.cer certificate file

2004-04-27 Thread Raven
Hi. I have to write client for some system that is written by other people, apparently it uses SSL ;) I can normally establish SSL connection and receive appropriate response, but problem is that they sent us their certificate file that we should use, named "users.cer" (single file). I googled an

Re: openssl, c-kermit and IBM information exchange

2004-04-27 Thread Jeffrey Altman
Your questions are really specific to C-Kermit so I suggest you use the comp.protocols.kermit.misc newsgroup in the future. I would suggest you follow the troubleshooting guidelines on the page http://www.kermit-project.org/ibm_ie.html as well as use the provided ibm_infoexchange script ftp

openssl, c-kermit and IBM information exchange

2004-04-27 Thread Vasseur, Peter
Title: Message Hello.     I am trying to make a secure FTP connection to IBM Information Exchange from my UNIX machine.  I am using C-Kermit 8.0.211, which I compiled for use with openssl on Solaris9 with gcc 3.3.     I used openssl to convert the  IBM certificates that I was assigned in  P

Re: Where are the reason codes?

2004-04-27 Thread Dr. Stephen Henson
On Tue, Apr 27, 2004, Dennis Putnam wrote: > Only from mod_ssl telling me authentication failed and OpenSSL library > errors follow. > Hmmm, still sounds like it doesn't like the certificate or key file. What happens when you try: openssl s_server -cert cert.pem -key key.pem -www Steve. -- Dr

Re: Where are the reason codes?

2004-04-27 Thread Dennis Putnam
Only from mod_ssl telling me authentication failed and OpenSSL library errors follow. On Apr 27, 2004, at 1:34 PM, Dr. Stephen Henson wrote: Do you get any errors before that one? Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance

Re: Where are the reason codes?

2004-04-27 Thread Dr. Stephen Henson
On Tue, Apr 27, 2004, Dennis Putnam wrote: > I appreciate you taking the time to help. There's good news and bad > news. > > openssl gave me an error reading the cert so I replaced that copy with > a new one. When I reran openssl it dumped out a lot of stuff, mostly > meaningless to me, but I

Re: Where are the reason codes?

2004-04-27 Thread Dennis Putnam
I appreciate you taking the time to help. There's good news and bad news. openssl gave me an error reading the cert so I replaced that copy with a new one. When I reran openssl it dumped out a lot of stuff, mostly meaningless to me, but I believe it is OK now (good news). So I tried to reenabl

RE: Windows fd/socket problem with BIO: solved !

2004-04-27 Thread David Schwartz
> It's good. I have found a solution on msdn. I have to > duplicate the socket handler ; > > DuplicateHandle(GetCurrentProcess(),(HANDLE)ctrl, > GetCurrentProcess(),(HANDLE*)&ctrl_dup, > 0, TRUE, /* inherit socket */ > DUPLICATE_SAME_ACCESS); > > Then put ctrl_dup on cmd_line args for > CreateProc

Re: Where are the reason codes?

2004-04-27 Thread Dr. Stephen Henson
On Tue, Apr 27, 2004, Dennis Putnam wrote: > It occurs when httpd starts which won't let it run. I have to disable > SSL to bring it up. > Hmmm. Maybe an invalid certificate file? Some CAs send out PKCS#7 structures that look like certificates. What does: openssl x509 -in cert.pem -text wher

Re: Where are the reason codes?

2004-04-27 Thread Dennis Putnam
It occurs when httpd starts which won't let it run. I have to disable SSL to bring it up. On Apr 27, 2004, at 12:37 PM, Dr. Stephen Henson wrote: Under what conditions do you get that error? Is it when you startup, when you get an incoming connection and have you enabled client authentication?

Re: Where are the reason codes?

2004-04-27 Thread Dr. Stephen Henson
On Tue, Apr 27, 2004, Dennis Putnam wrote: > > On Apr 27, 2004, at 12:13 PM, Dr. Stephen Henson wrote: > > > > >In this case you get: > > > >error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag > >error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 > >error > > > Thank

Re: Problems with d2i_PKCS8PrivateKey_bio function

2004-04-27 Thread Dr. Stephen Henson
On Tue, Apr 27, 2004, Carlos Roberto Zainos H wrote: > Hi Dr Henson and openssl users list. > > I'm very thankful by your answers. > > This time I'm having problems with the d2i_PKCS8PrivateKey_bio function. This always > returns me 0 , and really I don't know what's wrong. > My code: > RSA *

Re: Where are the reason codes?

2004-04-27 Thread Dennis Putnam
Thanks. I guess the next stop is Apache. On Apr 27, 2004, at 12:13 PM, Dr. Stephen Henson wrote: Apache not printing out human readable error strings is a bad thing(TM). You can convert error codes by doing: openssl errstr X Where is the string of hex digits after "error:". In this case

Re: Where are the reason codes?

2004-04-27 Thread Dennis Putnam
Thanks for the reply but I don't understand what you are saying. This is in the system log from Apache mod_ssl. On Apr 27, 2004, at 12:06 PM, Miller,Aaron wrote: Did you call ERR_load_crypto_strings ()? Without it, you won't get the descriptive text. Dennis Putnam Information Technology AIM Syste

Re: Where are the reason codes?

2004-04-27 Thread Dr. Stephen Henson
On Tue, Apr 27, 2004, Dennis Putnam wrote: > I am having a problem with Apache's mod_ssl. It is getting an error > from OpenSSL but the message is useless without an error code > reference. I cannot find any error codes at the OpenSSL web site or > anywhere else for that matter. Can someone poi

RE: Where are the reason codes?

2004-04-27 Thread Miller,Aaron
Did you call ERR_load_crypto_strings ()? Without it, you won't get the descriptive text. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dennis Putnam Sent: Tuesday, April 27, 2004 10:27 AM To: [EMAIL PROTECTED] Subject: Where are the reason codes? I a

Where are the reason codes?

2004-04-27 Thread Dennis Putnam
I am having a problem with Apache's mod_ssl. It is getting an error from OpenSSL but the message is useless without an error code reference. I cannot find any error codes at the OpenSSL web site or anywhere else for that matter. Can someone point me to a place to find what these error messages

Problems with d2i_PKCS8PrivateKey_bio function

2004-04-27 Thread Carlos Roberto Zainos H
Hi Dr Henson and openssl users list.   I'm very thankful by your answers.   This time I'm having problems with the d2i_PKCS8PrivateKey_bio function. This always returns me 0 , and really I don't know what's wrong. My code: RSA *rsa;EVP_PKEY *dec_key, **x=NULL; BIO *in=NULL; char *password = "am01ke

Re: Add a new signer to a PKCS#7

2004-04-27 Thread Antonio Ruiz Martínez
Hello! "Dr. Stephen Henson" wrote: > On Fri, Apr 23, 2004, Antonio Ruiz Martínez wrote: > > > Hello! > > > > I'm trying to add a new signer to a PKCS#7 that I receive from > > another person. In first term, I'm decoding the PKCS#7 and then I'm > > trying to using my private key and my cert t

Re: SSL_CTX_use_certificate_chain_file()

2004-04-27 Thread Dr. Stephen Henson
On Mon, Apr 26, 2004, Joseph Bruni wrote: > The man page for "SSL_CTX_use_certificate_chain_file" states: > > SSL_CTX_use_certificate_chain_file() loads a certificate chain from > file into ctx. The certificates must be in PEM format and must be > sorted starting with the certif