Re: Install Problems with OpenSSL 0.9.6d and Apache 1.3.26

2002-07-11 Thread Silvex Security Team
Dude, I went over the same thing. There is no easy way to update any of Red Hat's RPM packages with nre re-compile on your packages. The reason being is that most of the utilities and dependant on each other. If you install Openssl 9.6.0f and the version RH of openssh was compiled with 0.9.6c.

RE: Possible Bug: RAND_pseudo_bytes, NT 4.0?

2002-07-11 Thread Steven Reddie
If you can recompile OpenSSL, try commenting out the code in rand_win.c that does this querying. Steven -Original Message- From: Steven Reddie [mailto:[EMAIL PROTECTED]] Sent: Friday, 12 July 2002 2:24 PM To: [EMAIL PROTECTED] Subject: RE: Possible Bug: RAND_pseudo_bytes, NT 4.0? I thi

RE: Possible Bug: RAND_pseudo_bytes, NT 4.0?

2002-07-11 Thread Steven Reddie
I think I may have seen this once due to Lotus Notes. A performance counter entry in the registry was referring to a Notes DLL that did not exist (perhaps the uninstaller didn't clean up properly) and when OpenSSL's RAND_poll() queried the performance counters there was an extremely long hang. S

Possible Bug: RAND_pseudo_bytes, NT 4.0?

2002-07-11 Thread Matt Pauker
Hi, I've encountered a possible bug with RAND_psuedo_bytes on Windows NT 4.0. While I can call it just fine directly from an EXE, attempting to call it from a DLL hangs the calling process. It's easily reproducible: SSL_library_init(); SSL_load_error_strings(); RAND_pse

Newbie question, extending life of self-signed certs beyond 30 days.

2002-07-11 Thread Zac Taylor
Hi, I have a RH 7.2 system running Apache 2.0.39 and openssl-0.9.6b-8. I used the openssl utilities to create a private key and a self-signed certificate. I noticed that my browser showed the certiciate having a validity of only a month, so I went to the /usr/share/ssl/openssl.cnf file and changed

Re: Developing with ssl.

2002-07-11 Thread Shalu
HI There are 2 books in the market 1. network Security with openssl (oreilly) which is just out in the market 2. SSL and TLS Designing and Building Secure Systems : by Eric Rescorla Plus you can find some examples on how to set up ssl communication if you download a latest version of openssl

Developing with ssl.

2002-07-11 Thread Rodrigo Cesar Herefeld
I`m writing an aplication that needs to comunicate trouhgh tcp/ip,run in win32 and linux and transmit confidential data. My doubts are: -Can i use ssl to make the code portable?(and secure) -How do i start?(i know some about sockets in linux nth about win32 sockets and nothing

a problem/question

2002-07-11 Thread doug chanco
Hi all, I am very new to openssl and I am hoping someone can help me with the following problem: I am trying to use openssl from the command line (using s_client) to get a file off a web server using ssl. When I run the following: openssl s_client -prexit -showcerts -connect xx.xxx.xxx.xxx:4

openbsd on sparc64: problems

2002-07-11 Thread Francesco Gringoli
Hi all, has anyone compiled openssl on a UltraSparc box running OpenBSD-sparc64? Every time I try I always get an error during the test (blowfish - encoded and decode sequences differ). It's the same if I try to compile from OpenBSD sources (which should include full OpenBSD-sparc64 support). Id

Re: Requiring client certificates - how?

2002-07-11 Thread M.E. Post
- Original Message - From: "David C. Tuttle" <[EMAIL PROTECTED]> To: "OpenSSL" <[EMAIL PROTECTED]> Sent: Thursday, July 11, 2002 1:13 AM Subject: Re: Requiring client certificates - how? > On Wed, 10 Jul 2002, Keary Suska wrote: > > on 7/10/02 4:33 PM, [EMAIL PROTECTED] purportedly said:

Re: RE: Install Problems with OpenSSL 0.9.6d and Apache 1.3.26

2002-07-11 Thread Shalu
hi list I am able to set up a http apache server using apache_1.3.26 and openssl-0.9.6d I also installed mod_ssl but when I write https://nessus I am not able to get anything but when I write http://nessus/ I see the page, Hey, it worked The SSL/TLS-aware Apache webserver was successfully inst

Re: Getting the CERT chain

2002-07-11 Thread Lutz Jaenicke
On Thu, Jul 11, 2002 at 07:12:30AM -0700, Patrick Powell wrote: > Question 1: > > Is there a simple way using exported (i.e. - available > to general use via the openssl library and having definitions > in openssl.h) OpenSSL functions to do the following: > >During the SSL connection process

Getting the CERT chain

2002-07-11 Thread Patrick Powell
Question 1: Is there a simple way using exported (i.e. - available to general use via the openssl library and having definitions in openssl.h) OpenSSL functions to do the following: During the SSL connection process, if a user CERT has been presented, get the cert chain? Here is the code

RE: Install Problems with OpenSSL 0.9.6d and Apache 1.3.26

2002-07-11 Thread Jochen Keutel
Probably a problem in your httpd.conf. If you like you can send me your httpd.conf - I'll try to fix it. Bye, Jochen. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Joseph Botto > Sent: Thursday, July 11, 2002 2:57 AM > To: [EMAIL PROTECTED] > C

RE: Install Problems with OpenSSL 0.9.6d and Apache 1.3.26

2002-07-11 Thread Nulty, Michael (CAP, CMF)
Try again and use openssl-0.9.6b...This may help -Original Message- From: Joseph Botto [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 10, 2002 8:57 PM To: [EMAIL PROTECTED] Cc: Graham Subject: Install Problems with OpenSSL 0.9.6d and Apache 1.3.26 Hello all. I'm new to all of this stu

Re: Install Problems with OpenSSL 0.9.6d and Apache 1.3.26

2002-07-11 Thread Shalu
HI list In fact I am also facing a problem like Joseph I am installing apache on my laptop what i wanna is to set up a https server I am reading instructions frm (I have kept a web page resume.html in my public_html dir in /home/chhabra ) http://www.modssl.org/docs/apachecon2001 but after doin