Problem S/MIME and HTML content

2003-01-08 Thread Stephane Rozes
Hello the list, I have a problem when I want to sign with S/MIME an HTML mail content. When I sign HTML data (openssl smime -rc2-128 -text -sign -in example.htm -out result.txt -signer cert.pem), OpenSSL adds a Content-Type text/plain above my HTML part (see below). So when I receive the e-mail,

Re: SSL_CTX_use_PrivateKey_file

2003-01-08 Thread Lutz Jaenicke
On Tue, Jan 07, 2003 at 04:06:34PM -0800, Fisk, Kevin wrote: Is there any way to pass a string with the private key, instead of reading it from a file, such as read it from a database and pass it to the function, without writing it to disk? Please look into SSL_CTX_use_PrivateKey_ASN1(), which

Motherboards with RNG onboard. Anybody know some?

2003-01-08 Thread Edin Dizdarevic
Hi, for a few days now, I've been looking for motherboards with RNG onboard. Intel integrated such device in their chipset, but since this feature is not that interesting as AGPx8, not many motherboard manufacturers point this out. 'till now I actually found only one board from Epox (EP-4BEAV)

Re: Once again

2003-01-08 Thread Marcin Giedz
Dnia nie 22. of December 2002 02:42, Geoff Thorpe napisa: * Marcin Giedz ([EMAIL PROTECTED]) wrote: Hi, I think my rectent mail disappeard. So I reapeat my question: Is it possible to check how does zlib compression work?? - openssl-0.9.7-SNAP20021216 (any values) Configure with

typos in man pages

2003-01-08 Thread Jan Schaumann
Hello, Some typos in the openssl man pages were discovered (see NetBSD's PR misc/19627 http://www.NetBSD.org/cgi-bin/query-pr-single.pl?number=19627), attached please find a patch to correct them. Cheers, -Jan -- http://www.netbsd.org - Multiarchitecture OS, no hype required. Index:

[no subject]

2003-01-08 Thread Ed Harty
Hi, I am generating a client cert for Apache using openssl with my own CA as follows: openssl genrsa -out client.key 1024 openssl req -new -key client.key -out client.csr openssl x509 -req -days 365 -CA myCA.cert -CAkey myCA.key -CAcreateserial -in client.csr -out client.crt openssl pkcs12

certificate or crypto usage

2003-01-08 Thread Alain Degreffe
Hi all, Iam looking for a secure way to do this: Permit saving files on a media only with a correct passphrase and always permit loading this files but with an automatic checking that the correct passphrase were used to store them In the real world, I want to save settings of

hardware accelerator/non-blocking IO

2003-01-08 Thread Paul Brown
Hi Does openssl provide an api for non-blocking IO over an SSL hardware accelerator? Cheers Paul This message contains confidential information and is intended only for the named individual and may not be disseminated without prior permission. If you are not the named

how to generate PRNG in Solaris 8 ?

2003-01-08 Thread Leonardo Lagos
Hi People, After downloading openssl and openssh from sunfreeware.com, for my sparc/8, I'm geeting the error PRNG not seed whenever I try to use ssh. Reading the FAQ, this error is there, but I still am unable to fix it. I've run, as root: # /usr/local/ssl/bin/openssl OpenSSL rand 128 unable

little problem

2003-01-08 Thread Batoussov Artem
Hello, We are 2 students of a Technical Institute of Telecommunication and Computer Networks in France. We have to realize a draft which is a server of certificate X.509. It must issue certificates to users who connect to the server. We have a probleme with the automatic creation of

Re: typos in man pages

2003-01-08 Thread Lutz Jaenicke
On Thu, Jan 02, 2003 at 11:46:35AM -0500, Jan Schaumann wrote: Hello, Some typos in the openssl man pages were discovered (see NetBSD's PR misc/19627 http://www.NetBSD.org/cgi-bin/query-pr-single.pl?number=19627), attached please find a patch to correct them. The openssl man pages are

RE: how to generate PRNG in Solaris 8 ?

2003-01-08 Thread Boyle Owen
-Original Message- From: Leonardo Lagos [mailto:[EMAIL PROTECTED]] Sent: Freitag, 3. Januar 2003 16:27 To: [EMAIL PROTECTED] Subject: how to generate PRNG in Solaris 8 ? Hi People, After downloading openssl and openssh from sunfreeware.com, for my sparc/8, I'm geeting the error PRNG

Re: how to generate PRNG in Solaris 8 ?

2003-01-08 Thread Charles B Cranston
From: Leonardo Lagos [mailto:[EMAIL PROTECTED]] I've also installed patch 112438-01, to enable random support, but the file /dev/random is not in my system (I even rebooted the machine after installing the patch). I had the same problem, it's some special kind of recognize new device drivers

Re: little problem

2003-01-08 Thread Christian Pohl
Batoussov Artem wrote: Hello, We are 2 students of a Technical Institute of Telecommunication and Computer Networks in France. We have to realize a draft which is a server of certificate X.509. It must issue certificates to users who connect to the server. We have a probleme with the automatic

Re: Signing certificates on Windows

2003-01-08 Thread Vadim Fedukovich
On Wed, Jan 08, 2003 at 11:46:50PM +1200, Franck Martin wrote: You can't use virtual hosts on apache with https. Each host must have its own IP address, that's what I learnt from the doc... May be it is fixed somehow... It can be fixed by implementing Upgrade HTTP request, both by servers

Re: little problem

2003-01-08 Thread Charles B Cranston
Batoussov Artem wrote: We are 2 students of a Technical Institute of Telecommunication and Computer Networks in France. We have to realize a draft which is a server of certificate X.509. It must issue certificates to users who connect to the server. We have a probleme with the automatic

Re: Problem S/MIME and HTML content

2003-01-08 Thread Dr. Stephen Henson
On Wed, Jan 08, 2003, Stephane Rozes wrote: Hello the list, I have a problem when I want to sign with S/MIME an HTML mail content. When I sign HTML data (openssl smime -rc2-128 -text -sign -in example.htm -out result.txt -signer cert.pem), OpenSSL adds a Content-Type text/plain above my

Re: Problem S/MIME and HTML content

2003-01-08 Thread Dr. Stephen Henson
On Wed, Jan 08, 2003, Dr. Stephen Henson wrote: On Wed, Jan 08, 2003, Stephane Rozes wrote: Hello the list, I have a problem when I want to sign with S/MIME an HTML mail content. When I sign HTML data (openssl smime -rc2-128 -text -sign -in example.htm -out result.txt -signer

Re: your mail

2003-01-08 Thread Dr. Stephen Henson
On Thu, Jan 02, 2003, Ed Harty wrote: Hi, I am generating a client cert for Apache using openssl with my own CA as follows: openssl genrsa -out client.key 1024 openssl req -new -key client.key -out client.csr openssl x509 -req -days 365 -CA myCA.cert -CAkey myCA.key -CAcreateserial -in

Re: Signing certificates on Windows

2003-01-08 Thread Franck Martin
You can't use virtual hosts on apache with https. Each host must have its own IP address, that's what I learnt from the doc... May be it is fixed somehow... So assign multiple IP addresses to your network card. it is quite easy under Linux... Please feel free to contribute to the

Re: Motherboards with RNG onboard. Anybody know some?

2003-01-08 Thread Michael Sierchio
Edin Dizdarevic wrote: At the CCC congress recently in Berlin a discussion came up about randomness problems and somebody (fefe ;)) said, that the Intel solution is not that bad, since the board with it cost only a few cents more and is far better than /dev/(u)random. Better in what respect?

RE: SSL_CTX_use_PrivateKey_file

2003-01-08 Thread Fisk, Kevin
Okay. Right now, I call SSL_CTX_use_PrivateKey_file with the parameter SSL_FILETYPE_PEM. What do I pass for the type PK (first parameter) to pass this. Do I need to convert the PEM file before it can be passed as an ASN.1 certificate? I tried only passing the private key portion as a string,

RE: Signing certificates on Windows

2003-01-08 Thread Mailing Lists
i ported the cert.sh to work on win32 ( windows 95, 98, ME, 2k, XP ) isnt that great ! just use that here is the location for the script http://members.fortunecity.net/adityald/ssh-scripts does any one know how do i submit them to openssl contrib list at openssl.org -aditya my email

Re: Signing certificates on Windows

2003-01-08 Thread Charles B Cranston
Franck Martin wrote: You can't use virtual hosts on apache with https. Each host must have its own IP address, that's what I learnt from the doc... May be it is fixed somehow... The reason is that the security is negotiated before even one byte is sent down the channel, and the server has no

Re: SSL_CTX_use_PrivateKey_file

2003-01-08 Thread Lutz Jaenicke
On Wed, Jan 08, 2003 at 09:40:58AM -0800, Fisk, Kevin wrote: Okay. Right now, I call SSL_CTX_use_PrivateKey_file with the parameter SSL_FILETYPE_PEM. What do I pass for the type PK (first parameter) to pass this. Do I need to convert the PEM file before it can be passed as an ASN.1

Cancelling RSA Key Generation

2003-01-08 Thread Aram Perez
Is there a way of cancelling the generation of an RSA key pair when RSA_generate_key(...) is used? I plan to use a callback function. Thanks, Aram Perez __ OpenSSL Project http://www.openssl.org