Is there a C/C++ API for the equivalent of the SCP program?

2002-04-25 Thread Mike Papper
Any ideas? I would like ot take advantage of scp functionality but not have to use exec from a C program to get it. Is there an API that is available that makes it easy to programatically copy files to a machine with a listening sshd server? Mike Papper [EMAIL PROTECTED]

CA error

2002-04-25 Thread Jay States
I am use learning and testing CA's. I have tried to create a self-signed CA certificate using the following: openssl req -new -x509 -days 365 -key sample.key -out sample.crt and this is the error message that I get. I re-built openssl and openssh, but I still get this error. What am I doing

[Fwd: Memory leak in TLS client side app]

2002-04-25 Thread Krishnaswamy R.
Hi all, This is a resend of a previous message. Any pointers or tips will be very much appreciated. thanks, Krishna Original Message Hi all, I have written a TLS client using the OpenSSL library. It uses memory BIOs as the input/output BIOs to the SSL connection. The code

Re: CA error

2002-04-25 Thread Lutz Jaenicke
On Wed, Apr 24, 2002 at 04:18:49PM -0300, Jay States wrote: I am use learning and testing CA's. I have tried to create a self-signed CA certificate using the following: openssl req -new -x509 -days 365 -key sample.key -out sample.crt and this is the error message that I get. I re-built

Re: Important Message Concerning Your Membership Account.4/23/2002 6:30:09 PM

2002-04-25 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Wed, 24 Apr 2002 18:45:33 -0400, Nick Simicich [EMAIL PROTECTED] said: njs It looks like the Received headers are filtered at the openssl njs listserv - Nope. See your own message (or this one) as an example :-). njs it is impossible to tell where this spam

Re: Important Message Concerning Your Membership Account. 4/23/2002 6:30:09 PM

2002-04-25 Thread Lutz Jaenicke
On Thu, Apr 25, 2002 at 10:28:42AM +0200, Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Wed, 24 Apr 2002 18:45:33 -0400, Nick Simicich [EMAIL PROTECTED] said: njs It looks like the Received headers are filtered at the openssl njs listserv - Nope. See your own

Fw: trustway pkcs11 engine for openssl

2002-04-25 Thread afchine madjlessi
Based on openssl-engine-0.9.6c, we have developed a new engine which allowsopenssl applications and Apache-mod_ssl servers to use through a PKCS#11interface the security functions provided by the Bull trustway cc2000 cryptographiccard, taking advantage of key storage in secure memory and

dlopen: Cannot map library libssl.so

2002-04-25 Thread Bossi Camille
Hello, I'm installing apache_1.3.24, modssl-2.8.8-1.3.24 and openssl-engine-0.9.6c on Compaq Tru64 UNIX V5.1A (Rev. 1885). I configured and compiled everything fine with tese commands: OPENSSL: ./config --prefix=/users/bossi/openssl --openssldir=/users/bossi/openssl shared make MODSSL:

Re: trustway pkcs11 engine for openssl

2002-04-25 Thread Richard Levitte - VMS Whacker
Uhmmm, we got the message. Several times. Do you *really* think you'll get wuicker responses by repeating it every day? Some folks are meaner than me and simply filter people who repeat their emails too much... I've got the first copy marked in my inbox. I'm sure have that as well. Please

Verisign openssl

2002-04-25 Thread Roelf Schreurs
Hi I followed the following procedure: perl CA.pl -newreq copy request and get ID from verisign in the format of -BEGIN CERTIFICATE--- fdk -END CERTIFICATE- But what do I need to do to finish the cetificate? If I create a self signed certificate, it's got a lot more detail than

Key strength confusion

2002-04-25 Thread Stuart Parker
Hi there, I have a site which is reporting the https connection as 40-bit with some browsers and 128-bit with other browsers. I am aware that Microsoft uses a proprietary mechanism to step up a connection to 128 from 40 bit if the browser can handle it, but Netscape also indicates it

Re: Key strength confusion

2002-04-25 Thread Srikanth_Chakravarthy
Hi, Please check if you are using the RC4/RC2 cipher suite. In that case, Note that for RC4 and RC2 ciphers, the phrase 40-bit encryption means the keys are still 128 bits long, but only 40 bits have cryptographic significance. Regards, Srikanth Stuart Parker [EMAIL PROTECTED] on

Re: Important Message Concerning Your Membership Account. 4/23/2002 6:30:09 PM

2002-04-25 Thread Nick Simicich
The point is that th At 10:28 AM 2002-04-25 +0200, Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Wed, 24 Apr 2002 18:45:33 -0400, Nick Simicich [EMAIL PROTECTED] said: njs It looks like the Received headers are filtered at the openssl njs listserv - Nope. See your own

nmake problem on win2000

2002-04-25 Thread Chuo HUANG(CMS)
Hello!I encountered a problem (might be a silly one you think) when I install 0.9.6c. My system is windows 2000, ActivePerl-5.6.1.631-MSWin32-x86.msi, and MSVC++ 6. Please see below. C:\cd D:\openssl-engine-0.9.6c D:\openssl-engine-0.9.6cperl Configure VC-WIN32

CRLs in multilevel CAs

2002-04-25 Thread Volker Bott
Hi, I am using openssl-0.9.7-pre1 to create a mutilevel CA including the appropritate CRLs, e.g. root CA -- level 1 CA (here: level 1 CA 1) -- user certs. I want to create a revocation list for level 1 CAs (signed by the root CA) and a revocation list for user certs (signed by level 1 CA 1). I

RE: nmake problem on win2000

2002-04-25 Thread Erik Ulrichts
Hi, This problem has been mentoned before. In the mailing lists from openssl the following is proposed : replace : #include unistd.h with #include openssl/e_os.h #ifndef MSDOS #include unistd.h #else #include process.h typedef int pid_t; #endif Regards, Erik Ulrichts Hypertrust NV

Re: Small problem with OpenSSL Client / Win32 VC++ / 3 byte junk data

2002-04-25 Thread Johann Müller
u, forget this, I figured I was just to dumb to read the HTTP 1.1 specs for chunked transfer mode. so the junk actually is the length info for the chunks :-) thus no problem with OpenSSL and i hope you had a good lough :) __

Using filter BIO's and MD5

2002-04-25 Thread Jerry Napoli
Hello, I'm trying generate a base64 encoding of an MD5 hash of a string using a chain of filter BIO's attached to a memory BIO sink. When I extract the data from the memory BIO (after performing a BIO_write followed by a BIO_flush), it appears that only the base64 encoding is performed. When

Re: Important Message Concerning Your Membership Account. 4/23/2002 6:30:09 PM

2002-04-25 Thread Claus Assmann
On Thu, Apr 25, 2002, Nick Simicich wrote: Maybe we can create a new list: how to manage a mailing list? This stuff comes up now and then, esp. if some idiot creates a loop or other idiots turn on their out of office garbage replying to mailing lists. At 10:28 AM 2002-04-25 +0200, Richard

How to generate a dsa key?

2002-04-25 Thread Lidia Castillejo
Hi, I would generate a dsa pair keys and store in pem files (private.pem /public.pem) from the openssl api. I see in pem.h file and i find: int DSA_generate_key(DSA *a); DSA * DSA_generate_parameters(int bits, unsigned char *seed,int seed_len,

How to generate a dsa key?

2002-04-25 Thread Lidia Castillejo
Sorry i see in dsa.h file :) Regards, lidia __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

RE: How to generate a dsa key?

2002-04-25 Thread Aslam
Check out following: EVP_PKEY* create_key(int key_type, int key_size, char* file) { EVP_PKEY* key = NULL; RSA*rsa = NULL; DSA*dsa = NULL; BIO*bio_key = NULL; charkey_file[256] = ; if(! (key =

RE: Problems with installation

2002-04-25 Thread Lynn Gazis
I take it you're on Solaris. You need to use either Sun's SUNWspro C compiler, or gcc, and, whichever one you use, it should come in your path before /usr/ucb/cc. In fact, remove /usr/ucb from your path altogether when building OpenSSL; you don't want to be using anything there. If you have