Installation of SSL

2002-09-10 Thread How, Leekiau
Hi, I have face some problem after installed SSL, 1. after SSL instalation, I logout as root user. I cannot login anymore from the console. I reboot the system, the screen prompted me "Invalid login" without prompt me the login screen. 2. I did not perform any backup before the instalation. Wil

RE: how to generate authoritive CA

2002-09-10 Thread Franck Martin
Look for the SSL Certificates HOWTO on www.tldp.org I still don't know why there is no link to it from the openssl.org web site? Franck Martin Network and Database Development Officer SOPAC South Pacific Applied Geoscience Commission Fiji E-mail: [EMAIL PROTECTED] Web

Re: Request Policy Sections

2002-09-10 Thread Rakesh B Bobba
i picked it up from sample .cnf which i found on the web. but i haven't found any detailed material on the .cnf. i will post it if i find one rakesh Original message >Date: Tue, 10 Sep 2002 15:43:28 + (GMT) >From: Tim Gustafson <[EMAIL PROTECTED]> >Subject: Re: Request Policy

Re: openssl.org dead ?

2002-09-10 Thread Xperex Tim
The website seems to go unavailable on a regular basis. So far, it's always come back! --- Sarath Chandra M <[EMAIL PROTECTED]> wrote: > Is http://www.openssl.org/ dead ? or is it very slow ? I'm unable > to download files or browse thru its contents since a few days. > Any news ? > > _

Re: reference count of SSL session

2002-09-10 Thread Lutz Jaenicke
On Tue, Sep 10, 2002 at 11:42:33AM -0700, Haihong Wang wrote: > Hi, all, I am writing some programs using openssl 0.9.6 and get some puzzling > questions about reference count in the SSL session. Basically, I am looking into > the internal data structure of SSL_SESSION: > > ... >int refer

RE: reference count of SSL session

2002-09-10 Thread Edward Chan
But what I've noticed is, if the session expires, a new session is returned from a call to SSL_get_session() (address of new session is not equal to address of old session). So one would think the SSL_CTX would have a reference to the new session, and decrement the ref count on the old session.

Re: reference count of SSL session

2002-09-10 Thread Haihong Wang
Thanks for the reply. However I got more questions after seeing the response: 1. Does SSL_CTX keeps the session object for future reuse (or session resumption)? 2. How many of session objects does SSL_CTX try to keep (max bound of unfreed session objects)? 2. What (harm) will happen if I do e

need help for extracting public key from received mail

2002-09-10 Thread tabasse
Hi I'm new on openssl... i'm working on a HPUX and i need to send ciphered mails to providers. how can i extract public key from a signed incoming mail with openssl command line? (i'm lost with openssl man...) thanks a lot for your help !! smime.p7s Description: S/MIME Cryptographic Signature

RE: reference count of SSL session

2002-09-10 Thread Aslam
one reference is hold by SSL_CTX's lhash, if I'm not wrong, so when u call SSL_CTX_free, session object get freed. Its required for session lookup on SSL_CTX basis.. Aslam -Original Message- From: Haihong Wang [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 10, 2002 2:43 PM To: [EMAI

reference count of SSL session

2002-09-10 Thread Haihong Wang
Hi, all, I am writing some programs using openssl 0.9.6 and get some puzzling questions about reference count in the SSL session. Basically, I am looking into the internal data structure of SSL_SESSION: ... int references; } SSL_SESSION; as defined in openssl/ssl.h And from my understand

Re: how to generate authoritive CA

2002-09-10 Thread Rakesh B Bobba
i don't know whether the third step you did is correct. you can get the request signed by using opesssl ca utility(just like openssl req) even after that your netscape will say untrusted certificate because how will netscape know that the CA which issued the certificate to your web server is t

Re: Convert IIS 5.0 certificate to pem

2002-09-10 Thread Rakesh B Bobba
A cert installed on IIS 5.0 (.cer file) can be converted to pem format by just renaming it .pem(that is what i have been doing to use with openssl ca).but you will not have the private key. private key is not there in .cer file anyway. if you also want the private key you have to export the cert

Re: Request Policy Sections

2002-09-10 Thread Tim Gustafson
> it is possible to an extent in the policy against each DN field you have > either match,supplied or optional. match indicates that the organisation > field in the CSR should match with default value, supplied takes > whatever is supplied and optional means the field need not be there. so > if yo

Convert IIS 5.0 certificate to pem

2002-09-10 Thread Scott Bolton
Can a cert installed on IIS 5.0 be converted to pem format, ie, the cert and private key in text format (suitable for use with Apache). The Thawte site outlines a long, agonizing process of first converting to IIS 4.0 format and actually loading it into an IIS 4.0 server to accomplish the conversi