and server exchange lots of messages asynchronously and since the messages are quite large from time to time, there's a buffering mechanism that only sends data after a sele

SSL_writev()?

2001-08-09 Thread Miles Sabin
I've seen Tony Rogvall's post on this topic from a few months ago, http://marc.theaimsgroup.com/?l=openssl-users&w=2&r=1&s=writev&q=b and I'd like to raise it again. I have excactly Tonys problem: I want to be able to accumulate several independent buffers worth of write data, HTTP headers an

Re: Support for hardware

2001-08-09 Thread C Gould
SSL accelerator support is built in the engine code but you need to actually use the appropriate library calls in your code to utilize the hardware. The following code should get you started. ENGINE *e; ERR_load_ENGINE_strings; // load engine error strings e = ENGINE_by_id("cswift"); // u

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Kenneth R. Robinette
Date sent: Thu, 9 Aug 2001 06:47:32 -0700 (PDT) From: Michael Shanzer <[EMAIL PROTECTED]> Subject:Re: Problems with SSL V3 and IIS To: [EMAIL PROTECTED] Send reply to: [EMAIL PROTECTED] Mike I missed the part about key m

qcStatements

2001-08-09 Thread Benjamin Hille
Hello everyone, I am trying to use qcStatements with the x509 application. The object exists in the object defenition, but i don't seem to be able to use it in the extensions mechanism. Has anyone got a clue ? Thank you, Benjamin Hille _

How to generate a certificate request from HTML page

2001-08-09 Thread Yu Tang
I write a HTML page for collecting user information. Now I want to generate a private key and a certificate request file from a data file. How can I use Unix and Perl to do this job? I can only use "req"  on Unix to generate a certificate request file by inputting data from the keyboard. I have s

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- Greg Stark <[EMAIL PROTECTED]> wrote: > It would be easier to help you if you can get output > from ssldump > (www.rtfm.com/ssldump) for the failing connection > attempt. Attached is the output of ssldump. Since I can not get the keys out of IIS All the data is still encrypted. Thanks for any

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- "Kenneth R. Robinette" <[EMAIL PROTECTED]> > You must be running a version I have never seen or a > real old one. IIS 4.0 which is the latest version that runs under NT4. The behavior you are describing sounds like IE, which is much nicer about letting you export keys. Mike

RE: ocsp command

2001-08-09 Thread Olivier Michiels
Verify if the libcrypto.a in the folder /usr/lib is the same as the one in the openssl folder. I've had this problem also, because I've had the openssl RPM installed on my Linux. The ocsp command was not in the lib from the RPM then I've had to copy the lib myself in the good folder. I hop

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Kenneth R. Robinette
Date sent: Thu, 9 Aug 2001 06:00:17 -0700 (PDT) From: Michael Shanzer <[EMAIL PROTECTED]> Subject:Re: Problems with SSL V3 and IIS To: [EMAIL PROTECTED] Send reply to: [EMAIL PROTECTED] You must be running a version I hav

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- "Kenneth R. Robinette" <[EMAIL PROTECTED]> wrote: > > Yes, it does support pkcs-12 but Microsoft refers to > them as .pfx. > Simple use the openssl command Eric referenced and > use a > filename such as out.pfx or rename a .p12 to .pfx > > Ken >From the IIS key manager menu, there is a o

ocsp command

2001-08-09 Thread Yu Tang
Dear all, I download the openssl-0.9.6b software from the web. Now I try to use the "ocsp" command to generate a request on-line. Now I get an error: command not found Why?? Any help? Thanks very much in advance.RoseGet your FREE download of MSN Explorer at http://explorer.msn.com ___

WORLDS NO.1 .. MEGA EXPERIENCES!

2001-08-09 Thread MEGAHOT
Dear Ladies & Gentlemen, Welcome to the GREATEST SEX SHOW on the ENTIRE NET ! We now offer you to ENTER the world´s No.1 voted SEX-SERVER on the WEB ! By far the largest and most incredible content of LIVE SEX is now served to users WORLDWIDE! EVERYTHING is offered 100% ANONOMOUSLY & you don

Bad request or OpenSSL bug

2001-08-09 Thread Hellan,Kim KHE
Below is an PKCS#10 request generated by a MS IIS 5 webserver. This request crashes OpenSSL (0.9.6) with an access violation on a Windows 2000 platform. I'm using: openssl req -inform PEM -in myreq.req -text I think I have an idea of what the problem is. This request contains an ST object in th

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Kenneth R. Robinette
Date sent: Wed, 8 Aug 2001 19:05:53 -0700 (PDT) From: Michael Shanzer <[EMAIL PROTECTED]> Subject:Re: Problems with SSL V3 and IIS To: [EMAIL PROTECTED] Send reply to: [EMAIL PROTECTED] Mike Yes, it does support pkcs-12

LDAP+Delta CRL

2001-08-09 Thread Olivier Michiels
Hi, I have to publish Delta CRL on a ldap. Is there anything special to do to publish delta CRL ? Thanks Michiels Olivier __ OpenSSL Project http://www.openssl.org User Support Mailing List