RSA Key verification failure

2005-03-02 Thread prakash babu
Hello All, I am working on an IPF(Itanium Processor Family) HPUX machine. Using the configure option hpux-ia64-cc would be the appropriate configure option while building OpenSSL in this platform. But I have problems withOpenSSH authentication when I use this option. OpenSSH uses

setting certificate expiry to more than 30 days

2005-03-02 Thread Sanjay Acharya
Hello. I am posting this message again. Can someone help me over this. I am trying to create certificate using req command as follows, 1) First generated the cert request, openssl req -newkey rsa:1024 -config openssl.cnf -out xyz_careq.pem 2) Then generated the certificate as follows, openssl

Re: setting certificate expiry to more than 30 days

2005-03-02 Thread Bernhard Froehlich
Sanjay Acharya wrote: Hello. I am posting this message again. Can someone help me over this. I am trying to create certificate using req command as follows, See http://www.openssl.org/docs/apps/req.html Use -days option. Ted ;) -- PGP Public Key Information Download complete Key from

ASN1 stuff

2005-03-02 Thread Zerg
Hi,all. Sorry for my english. Please help me to clarify the using of the such ASN1 structure in RDNSequence and in SubjectDirectoryAttributes. Why do they have different ASN1 structure, if they play the same role but in different contexts. For what reason there is SET OF? OpenSSL always used

Re: setting certificate expiry to more than 30 days

2005-03-02 Thread Sanjay Acharya
But Ted, if I have to use -days option then why do we need to specify default_days name-value pairs in the openssl.cnf? :( Sanjay Acharya Wichita State University --- Bernhard Froehlich [EMAIL PROTECTED] wrote: Sanjay Acharya wrote: Hello. I am posting this message again. Can someone

Re: setting certificate expiry to more than 30 days

2005-03-02 Thread Bernhard Froehlich
Sanjay Acharya wrote: But Ted, if I have to use -days option then why do we need to specify default_days name-value pairs in the openssl.cnf? :( Sanjay Acharya Wichita State University Hmm, default_days is in the CA-section of the config. So I think it applies to the CA-command only. It would

Re: SSL over SOCKS

2005-03-02 Thread Peter
Essentially, lets say I have a file descriptor(int) for an existing SOCKS connection. I want SSL to use that existing file descriptor and to know that it doesn't need to open the actual TCP/IP connection. What are the BIO and such calls for this? Currently I'm using BIO_new_ssl_connect and

Re: SSL over SOCKS solved?

2005-03-02 Thread Peter
I am using BIO_set_fd to set the file descriptor of a BIO created by BIO_new_connect to the socket of an existing SOCKS connection. This seems to work fine, lsof -i reports that indeed I am connected to the proxy. However, I want to be sure that my ip address is not embedded in the SSL

PKCS12 help needed

2005-03-02 Thread Carlos Roberto Zainos H
Hi there!!! I'm trying to usethe openssl pkcs12 option from command line but I don't undestand very well the options. I have a pair (private key and certificate file) both in PEM format. I want to get a PKCS#12 file which content both. I would like importa that (the PKCS12 file) into MS Outlook

Re: PKCS12 help needed

2005-03-02 Thread Dr. Stephen Henson
On Wed, Mar 02, 2005, Carlos Roberto Zainos H wrote: Hi there!!! I'm trying to use the openssl pkcs12 option from command line but I don't undestand very well the options. I have a pair (private key and certificate file) both in PEM format. I want to get a PKCS#12 file which content

Re: SSL over SOCKS solved?

2005-03-02 Thread Dr. Stephen Henson
On Wed, Mar 02, 2005, Peter wrote: I am using BIO_set_fd to set the file descriptor of a BIO created by BIO_new_connect to the socket of an existing SOCKS connection. This seems to work fine, lsof -i reports that indeed I am connected to the proxy. However, I want to be sure that my ip

ssl routines problem

2005-03-02 Thread Metal Gear
hi all, i m using syslog-ng with stunnel (to encrypt network transfer of logs). For some days i used the setup without any problem but after that i got some errors and stunnel dows not load. Actually i load my stunnel from rc.local (for starting it at boot) and exceptions are thrown related to

BIO chaining and closing

2005-03-02 Thread Peter
Thanks, So BIO_new_socket would create a BIO around the socket of my choosing which would be more portable than doing BIO_set_fd afterwards? But then the current code uses BIO_new_ssl_connect to create the bio in the first place. I assume I would replace this with BIO_new_socket and