Re: Apache with OpenSSL - WebSphere

2004-01-06 Thread Sivasakthi (sakthi)
Hi Ng Pheng Siong, enjoyed reading yr rant and rave ;) Yes that is what i'm trying to understand. All this time i thought only the webserver i need to worry on how to configure a server certificate and to control which location to switch on the prompting of client cert. AppServer, i thought i don'

Re: Apache with OpenSSL - WebSphere

2004-01-06 Thread Ng Pheng Siong
On Wed, Jan 07, 2004 at 12:54:43PM +0800, Sivasakthi (sakthi) wrote: > Does anyone know how the 2 works together with regards to Client > Certificate SSL connection ? When I dealt with this stuff in a previous life, the WebSphere - called the "application server" - is usually placed behind a web s

Apache with OpenSSL - WebSphere

2004-01-06 Thread Sivasakthi (sakthi)
Hi, Does anyone know how the 2 works together with regards to Client Certificate SSL connection ?   .sakthi  

read SMIME email from Web based emails

2004-01-06 Thread SANS
Hello, Whereas it is simple to read SMIME signed emails in clients like Outlook etc, how can we read SMIME signed email in web-based email services like yahoo, hotmail etc. Emails are received as p7k attachment. I tried downloading it and renaming to .EML, but did not help. Any suggestions or po

Re: OpenSSL: threading question

2004-01-06 Thread Frédéric Giudicelli
- Original Message - From: "David Schwartz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 06, 2004 9:34 PM Subject: RE: OpenSSL: threading question > Except that all but one processor would be sitting idle and if any piece of > your code ever blocked (say, due to a p

PKI certificate enrollment

2004-01-06 Thread Mike Gagnon
Hi list, Does anyone know of any implementations for certificate enrollment that fit easily and work well with OpenSSL? I'm at the research phase, looking at options... Thanks! Mike Gagnon __ OpenSSL Project

RE: OpenSSL: threading question

2004-01-06 Thread David Schwartz
> > The irony is that on Windows, with IOCP, it's even more common to have > > concurrent reads and writes to the same socket handled by different > > threads. > > IOCP throws read and write events into the same event queue because you > > associate a socket with a completion port! > IOCP ? Are y

Re: SSL_accept(), IE and simultaneous connections

2004-01-06 Thread Scott Lamb
Michael Lee wrote: In my multithreaded HTTPS server application running on Windows 2000, SSL_accept() occasionally returns -1 and SSL_get_error() returns SSL_ERROR_SYSCALL when there are many simultaneous connections. A rough figure is about 1 SSL_ERROR_SYSCALL in every 100 SSL_accept(). Neither th

Re: Kerberos support?

2004-01-06 Thread Andrew Mann
Jeff Fulmer wrote: Hi, I'm the author of siege, an open source http regression tester. I recently started to recieve complaints from users on Red Hat 9.0 systems. Apparently openssl is built with kerberos support on red hat 9.0 and it requires krb5.h which is in /usr/kerberos/include How can

apache ssl handshake timeout on ie6 and windows 2000

2004-01-06 Thread R McIntosh
Hello OpenSSL and ModSSL users, I am running apache-1.3.29, mod_ssl-2.8.16-1.3.29, and openssl 0.9.7c. Users at a specific lan on the internet accessing our cgi application sometimes lock at some random place in our application. Once this happens, it will lock up again at the same page if the

Kerberos support?

2004-01-06 Thread Jeff Fulmer
Hi, I'm the author of siege, an open source http regression tester. I recently started to recieve complaints from users on Red Hat 9.0 systems. Apparently openssl is built with kerberos support on red hat 9.0 and it requires krb5.h which is in /usr/kerberos/include How can I detect if openssl w

Re: Newbie: Key question

2004-01-06 Thread Ole Hansen
On Fri, 2004-01-02 at 18:03, Schuyler Stultz wrote: > Ole Hansen wrote: > > >I now pass the 32 bytes (after the 5 bytes Record Layer Header) to my > >decrypt function and I expected a result that at least had the handshake > >protocol header as the first 4 bytes indicating the handshake type (20)

Re: OpenSSL: threading question

2004-01-06 Thread Frédéric Giudicelli
- Original Message - From: "David Schwartz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 06, 2004 11:39 AM Subject: RE: OpenSSL: threading question > > > [I suspect (based on the all-caps spelling of SOCKET and the sample > > code provided earlier) that Mr. Giudicel

Re: OpenSSL: threading question

2004-01-06 Thread Frédéric Giudicelli
- Original Message - From: "Joseph Bruni" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 06, 2004 8:58 AM Subject: Re: OpenSSL: threading question > > On Jan 6, 2004, at 12:47 AM, David Schwartz wrote: > > >> In most cases multi threads and only one SOCKET don't rea

Problem building openssl 64 bit on Solaris 9

2004-01-06 Thread Techops Test
I've been playing with building software on our test Solaris 9 machine using GCC 3.3.2. Recently I ran across a problem with Open SSL 0.9.7c - I was able to build it as 64 bit, but make test failed with the following error: error calculating RIPEMD160 on '' got c12836ad0d061da6ccde02fb0b5be87f0c62

RE: OpenSSL: threading question

2004-01-06 Thread David Schwartz
> [I suspect (based on the all-caps spelling of SOCKET and the sample > code provided earlier) that Mr. Giudicelli speaks from a Windows > perspective, which doesn't handle multiple processes very well, and > certainly does not abstract tcp sockets into simple file descriptors > the way unix does.

SSL_accept(), IE and simultaneous connections

2004-01-06 Thread Michael Lee
In my multithreaded HTTPS server application running on Windows 2000, SSL_accept() occasionally returns -1 and SSL_get_error() returns SSL_ERROR_SYSCALL when there are many simultaneous connections. A rough figure is about 1 SSL_ERROR_SYSCALL in every 100 SSL_accept(). Neither the preceding calls t

Re: OpenSSL: threading question

2004-01-06 Thread Joseph Bruni
On Jan 6, 2004, at 12:47 AM, David Schwartz wrote: In most cases multi threads and only one SOCKET don't really get along. I'm not sure why you'd say that. For TCP, reading and writing are totally independent. Using a pool of threads for I/O is quite common to protect against ambush (when an op

RE: OpenSSL: threading question

2004-01-06 Thread David Schwartz
> In any event if you end up having a MUTEX, you would be better > off with only > one thread accessing both queues. Well that's what the mutex gives you. > That would even allow you to implement a priority algo, which wouldn't be > the case with a simple MUTEX. You could give more prior