Problem with PKCS7 encoding and Capicom

2002-10-18 Thread Rohit Kumar
Title: Message Hi,  I am trying to make pkcs7 encryption work with capicom of Microsoft.  I am facing problem in it. Steps I am taking: i) I am getting a DER encoded certificate from a MS client ii)   I encrypt the data on server with certificate usin

Does -nodex option exist?

2002-10-18 Thread Kris Vassallo
I am having a heck of a time creating keys that will work with my tclhttpd server. In the tclhttpd secure instructions it says to do this: OpenSSL> req -new -nodex -out ./server.pem -key skey.pem (note the -NODEX option) So I type that in and I get this back: "unknown option -nodex". I can see

Re: addding own extensions to openssl.cnf

2002-10-18 Thread Dr. Stephen Henson
On Fri, Oct 18, 2002, Karl-Michael Werzowa wrote: > Hello, helpful experts, > > How do I add a custom extension to openssl? > Just adding the extension to openssl.cnf (into the right section) does not > work: > > mycustomextension=DER:01:01:FF > > (Would be nice to input the asn.1 + OID in some

addding own extensions to openssl.cnf

2002-10-18 Thread Karl-Michael Werzowa
Hello, helpful experts, How do I add a custom extension to openssl? Just adding the extension to openssl.cnf (into the right section) does not work: mycustomextension=DER:01:01:FF (Would be nice to input the asn.1 + OID in some oid-file ;-) Thanks in advance, Michael -- ***

[Crypt::SSLeay] problems

2002-10-18 Thread Foong-Ying Rousey
Hi, I'm trying to acess https urls using LWP module behind a firewall, can't get it to work. I've installed the Crypt::SSLeay module. I'm using the lwp-ssl-test that came with Crypt::SSLeay to debug. I have no problems acessing http urls. When I run lwp-ssl-test -d -proxy http://gate.***.co

Re: OCSP and netscape 7 or mozilla

2002-10-18 Thread Jean-Marc Desperrier
El Vie 18 Oct 2002 09:45, Michiels Olivier escribio: I've just implemented an OCSP responder and I want to test it with netscape or mozilla. Both browsers returns that the certificate cannot be verified for an unknown reason but when I use the ocsp client of openssl it works. Michiels Olivi

Re: Questions about seeding of the PRNG

2002-10-18 Thread Gerd Schering
Lutz Jaenicke wrote: On Fri, Oct 18, 2002 at 02:23:29PM +0200, Gerd Schering wrote: [..] 2. When RANDFILE is pointing to a plain file, I notice that after each use, data is written back and the file gets larger and larger. I understand, that it is necessary to save a new seed for the PRNG, bu

Re: Questions about seeding of the PRNG

2002-10-18 Thread Lutz Jaenicke
On Fri, Oct 18, 2002 at 02:23:29PM +0200, Gerd Schering wrote: > 1. I think on systems which have /dev/urandom, this one is used to seed > the PRNG. What happens if the environment variable RANDFILE is set and > points to another file or device? Are both used (ORed?) or only > RANDFILE? (in addi

Questions about seeding of the PRNG

2002-10-18 Thread Gerd Schering
Hi, I have three questions: 1. I think on systems which have /dev/urandom, this one is used to seed the PRNG. What happens if the environment variable RANDFILE is set and points to another file or device? Are both used (ORed?) or only RANDFILE? (in addition: what happens when using -rand in gen

A bug when end-of line is not present in the conf file

2002-10-18 Thread plamen todorov
Hi. I am using OpenSSL 0.9.6g under Windows NT. I would like to report that OpenSSL does NOT read the last line of the conf file if eol () is not present. Hope that someone will get use of it. Get 250 full-color business cards FREE r

Re: OCSP and netscape 7 or mozilla

2002-10-18 Thread Michiels Olivier
Do you also believe that this is a mistake in Mozilla ? Michiels Olivier Francisco Perez Botella wrote: El Vie 18 Oct 2002 09:45, Michiels Olivier escribio: Hi, I've just implemented an OCSP responder and I want to test it with netscape or mozilla. Both browsers returns that the

Re: OCSP and netscape 7 or mozilla

2002-10-18 Thread Francisco Perez Botella
El Vie 18 Oct 2002 09:45, Michiels Olivier escribió: > Hi, > I've just implemented an OCSP responder and I want to test it with > netscape or mozilla. > Both browsers returns that the certificate cannot be verified for an > unknown reason but when I use the ocsp client of openssl it works. > > Any

Re: S/MIME and Encryption

2002-10-18 Thread Maya
Hello jimi!   My question was if Certificate used to encrypt an MIME message by using openssl commaand tools is included within resulting SMIME message.  What do SMIME rellated RFC documents say about that? I know how to extract an Signature from Signed message, but I don't need th

Re: Verification of a signed message

2002-10-18 Thread Vadim Fedukovich
On Thu, Oct 17, 2002 at 06:59:26PM +0200, Ibl Wolfgang wrote: > Hello, > > I'm trying to verify text, which has been signed using wincrypt's > CryptSignMessage. This function produces pkcs#7 output. > OpenSSL outputs the message: > > Verification Failure > 1992:error:2107106C:PKCS7 routines:PK

OCSP and netscape 7 or mozilla

2002-10-18 Thread Michiels Olivier
Hi, I've just implemented an OCSP responder and I want to test it with netscape or mozilla. Both browsers returns that the certificate cannot be verified for an unknown reason but when I use the ocsp client of openssl it works. Any idea ? Michiels Olivier __