syntax for openssl.cnf description & prompting for input

2005-07-12 Thread Reinhard Haller
Hi, I want to create certificates with 2 subject alternative names: email employee-number The emailAddress is not part of the subject distiguished name. Until now I've not found a documentation, how to insert the fields in the subjectAltName and prompt the user for input (something like the foll

Re: BER to DER conversion

2005-07-12 Thread Tan Eng Ten
Hi, You may be in for some luck, the FAQ says "...OpenSSL ASN1 decoders can process BER." Give it a try and see if OpenSSL is able to decode what your HSM exports. No guarantees and don't quote me. Lincoln wrote: Hello all, Does OpenSSL have a routine to convert BER encoded blob into D

Link Errors building CGI on Win32

2005-07-12 Thread Andrew Willemsen
I have developed a CGI that uses OpenSSL and it is building fine using 0.9.7e. Following the release of 0.9.8 I tried rebuilding with the new release. However, I am getting the following link errors: libeay32.lib(cryptlib.obj) : error LNK2001: unresolved external symbol [EMAIL PROTECTED] libeay

SSL3_READ_BYTES:TLSV1 ALERT DECRYPT ERROR

2005-07-12 Thread Dimo Diakov
Hi all, I am utilizing OpenSSL version 0.9.6e in conjunction with another third party application, actually, the OpenSSL is statically linked with it. The problem is that there are plenty of sslEndpoint socket errors, which fail at the call to the 'accept' function. These errors are logged con

Config File ..help !

2005-07-12 Thread Nabil Ghadiali
Title: Config File ..help ! Hello, Can someone tell me if this is the correct format for a configuration file to be used with the asn1parse -genconf option. -- asn1=SEQUENCE:otherName [otherName] type-id=OID:1.3.6.1.4.1.311.20.2.3 value=UTF8:[EMAIL PROTECTED] ---

Client authentication problem

2005-07-12 Thread Gaël Lams
Hi all, I'm trying to configure client authentication for one of my sites (SuSe 9.0, apache 2.0.48, openssl-0.9.7b-133 distribution's rpm). You will find below the steps I'm following, the problem I have is that, when I go to the page, it first asks me to accept the server's certificate, then ask

OpenSSL 0.9.8 with AIX 5.2

2005-07-12 Thread Tom Spence
Hello,   I have very small problem but it won't running...  Please help me...  Here is what I got:   # ./Configure aix-gcc (no problem) # make gcc -I.. -I../.. -I../../include -DOPENSSL_THREADS -D_THREAD_SAFE -DDSO_DLFCN -DHAVE_DLFCN_H -O -DB_ENDIAN -c  -o aix_ppc32.o aix_ppc32.s (It stop

Re: OpenSSL 0.9.8 with AIX 5.2

2005-07-12 Thread Stewart Dean
why not take the binary IBM supplies and supports? Tom Spence wrote: Hello, I have very small problem but it won't running... Please help me... Here is what I got: # ./Configure aix-gcc (no problem) # make gcc -I.. -I../.. -I../../include -DOPENSSL_THREADS -D_THREAD_SAFE -DDSO

Re: OpenSSL 0.9.8 with AIX 5.2

2005-07-12 Thread Tom Spence
Good idea and where can I find?  BULL GROUP Website?Stewart Dean <[EMAIL PROTECTED]> wrote: why not take the binary IBM supplies and supports?Tom Spence wrote:> Hello,> > I have very small problem but it won't running... Please help me... > Here is what I got:> > # ./Configure aix-gcc> (no pro

3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread David Templar
Hi all, I am really stuck and have tried all I can - I really need your help to generate a software publishing certificate and its root cert to install on motorola phones. I am enclosing a copy of an already existing cert on the phone. It appears to be a V4 x509 cert - I could be wrong thoug

How to get libeay32.dll and libssl32.dll?

2005-07-12 Thread Carsten Krüger
Hello, how do I get libeay32.dll and libssl32.dll? I've tried: $ ./Configure mingw enable-rc5 enable-mdc2 shared [...] $ make depend [...] $ make [...] $ make test $ make install Build works and I get cryptoeay32-0.9.8.dll and ssleay32-0.9.8.dll. I think cryptoeay32-0.9.8.dll is libeay32.dll

IBM's OpenSSL binaries

2005-07-12 Thread Stewart Dean
This is free, although: 1) you have to register 2) the latest copy is 9.7d Note that: 1) it is in RPM format 2) OPen SSH is available from the same page, though in installp format (use smitty) 3) both may have their libraries in funny places (typically IBM, they know better), so if you compile o

Re: How to get libeay32.dll and libssl32.dll?

2005-07-12 Thread MeeAGhost
I use Msys/Mingw to build the dlls using openssl-0.9.8. However I have had to remove line 910 [$IsMK1MF=1 if ($target eq "mingw" && ^O ne "cygwin");] (as suggested in a different thread by Doug Kaufman) from the Configure script. At the moment I am having trouble getting the .dlls to work but the

Re: Client authentication problem

2005-07-12 Thread Lincoln
Looks to me that client authentication failed. And this is most likely due to client cert processing on the server side: [notice] child pid 9192 exit signal Segmentation fault (11) The above indicates that. Make sure client cert processing is done correctly on the server side. If it is a progr

Re: 3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread Pablo J Royo
I suppose this is not the right forum to ask for Smartphone issues. Anyway, here: http://www.jacco2.dds.nl/networking/crtimprt.html may be you could find a way to do what you need , a little idea or maybe something more. He explains how to import a *personal* certificate and a CA certificate on

Re[2]: How to get libeay32.dll and libssl32.dll?

2005-07-12 Thread Carsten Krüger
Hi, M> dllwrap --dllname libeay32.dll --output-lib libeay32.a --def M> ms/libeay32.def libcrypto.a -lwsock32 -lgdi32 $ dllwrap --dllname libeay32.dll --output-lib libeay32.a --def ms/libeay32.def libcrypto.a -lwsock32 -lgdi32 libcrypto.a(bio_cb.o):bio_cb.c:(.text+0x1e2): undefined reference to

Re: 3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread David Templar
Thanks, it does help a bit... could you tell me about the cryptoapi program? But I will say that it is not a smartphone. It uses standard motorola software and its jce package All I really need to do is convert my standard certs to the motman.crt file I had attached. I have tried everythin

RE: 3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread Daniel Diaz Sanchez
Hi,   CryptoAPI is the security API of Microsoft. If you are using a Pocket PC or SmartPhone you can use a subset of functions of that API (that is completely supported on NT). You can have a look to openssl-dev and will find a message from me giving support to build OpenSSL for Pocket P

Re: Re[2]: How to get libeay32.dll and libssl32.dll?

2005-07-12 Thread MeeAGhost
I had errors similar to yours (which I attributed to a typo I had made) so I deleted the entire openssl-0.9.8 directory and then started from scratch using the instructions I listed in my previous post and everything worked under msys. On 7/12/05, Carsten Krüger <[EMAIL PROTECTED]> wrote: ... [s

Re[4]: How to get libeay32.dll and libssl32.dll?

2005-07-12 Thread Carsten Krüger
Hello MeeAGhost, M> I had errors similar to yours (which I attributed to a typo I had M> made) so I deleted the entire openssl-0.9.8 directory and then started M> from scratch using the instructions I listed in my previous post and M> everything worked under msys. no typo: c&p, fresh tar extracte

Re: 3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread David Templar
Thankyou for the reply. I have tried the microsoft sdk and the matter is not resolved. Motorola will not help with certificates, they want you to send them your code and they will sign it if the like it - after 6-8 weeks of an application process! The only hope I have is to create my own certif

Re: 3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread Dr. Stephen Henson
On Tue, Jul 12, 2005, David Templar wrote: > Hi all, > > I am really stuck and have tried all I can - I really need your help to > generate a software publishing certificate and its root cert to install > on motorola phones. > > I am enclosing a copy of an already existing cert on the phone. I

Re: 3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread David Templar
Thanks, I will try this within the next hour to see what happens. Is there a key size or any other issues that I need to consider when I generate a new cert now? Dr. Stephen Henson wrote: On Tue, Jul 12, 2005, David Templar wrote: Hi all, I am really stuck and have tried all I can - I r

Re: syntax for openssl.cnf description & prompting for input

2005-07-12 Thread Goetz Babin-Ebell
Reinhard Haller wrote: Hi, I want to create certificates with 2 subject alternative names: email employee-number The emailAddress is not part of the subject distiguished name. Until now I've not found a documentation, how to insert the fields in the subjectAltName and prompt the user for input

Re: Dr Henson is a superstar!!! 3rd time request... PLEASE help! Phone cert creation

2005-07-12 Thread David Templar
I tried what you said, and for the first time the phone accepts something! Only thing is that it gives me 2 messages when I check the status of the certificate: 1. no name for it 2. expired. The phone says the expiry date is wed 0/0/00. Instead of generating a new certificate, I used one I gene

openssl-0.9.8 problems with ssh

2005-07-12 Thread Ramon Berger
SSL 0.9.8 Users: I tried to upgrade to openssl-0.9.8 today and had a few problems. And was woundering if anyone else saw this. First, when I unpacked the tarball http://www.openssl.org/source/openssl-0.9.8.tar.gz I got the following message: tar: A lone zero block at 31800 I was, however able

Radha K. Manam/IS/PPLC is out of the office.

2005-07-12 Thread Radha K. Manam
I will be out of the office starting 07/12/2005 and will not return until 07/20/2005. I will respond to your message when I return. If it is EDI emergency, please contact Ha T. Le at 713-989-7339. Thanks This file and any files transmitted with it is intended for the exclusive use of the indi

Re: openssl-0.9.8 problems with ssh

2005-07-12 Thread Tim Rosmus
On Tue, 12 Jul 2005, Ramon Berger wrote: |# SSL 0.9.8 Users: |# |# I got the following message: |# tar: A lone zero block at 31800 not a problem. |# gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o |# sshconnect2.o -L. -Lopenbsd-compat/ -L/opt/ssl/lib -R/opt/ssl/lib

RE: Algorithm licensing

2005-07-12 Thread Ted Mittelstaedt
  md5 is not patented.  des and 3des the patent expired.  Blowfish was originally published not patented.  That's all I know.  With Cisco IPSec work just about all configs use md5, sha, des and 3des and Cisco isn't known for liking to pay royalties to anyone.  If I were you I would stick

Re: Algorithm licensing

2005-07-12 Thread Joseph Oreste Bruni
I found this via google http://www.cs.rochester.edu/users/faculty/nelson/courses/cryptology/ notes/lecture_19.txt On Jul 12, 2005, at 8:28 PM, Ted Mittelstaedt wrote: md5 is not patented. des and 3des the patent expired. Blowfish was originally published not patented. That's all I

MS VC 5: compilation fails

2005-07-12 Thread Christian Weber
Dear 0.9.8 users. Openssl 0.9.8 fails to compile under VC 5 with following compiler output: > C:\wrk\openssl-0.9.8>nmake -f ms\ntdll.mak > > Microsoft (R) Program Maintenance Utility Version 1.62.7022 > Copyright (C) Microsoft Corp 1988-1997. All rights reserved. > > Building OpenSSL >

RE: MS VC 5: compilation fails

2005-07-12 Thread Steven Reddie
That error message tends to occur when the code is too complicated for the compiler. You may be able to avoid the error by rearranging the code in that module, but it's a hit and miss approach. Upgrading to a newer compiler should fix the problem (since this builds fine under VC6 and up). -