What is pempass in case of an encrypted private key??

2001-08-14 Thread Aslam
Hi, Does encrypted private key in PEM format is same as the PKCS8 encrypted private key?? Thanks Aslam __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL

Re: Cipher suites

2001-08-14 Thread Lutz Jaenicke
On Tue, Aug 14, 2001 at 02:09:09PM -0400, Aslam wrote: > How can I set or add specific TLS cipher suite in SSL_CTX. Cause what I > found is in get_client_hello() there is some default sting for cipher suite > and acoordingly all the default cipher suites r added. Isn't there any API > which takes

pem password ??

2001-08-14 Thread Aslam
Hi.. What exactly is the use of pempass (PEM pasword string) when any private key is written on disk?? Thanks Aslam __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Cipher suites

2001-08-14 Thread Aslam
Hi.. man SSL_CTX_set_cipher_list but what should be the string format for the last parameter of above function call.. Thanks Aslam -Original Message- From: Lutz Jaenicke [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 14, 2001 3:27 PM To: '[EMAIL PROTECTED]' Subject: Re: Cipher

Re: Cipher suites

2001-08-14 Thread Eric Rescorla
Aslam <[EMAIL PROTECTED]> writes: > Hi.. > > man SSL_CTX_set_cipher_list Yeah, read the man page. Check out the documents on www.openssl.org > but what should be the string format for the last parameter of above > function call.. This is described in the ciphers man page. -Ekr ___

Re: pem password ??

2001-08-14 Thread Eric Rescorla
Aslam <[EMAIL PROTECTED]> writes: > What exactly is the use of pempass (PEM pasword string) when any private key > is written on disk?? That's the point. Since it's written on disk any idiot who can read the disk can read the private key file. You encrypt it with the password so that it's useless

RE: pem password ??

2001-08-14 Thread Aslam
Is PEM password encrypted private keys different from the PKCS8 password encrypted private keys??? -Original Message- From: Eric Rescorla [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 14, 2001 3:55 PM To: [EMAIL PROTECTED] Subject: Re: pem password ?? Aslam <[EMAIL PROTECTED]> writes

installing openssh

2001-08-14 Thread Tony A. Tran
i'm trying to install openssh and it says i need openssl and zlib. i'm unsure on how i'm suppose to install these packages. can someone show me some documentation on how i can do this. thanks __ OpenSSL Project

Re: installing openssh

2001-08-14 Thread Richard Levitte - VMS Whacker
From: "Tony A. Tran" <[EMAIL PROTECTED]> Tony.A.Tran> i'm trying to install openssh and it says i need openssl Tony.A.Tran> and zlib. i'm unsure on how i'm suppose to install these Tony.A.Tran> packages. can someone show me some documentation on how Tony.A.Tran> i can do this. thanks Have you

RE: Using DSA to sign a PKCS7 message

2001-08-14 Thread Mauricio Salinas
Steve: Excuse me to be so meticolous, but you mean demos/sign.c, right ? I could'nt find a sign.c in crypto. Anayway, is a good notice, as I wanted to use the demos/sign.c for building a tool to sign and verify files. Thks, Mauricio Salinas > -Mensaje original- > De: Dr S N Henson [

Re: pem password ??

2001-08-14 Thread Eric Rescorla
Aslam <[EMAIL PROTECTED]> writes: > Is PEM password encrypted private keys different from the PKCS8 password > encrypted private keys??? Yes, it's a slightly different key derivation function and different formatting. -Ekr __

Re: Using DSA to sign a PKCS7 message

2001-08-14 Thread Frank Geck
Sorry, I ment crypto/pkcs7/sign.c Mauricio Salinas wrote: > Steve: > Excuse me to be so meticolous, but you mean demos/sign.c, right ? I > could'nt find a sign.c in crypto. > > Anayway, is a good notice, as I wanted to use the demos/sign.c for > building a tool to sign and verify files. > > Th

ssl read time out

2001-08-14 Thread Wei-Hsin Lee
Hi, I am currently using openssl 0.9.6 with my web server. My web server is kind of proprietary one. There is a problem I have with this server. When a https request comes in, the server spawns a thread to handle the request. At the end, client sends a FIN or RST packet to close the connectio

Creating / verifying certificates

2001-08-14 Thread Uros Gaber - PowerCom
Hi!   I would like to know how to create a 128bit server certificate or how to verify it is 128bit...   Thank you!   Uro¹ GaberPowerCom Gaber & Globoènik d.n.o.http://www.powercom-si.comeMail: [EMAIL PROTECTED]GSM: 040/848-001Fax: 040/848-026Tel: 01/724-84-26Fax: 01/724-84-27   BEGIN:VCARD

SSL_get_app_data/SSL_set_app_data

2001-08-14 Thread ganesh kumar godavari
hai, i am looking out for information on SSL_get_app_data and SSL_set_app_data. i could not find any documentation on the openssl website http://www.openssl.org/docs/ssl/ssl.html). i had gone through the code of ssl.h to see how the functions are handled. they look pretty simple, but i am facin

session caching

2001-08-14 Thread ganesh kumar godavari
hai, i am writting a minimal concurrent ssl server, i am planning to use external session caching for this. i am using the the following hooks. SSL_CTX_sess_set_remove_cb(ctx, cb) void call_back(SSL_CTX,SSL_SESSION) i am calling the callback functions before opening the connection. i am getting

Client certificate verify...

2001-08-14 Thread Carlo Medas
Hi all, I'm using self-singned certificates and when my client connects to the SSL server, he gets the CA, but the result of the verify function is: That CA is not in the list of trusted CAs... How can I add or modify the list of trusted CAs? Thx all   Carlo Medas

Re: Creating / verifying certificates

2001-08-14 Thread Rich Salz
> I would like to know how to create a 128bit server certificate or how > to verify it is 128bit... You are confusing the session key (typically RC4) with the certificate (typically RSA 1024 bit). You can limit what crypto suites are used. See the ciphers manpage. -- Zolera Systems, Securing w

REMOVE

2001-08-14 Thread Decoeur, Joel
  -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Sent: Thursday, January 11, 2001 1:11 AMTo: [EMAIL PROTECTED]Subject: Time to Refinance? MORTGAGE QUOTESDEBT CONSOLIDATION-REFINANCING-SECOND MORTGAGES-HOME IMPROVEMENTCLICK HEREINTEREST RATES GOING

OpenSSL IO_ERROR

2001-08-14 Thread Imran Badr
Hi, I am noticing this strange behaviour of apache running on openssl and mod_ssl. Session establishment works just fine but when I start browsing I get error messages on my browser. IE5 says that "data area passed to a system call is too small" and Netscape Navigator says "Security library has ex

Function Definition?

2001-08-14 Thread Prasanna Rao K
Hi, Where does actual function definition for SHA exists in openssl lib? I found only function declaration. I could not find function definition for SHAInit(),SHAUpdate(),SHAFinal() in openssl lib. Whether we have to implement them? Can anybody help me? Thanks in advance. Prasanna _

PKCS7 verification between CryptoAPI & OpenSSL

2001-08-14 Thread Khassaia, Amir
Hi, I've encountered the following problem: I generate PKCS#7 detached & signed data using CryptSignMessage() in CryptoAPI and try to verify it using OpenSSL but I get an OpenSSL Error: {error:2107106C:PKCS7 routines:PKCS7_signatureVerify:unable to fi nd message digest}. I tried using PKCS7_data