Re: certificate w non-exportable private key

2004-10-25 Thread Jean-Luc Pinardon
Hello allan, Just a (possible silly) question : Have you try to export your certificate with a Mozilla browser (mozilla or firefox) ? Alternatively, have you check for the paranoid rules in the IE security tabs ? Best regards, J.L. allan juul wrote: hello beeing new to openssl (as well as ssl) h

Client certificates with IIS 5.1

2004-10-25 Thread Jas Amidzic
I have IIS 5.1 running with the server certificate that has been certified by a CA supported by openssl. I have also created arbitrary client certificate that has been signed by the same CA. The client certificate has been successfully imported in to IE and Firefox as a personal certificate. But

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

2004-10-25 Thread Kevin Fries
Hah.  Sure enough, doing the same thing here fixes my problem.  But, I was trying to compile against the OpenSSL.DLL instead of the lib.  I wonder it that's what broke my environment.  What I'm trying to build, in the end, is a DLL that can be called with Java JNI to perform the same task as pkwrit

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

2004-10-25 Thread Dr. Stephen Henson
On Mon, Oct 25, 2004, Kevin Fries wrote: > Yep. I used: > > .\pkwrite client.pem 1234567 nicename client.p12 > > And I get: > Error creating PKCS#12 structure > 2260:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib > .c:637:Expecting: ANY PRIVATE KEY > 2260:error:090

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

2004-10-25 Thread Kevin Fries
Yep.  I used: > .\pkwrite client.pem 1234567 nicename client.p12   And I get: Error creating PKCS#12 structure2260:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib.c:637:Expecting: ANY PRIVATE KEY2260:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pe

length of file output

2004-10-25 Thread Paolo Serra
Hi all, I'm next to integrate my cipher, but I need an other little help: I get the lenght of my file to encrypt with the variable "inl" of the file /crypto/evp/evp_locl.h. Here is, as an example, the code use for cbc mode: #define BLOCK_CIPHER_func_cbc(cname, cprefix, kstruct, ksched) \ static int

RE: Any and all assistance would be appreciated.

2004-10-25 Thread Rogers, Wayne
Thanks for your input Steve. And thanks in advance for any additional assistance that you my be able to provide. The following is the output from the command you asked me to run. OpenSSL 0.9.5a 1 Apr 2000 built on: date not available platform: information not available options: bn(64,32) md2(int)

Re: Any and all assistance would be appreciated.

2004-10-25 Thread Dr. Stephen Henson
On Mon, Oct 25, 2004, Rogers, Wayne wrote: > > > D:\UAT 1>openssl pkcs12 -in cert.crt -inkey priv.key -export -out IISv2.pfx > > Loading 'screen' into random state - done > > Enter Export Password: > > Verifying password - Enter Export Password: > > 264:error:06074079:digital envelope routi

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

2004-10-25 Thread Dr. Stephen Henson
On Mon, Oct 25, 2004, Kevin Fries wrote: > > What PEM files did you try: client.pem in the apps directory is one which > > should work. The program is expecting a certificate followed by its > > corresponding private key. > > Thank you for the reply. I'm happy there's someone here that can help

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

2004-10-25 Thread Kevin Fries
> What PEM files did you try: client.pem in the apps directory is one which> should work. The program is expecting a certificate followed by its> corresponding private key.   Thank you for the reply.  I'm happy there's someone here that can help a beginner. I did just try the client.pem and I got t

Any and all assistance would be appreciated.

2004-10-25 Thread Rogers, Wayne
D:\UAT 1>openssl pkcs12 -in cert.crt -inkey priv.key -export -out IISv2.pfx Loading 'screen' into random state - done Enter Export Password: Verifying password - Enter Export Password: 264:error:06074079:digital envelope routines:EVP_PBE_CipherInit:unknown pbe algorithm:.\crypto\evp\ev

certificate w non-exportable private key

2004-10-25 Thread allan juul
hello beeing new to openssl (as well as ssl) here's a couple of naive questions. i have a (perl)script in which i need to log on into a digital signature protected website. the script can do it with a pkcs12 certificate, but now i wish to do it with my default certificate which was installed direct

OpenSSL 0.9.7e released

2004-10-25 Thread Mark J Cox
-BEGIN PGP SIGNED MESSAGE- OpenSSL version 0.9.7e released == OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 0.9.7e of our open source toolki

Re: Announce list for releases ?

2004-10-25 Thread Richard Koenning
Enrico Weigelt wrote: is there an announce mailing list or something similare where notifications on new releases are posted ? Look at http://www.openssl.org/support/ Ciao, Richard -- Dr. Richard W. Könning Fujitsu Siemens Computers GmbH ___