OS X help...

OK, this is driving me nuts. I've looked through the archives and tried all kinds of suggestions, but I can't get openssl 0.9.6b or the most recent snapshot to compile on OS X (10.0.4 Build 4Q12) Has anyone been successful? If so, what did you do? Enjoy, David Pieper -- programmer n. /pro gram

Re: Corrected: Redhat 7.1/openssl0.9.6b

On Mon, 13 Aug 2001 [EMAIL PROTECTED] wrote: > I am trying to install openssl-0.9.6b onto a Linux REDHAT 7.1 server. > This is my first install of openssl-0.9.6b on REDHAT 7.1 . ON REDHAT 6.4 > openssl-0.9.6b works just fine. > > All seems to go fine with install and creating key/csr/crt files.

make openSSL on digital unix Badly formed hex number: -std1

Hello everyone, I'm having this problem when I run the make of openSSL, I'm wondering if anybody has the same problem Please let me know. cc -o openssl -DMONOLITH -I../include -DDSO_DLFCN -DHAVE_DLFCN_H -fPIC -std1 -tune host -O4 -readonly_strings openssl.o verify.o asn1pars.o req.o dgst.o dh.o

server key exchange msg

Hi, When do you have to send server key exchange message? Do I have to send it if public key in server certificate is greater than > 512 bits or was it only necessary before export laws were lifted? -Thanks Vladimir Veytser __

Openssl

I would like to know if someone has successfully installed and getting the openssl to work on redhat 7.x?     Thanks Nat!

Re: Using DSA to sign a PKCS7 message

Frank Geck wrote: > > I have been looking at the crypto/sign.c. I see how yo can specify the > hash to use but not the signature algorithm. How do you do that or what > one does it use, does any one know? > Don't rely on crypto/sign.c its obsolete. If you use the S/MIME API (example in apps

RE: Ssldump on Windows nt

Eric, Thanks a lot for your help. Prashant. -Original Message- From: Eric Rescorla [mailto:[EMAIL PROTECTED]] Sent: Monday, August 13, 2001 11:06 AM To: [EMAIL PROTECTED] Subject: Re: Ssldump on Windows nt "Prashant Kumar" <[EMAIL PROTECTED]> writes: > Hello Group, > > Can I install

Re: SSL vs SSH

Okay, thanks Jeffrey. Better get reading up on SSH then! Mike - Original Message - From: "Jeffrey Altman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "OpenSSL Mailing List" <[EMAIL PROTECTED]> Sent: Monday, August 13, 2001 6:40 PM Subject: Re: SSL vs SSH > > All, > > > > >From a cl

BIO woes: ctrl and callback_ctrl?

I'm creating my own BIO_METHODs to use in a BIO pair. For starters, am I thinking about this correctly? to process: Plain text --> SSL --> encrypted text --> Buffer_BIO --> Socket_BIO --> away from process: Encrypted_text --> Socket_BIO --> Buffer_BIO --> SSL --> plain text Will the SSL call the

Re: SSL vs SSH

> All, > > >From a client application perspective, is SSL/TLS the same as SSH. If = > not then what is the difference? > > Cheers > > Mike They are completely different and incompatible protocols. Jeffrey Altman * Sr.Software Designer C-Kermit 8.0 Beta available The Kermit Project @

Re: Can't get SSL error information

"Bill @ Rebey.com" <[EMAIL PROTECTED]> writes: > Is there anywhere to get an ssldump binary for WinNT? Not that I know of. If someone has done a port I'd love to have a copy. -Ekr __ OpenSSL Project

SSL vs SSH

All,   From a client application perspective, is SSL/TLS the same as SSH. If not then what is the difference?   Cheers   Mike  

RE: Can't get SSL error information

Is there anywhere to get an ssldump binary for WinNT? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Eric Rescorla Sent: Monday, August 13, 2001 12:59 PM To: [EMAIL PROTECTED] Subject:Re: Can't get SSL error information "Bill @ Rebey.co

Corrected: Redhat 7.1/openssl0.9.6b

I am trying to install openssl-0.9.6b onto a Linux REDHAT 7.1 server. This is my first install of openssl-0.9.6b on REDHAT 7.1 . ON REDHAT 6.4 openssl-0.9.6b works just fine. All seems to go fine with install and creating key/csr/crt files. when testing for operation with the command: openssl

Re: Can't get SSL error information

"Bill @ Rebey.com" <[EMAIL PROTECTED]> writes: > No, I haven't tried ssldump. What is it? Is it a utility? A build option? > A function that I can call? What's it do? It's an SSL protocol sniffer. See http://www.rtfm.com/ssldump -Ekr ___

Re: Can't get SSL error information

www.rtfm.com/ssldump Greg Stark [EMAIL PROTECTED] - Original Message - From: "Bill @ Rebey.com" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 13, 2001 12:35 PM Subject: RE: Can't get SSL error information > No, I haven't tri

Can't get SSL error information

I am trying to install openssl-0.9.6b onto a Linux REDHAT 7.1 server. This is my first install of openssl-0.9.6b on REDHAT 7.1 . ON REDHAT 6.4 openssl-0.9.6b works just fine. All seems to go fine with install and creating key/csr/crt files. when testing for operation with the command: openssl

RE: Can't get SSL error information

No, I haven't tried ssldump. What is it? Is it a utility? A build option? A function that I can call? What's it do? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Lutz Jaenicke Sent: Monday, August 13, 2001 9:19 AM To: [EMAIL PROTECTED] Sub

Re: Time to Refinance?

> To whom it may concern, Please note: since this list munges the reply-to: header, all replies go to the list unless you manually cut and paste the sender's address into the To: field. __ OpenSSL Project

Re: Time to Refinance?

To whom it may concern, This e-mail was unsolicited and unwelcome. I consider it to be a nuisance, and further communications from this company or address will be reported as harassment to the relevant authorities, including, but not limited too, the Better Business Bureau, local and national c

Re: Ssldump on Windows nt

"Prashant Kumar" <[EMAIL PROTECTED]> writes: > Hello Group, > > Can I install ssldump on Windows NT. The instruction for > installation says I need "libpcap" and I guess we can't > install "libpcap" on WindowsNT(I failed to). > > Any help is appreciated. The right place for this is the [EMAIL PR

RE: cant work in debug mode

I know it's obvious, but check your path. It may be finding a non-debug version of the code. I'd use "Find File" and delete any extra copies that may be on the disk. I hate to admit it, but this has been my problem more then once. Just a thought... -Craig -Original Message- From: Raja S

Re: you suck

Some of us instead sent much longer and more descript comments to the postmaster and other addresses at the domain in question. > cool, direct and to to the point. i guess many of us feel this way, but not > able to put it into such a direct statement. __

About CRL

Hi, Can anybody explain me how CRL is used for verification of the client certificates in OpenSSL? i.e, where and when it is being used in OpenSSL code while client authentication? Thanks Josephine _ For Rs. 2,000,000 worth of Apte

Re: you suck

Please remember the more messages we generates, just generates another automated response. James Johnston wrote: > cool, direct and to to the point. i guess many of us feel this way, but not > able to put it into such a direct statement. > - Original Message - > From: "alex pankratz" <

Ssldump on Windows nt

Hello Group, Can I install ssldump on Windows NT. The instruction for installation says I need "libpcap" and I guess we can't install "libpcap" on WindowsNT(I failed to). Any help is appreciated. Regards, Prashant Kumar. __ Op

Using DSA to sign a PKCS7 message

I have been looking at the crypto/sign.c. I see how yo can specify the hash to use but not the signature algorithm. How do you do that or what one does it use, does any one know? Thanks, Frank __ OpenSSL Project

Re: Can't get SSL error information

On Sun, Aug 12, 2001 at 11:46:04PM -0400, Bill Rebey wrote: > However, the error "information" isn't informative at all. The only error > on the stack is: > > 'error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure' > > Well, I kind of assumed THAT! What I want to know is WHY it f

Re:index.txt and serial files??

Hi Michael, >From your listing, the serial file is empty. Since you haven't generated any >certificates before (the index.txt file is empty), the serial file should contain the >string 01. See below for details. The openssl.cnf file defines the location of index.txt and serial files. The relev

Re: Signature checking

On Mon, Aug 13, 2001 at 08:01:48AM +0200, Filip Van de Velde wrote: > I am wondering if the signature of an X509v3 certificate is automatically checked >when you make an SSL connection or do you have to do the signature check of the >certificate in the verify_callback function by yourself? A ce

index.txt and serial files??

OpenSLL Folks, I am using OpenSSL 0.9.6 24 Sep 2000 and issued the following: openssl ca -policy policy_match -days 365 -md md5 -out ./SRVcert.pem -keyfile ./CAkey.pem -cert ./CAcert.pem \ >-outdir . -infiles ./SRVreq.pem And saw: Using configuration from /usr/local/ssl/openssl.cnf Enter PEM

Re: starting new ssl session on previous ssl socket

On Mon, Aug 13, 2001 at 02:32:09PM +0200, Lutz Jaenicke wrote: > On Sun, Aug 12, 2001 at 07:32:25AM -0400, Avery Fay wrote: > > I've been given a task that a previous employee at our company was > > unable to accomplish. Before I start I would like to ask if it is even > > possible. > > > > What

Re: starting new ssl session on previous ssl socket

On Sun, Aug 12, 2001 at 07:32:25AM -0400, Avery Fay wrote: > I've been given a task that a previous employee at our company was > unable to accomplish. Before I start I would like to ask if it is even > possible. > > What I need to do: > > 1.) start a ssl session > 2.) send / receive some data >

Re: you suck re: Richard Levitte's comment

StarTux wrote: > > [EMAIL PROTECTED] wrote: > > >We should be able to deal with this problem ourselves because it > >affects us often enough. Yes. :-( > >ANy suggestions how? > > Who has admin rights to the list? Anyone with admin rights should be > able to nuke anyone off of the list quietly