Re: openssl smime signing and corrupt message (own code)

2005-01-24 Thread michal wodzinski
On Sat, 22 Jan 2005, Dr. Stephen Henson wrote: On Fri, Jan 21, 2005, michal wodzinski wrote: Only difference in program is that i read in stdin into a readonly BIO, and therefor am able to rewind it. Whereas the openssl smime borks on stdin, and only accepts a file. Well 0.9.7 does but

recompiling OpenSSL with different function name

2005-01-24 Thread Aftab Alam
Hi All, I want to compile OpenSSL as to rename a function called MD5_Update as MD5_Update_New. I have tried to manually update it by opening the files and renaming the functions but it doesn't work for me. On running ms\do_nasm it gave me the following warning.

recompiling OpenSSL with different function name

2005-01-24 Thread Aftab Alam
Hi All, I want to compile OpenSSL as to rename a function called MD5_Update as MD5_Update_New. I have tried to manually update it by opening the files and renaming the functions but it doesn't work for me. On running ms\do_nasm it gave me the following warning.

Re: SSL error: no cipher list

2005-01-24 Thread Yuriy Synov
See if you can connect to the server using the s_client test program. For example: openssl s_client -conntect hostname:995 (use whatever port it uses for POP4+SSL, 995 is standard). Output from 'openssl s_client' follows: [EMAIL PROTECTED] /]# openssl s_client -connect

Jesse Santana/AdminFinance/CSULB is out of the office.

2005-01-24 Thread Jesse Santana
I will be out of the office starting 01/24/2005 and will not return until 01/31/2005. I will respond to your message when I return. If you require immediate assistance, please contact the Campus Help Desk at [EMAIL PROTECTED]

Re: openssl smime signing and corrupt message (own code)

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, michal wodzinski wrote: On Sat, 22 Jan 2005, Dr. Stephen Henson wrote: On Fri, Jan 21, 2005, michal wodzinski wrote: Only difference in program is that i read in stdin into a readonly BIO, and therefor am able to rewind it. Whereas the openssl smime borks on

Re: SSL error: no cipher list

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, Yuriy Synov wrote: See if you can connect to the server using the s_client test program. For example: openssl s_client -conntect hostname:995 (use whatever port it uses for POP4+SSL, 995 is standard). Output from 'openssl s_client' follows: [EMAIL

Re: openssl smime signing and corrupt message (own code)

2005-01-24 Thread michal wodzinski
Thanks for helping, openssl-users :) -- Regards, Michal __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

Re: SSL error: no cipher list

2005-01-24 Thread Yuriy Synov
In fact I'm not using OpenSSL library directly. I use an open source library Indy which in turn makes use of OpenSSL. I discovered that POP3 servers that use DES-CBC3-SHA work correctly with my program, and the server that fails uses RC4-SHA. I got what you had said about Diffie-Hellman

Re: SSL error: no cipher list

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, Yuriy Synov wrote: In fact I'm not using OpenSSL library directly. I use an open source library Indy which in turn makes use of OpenSSL. I discovered that POP3 servers that use DES-CBC3-SHA work correctly with my program, and the server that fails uses RC4-SHA. I got

Re: recompiling OpenSSL with different function name

2005-01-24 Thread Amar Desai
Aftab Alam wrote: Hi All, I want to compile OpenSSL as to rename a function called MD5_Update as MD5_Update_New. I have tried to manually update it by opening the files and renaming the functions but it doesn't work for me. On running ms\do_nasm it gave me the following warning.

openssl.cnf option to allow duplicate DNs?

2005-01-24 Thread John Douglass
I once found the config option but I cannot find any reference to it now. Can someone remind me what the option to set in openssl.cnf to allow two certificates with the same DN to be issued is? Thanks, - John Douglass Georgia Tech

Re: openssl.cnf option to allow duplicate DNs?

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, John Douglass wrote: I once found the config option but I cannot find any reference to it now. Can someone remind me what the option to set in openssl.cnf to allow two certificates with the same DN to be issued is? unique_subject, see:

SSL routines:SSL3_CLIENT_HELLO with some ciphers

2005-01-24 Thread Tyler Durden
Hello, I make a client that send some bytes to a server. Both have a certificata an key and they autenticate the peer. I have got that both use several ciphes of the TLSv1 protocol but I haven't got that five ciphers can be used. The ciphers are: EDH-DSS-CBC-SHA DH-DSS-AES128-SHA

make install fails

2005-01-24 Thread Larry Breyer
I am attempting to install openssl-0.9.7e on a Solaris 8 U60. When I make install, I get: making install in fips/sha1... sh: syntax error at line 2: `;' unexpected *** Error code 2 make: Fatal error: Command failed for target `install' Examining fips/sha1/Makefile I see:

Problems in Certificate Verification

2005-01-24 Thread Siddharth Ramesh
Hi all, I wrote a program to create a self signed CA certificate and using it, created a client certificate. When i used the command openssl verify -CAfile ca_cert.pem client_cert.pem to verify the client certificate, it verifies properly giving the output 'client_cert.pem : OK' But when I

Re: DH parameters

2005-01-24 Thread Michael D'Errico
Michael D'Errico wrote: How often should a server generate new DH parameters? Is this a dumb question? Sorry if it is. Mike __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Problems in Certificate Verification

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, Siddharth Ramesh wrote: Hi all, I wrote a program to create a self signed CA certificate and using it, created a client certificate. When i used the command openssl verify -CAfile ca_cert.pem client_cert.pem to verify the client certificate, it verifies properly

Re: DH parameters

2005-01-24 Thread Brad Hards
On Tue, 25 Jan 2005 06:50 am, Michael D'Errico wrote: Michael D'Errico wrote: How often should a server generate new DH parameters? Is this a dumb question? Sorry if it is. 1. 36 hours isn't much time to wait for a response. 2. You broke threading, rather than starting a new thread. 3. It

Re: Problems in Certificate Verification

2005-01-24 Thread Siddharth Ramesh
Thanks Steve, When I saw the error code, it says 7 : certificate signature failure But how come the *same* certificate is verified without any errors when i run the command line version?? Is there something extra which I need to do in my program before verifying ?? -Sid On Mon, 2005-01-24 at

Re: Problems in Certificate Verification

2005-01-24 Thread Dr. Stephen Henson
On Mon, Jan 24, 2005, Siddharth Ramesh wrote: Thanks Steve, When I saw the error code, it says 7 : certificate signature failure But how come the *same* certificate is verified without any errors when i run the command line version?? Is there something extra which I need to do in my

Re: DH parameters

2005-01-24 Thread Michael D'Errico
How often should a server generate new DH parameters? Is this a dumb question? Sorry if it is. 1. 36 hours isn't much time to wait for a response. I forgot it was the weekend; I've been reading the list for several weeks now and the questions that get answered are answered quickly. 2. You broke

expiration date certificate

2005-01-24 Thread Jasper
Hi all, I made an ssl cert for my dovecot IMAPS server. This works fine, but the certificate shows it will expire in a month. Is there a way to prolong this? Or is this unwise... The command used to make the certificate snipped from a shell script: $OPENSSL req -new -x509 -nodes -config

Dual 64 32 libraries

2005-01-24 Thread Bill Somerville
Hello I need to configure, build, and install both 64 and 32 bit libraries on 64 bit platforms that support both sizes. I can't find any documentation on how to do this. In this list I've found a hint that ./config -m32 might help but this gives errors on a Linux AMD_64 system. I think the

Dual 64 32 libraries

2005-01-24 Thread Bill Somerville
Hello I need to configure, build, and install both 64 and 32 bit libraries on 64 bit platforms that support both sizes. I can't find any documentation on how to do this. In this list I've found a hint that ./config -m32 might help but this gives errors on a Linux AMD_64 system. I think the