RE: Error Message Text

2002-02-15 Thread Vic Abell
> When I try to make an SSL connection, it fails. When I try to > get the text, > this is the best I can get. Is there any way to get any clearer > of an error > message? > > error:0006:lib(0):func(0):reason(6) Make sure your code is calling SSL_load_error_strings(). Use ERR_get_error()

Error Message Text

2002-02-15 Thread Fisk, Kevin
When I try to make an SSL connection, it fails. When I try to get the text, this is the best I can get. Is there any way to get any clearer of an error message? error:0006:lib(0):func(0):reason(6) __ OpenSSL Project

Apache with modssl

2002-02-15 Thread Carlos Alberto Pelaez
I have a problem. I install Apache, openssl and modssl. I run the web server in port 80 and the ssl connect it´s ok, but when i try to run the webserver in other port, for example 8100, i edit the httpd.conf and change the directives port 80 to port 8100 and the ssl support : Listen 80 Listen 4

Re: How to create a pkcs7-envelopedData inside a pkcs7-signedData?

2002-02-15 Thread Erwann ABALEA
On Fri, 15 Feb 2002, Erwann ABALEA wrote: > On Thu, 14 Feb 2002, Dr S N Henson wrote: > > > Erwann ABALEA wrote: > > > > > > Hi, > > > > > > I'm facing a problem I can't manage to solve. > > > > > > I need to create a structure like this one: > > > > > > signed PKCS#7 { > > > signer certificate

Re: doubt regarding the RA certs

2002-02-15 Thread Michael Sierchio
Bear Giles wrote: > Anyway, in a case like this one way to handle the RA->CA traffic is > for the RA to sign certs that it approves, and then the CA re-signs > them with the published CA certs. The RA needs to be able to sign > certs, but you really want everyone to use the certs published by t

Re: doubt regarding the RA certs

2002-02-15 Thread Bear Giles
> What is the use of RA certificates? > What is the purpose of key usage extension values in CA or RA certificates? Since nobody else has commented, I'll toss out my ignorance for all to mock... :-) If you have both a RA and CA then the RA usually handles the question of whether you should get

OpenSSL with Java

2002-02-15 Thread Yuval - Domain The Net
Hi, Can someone please explain me or give me example how to implement OpenSSL with java servlets or just java on windows? Regards, Yuval Domain The Net Technologies Ltd. 6 Weitzman Blvd. Ramat-Hasharon Israel 47211 Tel: 972-3-5474443 Fax: 972-3-5474446 www.DomainTheNet.com “This email message

Re: How to create a pkcs7-envelopedData inside a pkcs7-signedData?

2002-02-15 Thread Erwann ABALEA
On Wed, 13 Feb 2002, Michael Sierchio wrote: > Erwann ABALEA wrote: > > > I'm facing a problem I can't manage to solve. > > You don't *want* to do this. The correct approach is to envelope > signed data. See the RSALABS web page for a discussion of this. Yes I *need* to do this, even if I don'

Re: How to create a pkcs7-envelopedData inside a pkcs7-signedData?

2002-02-15 Thread Erwann ABALEA
On Thu, 14 Feb 2002, Dr S N Henson wrote: > Erwann ABALEA wrote: > > > > Hi, > > > > I'm facing a problem I can't manage to solve. > > > > I need to create a structure like this one: > > > > signed PKCS#7 { > > signer certificate > > authenticated attributes > > content: enveloped PKCS#7 {

Longer Key-Length than 512 Bit

2002-02-15 Thread Stefan Westner
Hello, I have the .cnf-File as attached and call openssl with following parameters: d:\iwadis\openssl\openssl.exe ca -gencrl -out crl.pem -config d:/iwadis/Zertifikate/config.cnf d:\iwadis\openssl\openssl.exe ca -in Host_001_14.csr -out Host_001_14.pem -extensions 509v3 -batch -policy policy_any

Re: getting the private key from pfx file

2002-02-15 Thread Dr S N Henson
Yuval - Domain The Net wrote: > > Hi, > > I'm trying to take out the private key from the pfx file but with no luck, > this is what I did: > I changed the pfx to pem > openssl pkcs12 -in iis.pfx -out iis.pem > The private key is in the file iis.pem at this point. If you want just the private k

Re: Microslut Seeking help

2002-02-15 Thread Peter Sylvester
Derek Strickland wrote: > > I have to integrate with a company that is running an all Perl/Unix site > that requires an OpenSSL authentication. I have compiled OpenSSL on my > Windows box and it passes all the tests for a valid installation, but I > can't find any article on using OpenSSL from A

Re: Microslut Seeking help

2002-02-15 Thread Joon Radley
In theory there is a DLL build for OpenSSL that you can compile with VC++. >From there it should not be to difficult to integrate it into a COM object. For more information to compile the DLL read INSTALL.W32 Joon Dr S N Henson wrote: > > Derek Strickland wrote: > > > > I have to integrate wi

Re: Microslut Seeking help

2002-02-15 Thread Sean O'Riordain
Hi Derek, how exactly are you supposed to connect? https? if so... then just use the inet.ocx and set the connection protocol to 5 which is https instead of http... its really quite easy... i've access to vb6.. but it also works in 5 and 4 afaik.. (could be wrong..) to figure it out create a

getting the private key from pfx file

2002-02-15 Thread Yuval - Domain The Net
Hi, I'm trying to take out the private key from the pfx file but with no luck, this is what I did: I changed the pfx to pem openssl pkcs12 -in iis.pfx -out iis.pem then run: openssl rsa -in iis.pem -out iiskey.key -outform NET then open hex editor 1. Find the string : "private-key" in the bin