Re[4]: free Certificate Authority

2002-10-28 Thread evilbunny
Hello Marco, MKC> The idea is to use the Verified Identity (IV) CA to get credibility to MKC> the name. This will become clear when we put the VI CA online in a few MKC> days -- then you'll see what it is capable of. I'll let you know when MKC> it's online. Meanwhile, its main ideas are described

Re: version numbering

2002-10-28 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 28 Oct 2002 23:01:51 -0600, Phil Howard <[EMAIL PROTECTED]> said: phil-openssl-users> Is 0.9.7 going to continue the version numbering phil-openssl-users> mess that 0.9.6 has? As far as I know, we haven't decided on a different scheme. phil-openssl-users>

Problem creating certificate

2002-10-28 Thread Steven Schnader
I am new to creating ssl certificates so I am not sure if I am doing this correctly, so here it goes...   I am using windows 2000 with IIS.   First I created a request through IIS. I renamed the request to certreq.pem and placed the request in the demoCA directory   Next I created my own priv

Re: How private key is used ?

2002-10-28 Thread Jimi Thompson
> I know it should be private keys somehow involved into authentication. > I'm sure I just missed something. > Could anybody help me, please ? Aleksandr, The private key is called private because it only resides on your computer. It is never involved in the exchange of information - hence the n

RE: Re[2]: free Certificate Authority

2002-10-28 Thread Marco \"Kiko\" Carnut
Hi evilbunny, > I've a similar project under development, little more testing to see > if the user has the rights to the domain, and they generate their own > private keys etc... little more effort on the users part, however I've > tried to code it in a sane method, by stopping people being able t

version numbering

2002-10-28 Thread Phil Howard
Is 0.9.7 going to continue the version numbering mess that 0.9.6 has? Or can someone please explain how to install 2 or more different versions of openssl that differ by the letter only (such as 0.9.6e and 0.9.6g) so that both versions are present on the system and that programs which were linked

Re: openssl and AES

2002-10-28 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 28 Oct 2002 16:43:21 -0800, Sunitha Kumar <[EMAIL PROTECTED]> said: sunithak> Does open ssl support AES scheme? Essentially, the schemes sunithak> given in, RFC 3268, i.e AES ciphersuites for TLS. Yes, currently in OpenSSL 0.9.7 beta3. -- Richard Levitte

Re: MD5_Final parameters

2002-10-28 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 28 Oct 2002 15:18:37 -0800 (PST), Fiel Cabral <[EMAIL PROTECTED]> said: unix4aliving> Can the first parameter to MD5_Final be NULL? unix4aliving> unix4aliving> MD5_Final(NULL, c); Well, it can, but the result will be a big KABOOM, also called "SIGSEGV" or

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)...

2002-10-28 Thread Auteria Wally Winzer Jr.
true in all accounts. i know the solution is simply use netscape.   wally - Original Message - From: Jose Correia (J) To: [EMAIL PROTECTED] Sent: Monday, October 28, 2002 00:51 Subject: RE: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)... H

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not MacOSx)...

2002-10-28 Thread Auteria Wally Winzer Jr.
Title: Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)... is netscape 7 all that good? i hated 6.x for it was just way too slow for my taste buds.  their java implementation is very poor. your thoughts? wally - Original Message - From: Karl-Michael Werz

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not MacOSx)...

2002-10-28 Thread Auteria Wally Winzer Jr.
Title: Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)... thanks karl-micheal for the valuable info.  after tedious research into the matter your findings is absolutely correct! i indeed had to use netscape, but i didn't download 7, instead i stuck with 4.80 because their

Re: speed differences between EVP_Sign and EVP_Verify

2002-10-28 Thread Martin Witzel
Signing uses the private key, normally with a longer exponent. Verification uses the public key, normally with a short exponent and with mostly zeros in the exponent. Good cryptographic software should not have different execution times dependent on a bit value, though. Martin icewind <[EMAIL PR

Error SSL_connect in MFC

2002-10-28 Thread M.Ichsan Fahreza Juli
Title: Error SSL_connect in MFC Dear all, I always get error when I use SSL_connect in microsoft platform using MFC. If I use SSL_get_error, I got error code 2. If I use GetLastError, I got 10035 error code. Why does this happen? And how to resolve this? Best Regards

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not MacOSx)...

2002-10-28 Thread Karl-Michael Werzowa
Title: Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)... Importing root certs into Mac OS clients has similar problems as adding client certs, use Netscape 7 to avoid trouble. Am 2002-10-25 16:26 Uhr schrieb "Auteria Wally Winzer Jr." unter <[EMAIL PROTECTED]>: has anyon

How private key is used ?

2002-10-28 Thread Aleksandr Konstantinov
Hello. I'm considering using OpenSSL in my application. So I have read "The SSL Protocol Version 3.0" at http://wp.netscape.com/eng/ssl3/draft302.txt . But I still can't understand, how during authentication phase parties are actually authenticated ? I could only find exchange of certificates

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not MacOSx)...

2002-10-28 Thread Karl-Michael Werzowa
Title: Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)... Hello, Wally, as I don’t use Pre-X Mac OSes anymore, only something general: The formats are portable, there should be no problem. You may encounter another problem: Available clients on Mac, using openSSL client ce

RE: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)...

2002-10-28 Thread Jose Correia (J)
Hi Wally.   Pleasure, did it work?   Well although I understand your plight towards other people (since I've been and sometimes am on the same boat), I also understand  why some times people don't respond.   Either could be:   1. too busy or away 2. Too busy but still time to answer one or

Re: OCSP and netscape 7 or mozilla

2002-10-28 Thread Michiels Olivier
Thanks for your response, but my problem was not related to the signature but related to the time on my server (incorrect time). So, thanks for your help anyway. Michiels Olivier Perry The Cynic wrote: On Mon, Oct 21, 2002 at 07:41:42AM +0200, Michiels Olivier wrote: Hi, my certi

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not Mac OSx)...

2002-10-28 Thread Auteria Wally Winzer Jr.
thanks jose for your response.  you're the only one that took the time to do so.  everyone else just sent me read receipts.   wally - Original Message - From: Jose Correia (J) To: [EMAIL PROTECTED] Sent: Sunday, October 27, 2002 23:42 Subject: RE: Converting PEM fi