RE: new release of mod_authz_ldap

2002-10-11 Thread Jose Correia (J)
The module is still not available at: http://authzldap.othello.ch/download.html Regards Jose Correia -Original Message- From: Andreas Mueller [mailto:[EMAIL PROTECTED]] Sent: 10 October 2002 10:59 To: [EMAIL PROTECTED] Subject: new release of mod_authz_ldap Since the OpenSSL

mod_authz_ldap compiling error

2002-10-11 Thread Glynn S. Condez
Hello gurus, I have this problem while compiling the mod_authz_ldap Here is my configure script: CPPFLAGS=-I/usr/local/include \ my openldap includes are here. LDFLAGS=-L/usr/local/lib \ Openldap libraries

RE: using prompt=no option with multiple CNs

2002-10-11 Thread Marco \Kiko\ Carnut
Hi Zachary, I am using openssl 0.96 on redhat 7.1. I am trying to write a script to generate CERTs for me, since I have hundreds of servers to generate certs for. Because of this I want to use the prompt=no option for the openssl config file. However I have multiple CN entries in my

DGUX test_bn failure: stack empty

2002-10-11 Thread jing cui
First thanks Richard Levitte and Steve Haslam who promptly answered my question about crpyt() on LINUX. It was a big help. Now I have another problem: On DG AViiON machine the make test failed with test_bn. I searched openssl-users archive and found that there was a bug report on April 7, 2000

Re: DGUX test_bn failure: stack empty

2002-10-11 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Thu, 10 Oct 2002 14:34:31 -0700 (PDT), jing cui [EMAIL PROTECTED] said: jingcui_80202 Now I have another problem: On DG AViiON machine the jingcui_80202 make test failed with test_bn. I searched jingcui_80202 openssl-users archive and found that there was a bug

Re: mod_authz_ldap compiling error

2002-10-11 Thread Andreas Mueller
On Fri, 11 Oct 2002, Glynn S. Condez wrote: certmap.c:14:17: pem.h: No such file or directory pem.h is a OpenSSL header, so you should add the openssl includes directory to your CPPFLAGS. Mit herzlichem Gruss Andreas Mueller -- Dr. Andreas Mueller,

RE: new release of mod_authz_ldap

2002-10-11 Thread Andreas Mueller
On Fri, 11 Oct 2002, Jose Correia (J) wrote: The module is still not available at: http://authzldap.othello.ch/download.html Thanks for pointing that out, the download page was not updated. The directory contained the new version, though. The update of the download page has now been

Re: mod_authz_ldap compiling error

2002-10-11 Thread Glynn S. Condez
From: Andreas Mueller [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 11, 2002 3:38 PM Subject: Re: mod_authz_ldap compiling error On Fri, 11 Oct 2002, Glynn S. Condez wrote: certmap.c:14:17: pem.h: No such file or directory pem.h is a OpenSSL header, so you should add the

Re: mod_authz_ldap compiling error

2002-10-11 Thread Glynn S. Condez
Thanks Andreas it compiles now.. --- Glynn --- - Original Message - From: Glynn S. Condez [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 11, 2002 4:12 PM Subject: Re: mod_authz_ldap compiling error From: Andreas Mueller [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

Documentation in HTML

2002-10-11 Thread Paul D.Smith
Could someone consider whether the documentation for OpenSSL should be shipped in HTML format as well as POD please? I use Windows 2000 and my current ActiveWare version of Perl only contains POD2TEXT which is somewhat limiting. I imagine it would take little work to knock up a Perl script to

Padding error

2002-10-11 Thread Peter de Vroomen
Hi, I am having problems with padding errors. I have looked through the mailing archives, but haven't found anything usefull :(. What happens is that I have a Perl script that signs a string of text. This Perl script uses Crypt::OpenSSL::RSA version 0.16, a Perl library that wraps around the

Fup: Padding error

2002-10-11 Thread Peter de Vroomen
I am sorry, but I hardly know anything about the how the encryption itself works. I am using the OpenSSL as an API, so please don't try to explain the mathematical backgrounds to me, that's probably a waste of time :). ...but if anyone can point me to a site where things are explained without

dummy question about PKCS#12

2002-10-11 Thread Aleix Conchillo
hi! this is probably basic question. i'd like to know if there is any way to obtain the public certificates inside a PKCS#12 without the need of decrypt it. if the certificates are public it should be obvious to be able to read them. is it possible? regards, aleix

Re: dummy question about PKCS#12

2002-10-11 Thread Joern Sierwald
At 18:32 11.10.2002 +0200, you wrote: hi! this is probably basic question. i'd like to know if there is any way to obtain the public certificates inside a PKCS#12 without the need of decrypt it. if the certificates are public it should be obvious to be able to read them. is it

Re: dummy question about PKCS#12

2002-10-11 Thread Aleix Conchillo
On Fri, 11 Oct 2002 18:42:02 +0200, Joern Sierwald wrote: If the certificates are encrypted, you need to decrypt them. Sorry for stating the obvious. However: there is no need to encrypt them in the 1st place. A pkcs#12 file can contain the cert unecrypted and the key encrypted. openssl

bad record mac record alert

2002-10-11 Thread Glen Matthews
Hi, i'm getting a bad record mac alert back from the server, just before it closes the connection. the ciphersuite that was negotiated was DES-CBC-SHA, and the initial handshakes, etc. completed successfully. anyone have any idea what's up? or where in the code i should look? the protocol

pkcs 12 to pem utility

2002-10-11 Thread tarun matai
Dear All, I am looking for a utility which can convert public key/private key bundeled in the pkcs12 format into the pem format, is there any utility available if yes what is the link for the download of the same. I would highly appreciate the help provided by you Thanks in

[Crypt::SSLeay] Looking for modern version of Perl binaries for Win32

2002-10-11 Thread Clinton Pierce
Looking for a bit of help here. I need to do some LWP work over https, and the proxy method for the LWP::UserAgent module doesn't do http-CONNECT style proxying (it simply re-isses the GET). According to the manpage, Crypt::SSLeay (0.45) does thorugh the $ENV{HTTPS_PROXY} interface but the

Re: pkcs 12 to pem utility

2002-10-11 Thread Vijo Cherian
try `openssl pkcs12` vijo. On Fri, Oct 11, 2002 at 06:37:45AM -0700, tarun matai wrote: Dear All, I am looking for a utility which can convert public key/private key bundeled in the pkcs12 format into the pem format, is there any utility available if yes what is the link for the

What key management algorithms are supported by OpenSSL

2002-10-11 Thread Edward Chan
I'm not quite sure what this means, but What key management algorithms, including modulus sizes, are supported by OpenSSL? Thanks, Ed __ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos More http://faith.yahoo.com

RE: using prompt=no option with multiple CNs

2002-10-11 Thread Zachary Denison
Thank You, I am still not sure what you mean though, what command do I have to issue inside the loop? When I am done I only want 1 certificate. I am not looking to generate a seperate one for each server. --- Marco \Kiko\ Carnut [EMAIL PROTECTED] wrote: Hi Zachary, I am using openssl 0.96

RE: openssl 9.6g Redhat 7.3 Seg Fault

2002-10-11 Thread DARCY,MATTHEW (HP-UnitedKingdom,ex2)
Is there any followup to this yet ? Is any more information required ? Thanks, Matt. -Original Message- From: DARCY,MATTHEW (HP-UnitedKingdom,ex2) Sent: Tuesday, October 08, 2002 1:27 PM To: '[EMAIL PROTECTED]' Subject: openssl 9.6g Redhat 7.3 Seg Fault Hi,

Re: Documentation in HTML

2002-10-11 Thread Richard Koenning
At 10:15 11.10.2002 +0100, you wrote: Could someone consider whether the documentation for OpenSSL should be shipped in HTML format as well as POD please? I use Windows 2000 and my current ActiveWare version of Perl only contains POD2TEXT which is somewhat limiting. My ActiveWare version of

ASN1_TIME

2002-10-11 Thread CHOVANEC Vladimr
Hi, I want to store certificates in database (Oracle) and I want to have expiration time of certificates stored in DATE column, but I did not find a function that converts ASN1_TIME to time_t or struct tm. Is there such a function? And I want to ask if the expiration time is always stored as

RE: ASN1_TIME

2002-10-11 Thread Alexey S. Poluntchenko
Try this one ASN1_UTCTIME_get Hi, I want to store certificates in database (Oracle) and I want to have expiration time of certificates stored in DATE column, but I did not find a function that converts ASN1_TIME to time_t or struct tm. Is there such a function? And I want to ask if the