syntax for openssl.cnf description prompting for input

Hi, I want to create certificates with 2 subject alternative names: email employee-number The emailAddress is not part of the subject distiguished name. Until now I've not found a documentation, how to insert the fields in the subjectAltName and prompt the user for input (something like the

Re: BER to DER conversion

Hi, You may be in for some luck, the FAQ says ...OpenSSL ASN1 decoders can process BER. Give it a try and see if OpenSSL is able to decode what your HSM exports. No guarantees and don't quote me. Lincoln wrote: Hello all, Does OpenSSL have a routine to convert BER encoded blob into

Link Errors building CGI on Win32

I have developed a CGI that uses OpenSSL and it is building fine using 0.9.7e. Following the release of 0.9.8 I tried rebuilding with the new release. However, I am getting the following link errors: libeay32.lib(cryptlib.obj) : error LNK2001: unresolved external symbol [EMAIL PROTECTED]

SSL3_READ_BYTES:TLSV1 ALERT DECRYPT ERROR

Hi all, I am utilizing OpenSSL version 0.9.6e in conjunction with another third party application, actually, the OpenSSL is statically linked with it. The problem is that there are plenty of sslEndpoint socket errors, which fail at the call to the 'accept' function. These errors are logged

Config File ..help !

Title: Config File ..help ! Hello, Can someone tell me if this is the correct format for a configuration file to be used with the asn1parse -genconf option. -- asn1=SEQUENCE:otherName [otherName] type-id=OID:1.3.6.1.4.1.311.20.2.3 value=UTF8:[EMAIL PROTECTED]

Client authentication problem

Hi all, I'm trying to configure client authentication for one of my sites (SuSe 9.0, apache 2.0.48, openssl-0.9.7b-133 distribution's rpm). You will find below the steps I'm following, the problem I have is that, when I go to the page, it first asks me to accept the server's certificate, then ask

OpenSSL 0.9.8 with AIX 5.2

Hello, I have very small problem but it won't running... Please help me... Here is what I got: # ./Configure aix-gcc (no problem) # make gcc -I.. -I../.. -I../../include -DOPENSSL_THREADS -D_THREAD_SAFE -DDSO_DLFCN -DHAVE_DLFCN_H -O -DB_ENDIAN -c -o aix_ppc32.o aix_ppc32.s (It stops

Re: OpenSSL 0.9.8 with AIX 5.2

why not take the binary IBM supplies and supports? Tom Spence wrote: Hello, I have very small problem but it won't running... Please help me... Here is what I got: # ./Configure aix-gcc (no problem) # make gcc -I.. -I../.. -I../../include -DOPENSSL_THREADS -D_THREAD_SAFE

Re: OpenSSL 0.9.8 with AIX 5.2

Good idea and where can I find? BULL GROUP Website?Stewart Dean [EMAIL PROTECTED] wrote: why not take the binary IBM supplies and supports?Tom Spence wrote: Hello, I have very small problem but it won't running... Please help me... Here is what I got: # ./Configure aix-gcc (no problem) #

3rd time request... PLEASE help! Phone cert creation

Hi all, I am really stuck and have tried all I can - I really need your help to generate a software publishing certificate and its root cert to install on motorola phones. I am enclosing a copy of an already existing cert on the phone. It appears to be a V4 x509 cert - I could be wrong

How to get libeay32.dll and libssl32.dll?

Hello, how do I get libeay32.dll and libssl32.dll? I've tried: $ ./Configure mingw enable-rc5 enable-mdc2 shared [...] $ make depend [...] $ make [...] $ make test $ make install Build works and I get cryptoeay32-0.9.8.dll and ssleay32-0.9.8.dll. I think cryptoeay32-0.9.8.dll is libeay32.dll

IBM's OpenSSL binaries

This is free, although: 1) you have to register 2) the latest copy is 9.7d Note that: 1) it is in RPM format 2) OPen SSH is available from the same page, though in installp format (use smitty) 3) both may have their libraries in funny places (typically IBM, they know better), so if you compile

Re: How to get libeay32.dll and libssl32.dll?

I use Msys/Mingw to build the dlls using openssl-0.9.8. However I have had to remove line 910 [$IsMK1MF=1 if ($target eq mingw ^O ne cygwin);] (as suggested in a different thread by Doug Kaufman) from the Configure script. At the moment I am having trouble getting the .dlls to work but the

Re: Client authentication problem

Looks to me that client authentication failed. And this is most likely due to client cert processing on the server side: [notice] child pid 9192 exit signal Segmentation fault (11) The above indicates that. Make sure client cert processing is done correctly on the server side. If it is a

Re: 3rd time request... PLEASE help! Phone cert creation

I suppose this is not the right forum to ask for Smartphone issues. Anyway, here: http://www.jacco2.dds.nl/networking/crtimprt.html may be you could find a way to do what you need , a little idea or maybe something more. He explains how to import a *personal* certificate and a CA certificate on

Re[2]: How to get libeay32.dll and libssl32.dll?

Hi, M dllwrap --dllname libeay32.dll --output-lib libeay32.a --def M ms/libeay32.def libcrypto.a -lwsock32 -lgdi32 $ dllwrap --dllname libeay32.dll --output-lib libeay32.a --def ms/libeay32.def libcrypto.a -lwsock32 -lgdi32 libcrypto.a(bio_cb.o):bio_cb.c:(.text+0x1e2): undefined reference to

Re: 3rd time request... PLEASE help! Phone cert creation

Thanks, it does help a bit... could you tell me about the cryptoapi program? But I will say that it is not a smartphone. It uses standard motorola software and its jce package All I really need to do is convert my standard certs to the motman.crt file I had attached. I have tried

RE: 3rd time request... PLEASE help! Phone cert creation

Hi, CryptoAPI is the security API of Microsoft. If you are using a Pocket PC or SmartPhone you can use a subset of functions of that API (that is completely supported on NT). You can have a look to openssl-dev and will find a message from me giving support to build OpenSSL for Pocket

Re: Re[2]: How to get libeay32.dll and libssl32.dll?

I had errors similar to yours (which I attributed to a typo I had made) so I deleted the entire openssl-0.9.8 directory and then started from scratch using the instructions I listed in my previous post and everything worked under msys. On 7/12/05, Carsten Krüger [EMAIL PROTECTED] wrote: ...

Re[4]: How to get libeay32.dll and libssl32.dll?

Hello MeeAGhost, M I had errors similar to yours (which I attributed to a typo I had M made) so I deleted the entire openssl-0.9.8 directory and then started M from scratch using the instructions I listed in my previous post and M everything worked under msys. no typo: cp, fresh tar extracted

Re: 3rd time request... PLEASE help! Phone cert creation

Thankyou for the reply. I have tried the microsoft sdk and the matter is not resolved. Motorola will not help with certificates, they want you to send them your code and they will sign it if the like it - after 6-8 weeks of an application process! The only hope I have is to create my own

Re: 3rd time request... PLEASE help! Phone cert creation

On Tue, Jul 12, 2005, David Templar wrote: Hi all, I am really stuck and have tried all I can - I really need your help to generate a software publishing certificate and its root cert to install on motorola phones. I am enclosing a copy of an already existing cert on the phone. It

Re: 3rd time request... PLEASE help! Phone cert creation

Thanks, I will try this within the next hour to see what happens. Is there a key size or any other issues that I need to consider when I generate a new cert now? Dr. Stephen Henson wrote: On Tue, Jul 12, 2005, David Templar wrote: Hi all, I am really stuck and have tried all I can - I

Re: syntax for openssl.cnf description prompting for input

Reinhard Haller wrote: Hi, I want to create certificates with 2 subject alternative names: email employee-number The emailAddress is not part of the subject distiguished name. Until now I've not found a documentation, how to insert the fields in the subjectAltName and prompt the user for

Re: Dr Henson is a superstar!!! 3rd time request... PLEASE help! Phone cert creation

I tried what you said, and for the first time the phone accepts something! Only thing is that it gives me 2 messages when I check the status of the certificate: 1. no name for it 2. expired. The phone says the expiry date is wed 0/0/00. Instead of generating a new certificate, I used one I

openssl-0.9.8 problems with ssh

SSL 0.9.8 Users: I tried to upgrade to openssl-0.9.8 today and had a few problems. And was woundering if anyone else saw this. First, when I unpacked the tarball http://www.openssl.org/source/openssl-0.9.8.tar.gz I got the following message: tar: A lone zero block at 31800 I was, however able

Radha K. Manam/IS/PPLC is out of the office.

I will be out of the office starting 07/12/2005 and will not return until 07/20/2005. I will respond to your message when I return. If it is EDI emergency, please contact Ha T. Le at 713-989-7339. Thanks This file and any files transmitted with it is intended for the exclusive use of the

Re: openssl-0.9.8 problems with ssh

On Tue, 12 Jul 2005, Ramon Berger wrote: |# SSL 0.9.8 Users: |# |# I got the following message: |# tar: A lone zero block at 31800 not a problem. |# gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o |# sshconnect2.o -L. -Lopenbsd-compat/ -L/opt/ssl/lib -R/opt/ssl/lib

RE: Algorithm licensing

md5 is not patented.des and 3desthe patent expired. Blowfish was originally published not patented. That's all I know. With Cisco IPSec work just about all configs use md5, sha, des and 3des and Cisco isn't known for liking to pay royalties to anyone. If I were you I would stick with

Re: Algorithm licensing

I found this via google http://www.cs.rochester.edu/users/faculty/nelson/courses/cryptology/ notes/lecture_19.txt On Jul 12, 2005, at 8:28 PM, Ted Mittelstaedt wrote: md5 is not patented. des and 3des the patent expired. Blowfish was originally published not patented. That's all I