Re: Having problem compillin in solaris 10.

2005-08-31 Thread Andreas Almroth
Lisandro Grullon wrote: Hi there, I am having some issues compiling openssl 0.9.8. Bellow I am pasting the output of the errors. I apreciate your help. I am running Solaris 10 x86 opteron. echo '#endif' ) >buildinf.h gcc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN

Re: Openssl Engine calling code (soft pkcs11) also written in openssl conflict

2005-08-31 Thread Christopher Nebergall
>you could use RSA_set_method with RSA_PKCS1_SSLeay for example That was all I needed. I've got it working now. Thanks, Christopher __ OpenSSL Project http://www.openssl.org User Support Mailing L

Having problem compillin in solaris 10.

2005-08-31 Thread Lisandro Grullon
Hi there, I am having some issues compiling openssl 0.9.8. Bellow I am pasting the output of the errors. I apreciate your help. I am running Solaris 10 x86 opteron. bash-3.00# cd openssl-0.9.8 openssl-0.9.8/ openssl-0.9.8.tar bash-3.00# cd openssl-0.9.8 bash-3.00# ./config Operating system

Re: Openssl Engine calling code (soft pkcs11) also written in openssl conflict

2005-08-31 Thread Nils Larsch
Christopher Nebergall wrote: I've been working with some patches to curl I found on the curl mailing list to support openssl and opensc's engine_pkcs11. Basically it consists of Curl 7.14 + patch which adds dynamic engine support -> opensc-20050826 [engine_pkcs11.so] -> soft-pkcs11 1.2 o

Re: OSSL 0.9.8 Engine problems

2005-08-31 Thread Nils Larsch
Steffen Pankratz wrote: On Tue, 30 Aug 2005 23:53:37 +0200 Nils Larsch <[EMAIL PROTECTED]> wrote: Steffen Pankratz wrote: ... well, if openssl is build without DES support the DES nids are not added to the internal list of OIDs when OPENSSL_add_all_ciphers is called, hence the OBJ_* function

Re: Handling expired certificates

2005-08-31 Thread david kine
I think that I found the answer - get the error code from the X509_STORE_CTX and check for the value X509_V_ERR_CERT_HAS_EXPIRED (defined in x509_vfy.h). -David --- david kine <[EMAIL PROTECTED]> wrote: > My application requires a feature that allows > connection to secure servers whose certifi

Handling expired certificates

2005-08-31 Thread david kine
My application requires a feature that allows connection to secure servers whose certificates may have expired. I suppose that the OpenSSL verify callback function, set with the function SSL_CTX_set_verify(), can inspect an error condition and return "true" to establish the secure connection. My

Re: Signing a file

2005-08-31 Thread Dr. Stephen Henson
On Wed, Aug 31, 2005, Roberto Arias Alegria wrote: > Me again, > > Reading further in the specifications, I found out that the software > that builds the private and public keys is using PKCS #10, it is > important that I used > > openssl pkcs8 -inform DER -in mykey.key -out mykey.pem > > to co

Re: Signing a file

2005-08-31 Thread Roberto Arias Alegria
Me again, Reading further in the specifications, I found out that the software that builds the private and public keys is using PKCS #10, it is important that I used openssl pkcs8 -inform DER -in mykey.key -out mykey.pem to convert my private key? Just to know, it worked perfectly. Roberto

Re: Signing a file

2005-08-31 Thread Roberto Arias Alegria
OK, perfectly, just what I needed. Let me try it with my real file I think I can do the rest of what I need for myself. Thanks again! Roberto On 8/31/05, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > On Wed, Aug 31, 2005, Roberto Arias Alegria wrote: > > > I want to be like you! > > > > Exact

RES: RES: Signing a file

2005-08-31 Thread Cleidson
That command worked just fine. Thaks a lot. Cleidson Correia -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nome de Dr. Stephen Henson Enviada em: quarta-feira, 31 de agosto de 2005 12:46 Para: openssl-users@openssl.org Assunto: Re: RES: Signing a file On Wed, Aug

Re: OSSL 0.9.8 Engine problems

2005-08-31 Thread Dr. Stephen Henson
On Wed, Aug 31, 2005, Steffen Pankratz wrote: > On Tue, 30 Aug 2005 23:53:37 +0200 > even if i set the EVP_CIPH_CTRL_INIT flag to NULL i get this errormessage and > on the other hand if the EVP_CIPH_CTRL_INIT is set to des_ctrl > there is a implementation for this in my des-ecb.c > > so it seems

Re: Does OpenSSL support AttributeCertificate RFC 3281?

2005-08-31 Thread Dr. Stephen Henson
On Wed, Aug 31, 2005, Hashim Saleem wrote: > Hi, > I just want to know that whether OpenSSL supports Attribute Certificates or > not? I've searched in OpenSSL headers and couldnt find AttributeCertificate > data type there. I've an unpublished ASN1 module that will parse them. However in tests

Re: RES: Signing a file

2005-08-31 Thread Dr. Stephen Henson
On Wed, Aug 31, 2005, Cleidson wrote: > Hi, > I have the same problem with my private keys (I have a proprietary software > that produce a private key, and I wanna use it in Openssl), but I used the > command > "openssl asn1parse -inform DER -in file.key" and I got this: > > 0:d=0 hl=4 l= 63

Re: Signing a file

2005-08-31 Thread Dr. Stephen Henson
On Wed, Aug 31, 2005, Roberto Arias Alegria wrote: > I want to be like you! > > Exactly, the file is in PKCS #8 format, that command worked perfectly, > I entered my password and worked well. > > Now I want to sign a file. You said that I should use the the -sign > option in the dgst command, ri

RES: Signing a file

2005-08-31 Thread Cleidson
Hi, I have the same problem with my private keys (I have a proprietary software that produce a private key, and I wanna use it in Openssl), but I used the command "openssl asn1parse -inform DER -in file.key" and I got this: 0:d=0 hl=4 l= 630 cons: SEQUENCE 4:d=1 hl=2 l= 1 prim: INTEGER

Re: Signing a file

2005-08-31 Thread Roberto Arias Alegria
I want to be like you! Exactly, the file is in PKCS #8 format, that command worked perfectly, I entered my password and worked well. Now I want to sign a file. You said that I should use the the -sign option in the dgst command, right? Since I also need a md5 hash of my string I tried: openssl d

Re: For those of you using Solaris 10.

2005-08-31 Thread Lisandro Grullon
Interesting, thanks for sharing the tip. --- Lisandro Grullon New York City College of Technology Division of Continuing Education Director of Network Operations Lisandro Office:

Re: For those of you using Solaris 10.

2005-08-31 Thread Ricardo Stella
I had no problems on three V20z (Opteron based). I did have problems on a Dell Optiplex though. I'm using Sun's version of GCC which is newer than the one in sunfreeware The problem was regarding values.c, which is documented. Fix it like this: wget http://www.openssl.org/~appro/values.c ksh -

Re: For those of you using Solaris 10.

2005-08-31 Thread Lisandro Grullon
Hi rabellino, Maybe that is the problem I am having, I have apache2 install in the production server, probably that is why is not compiling properly. Well, I probably will redo one of the production server this weekend and the first thing I will do is install openssl first and them all the oth

RE: For those of you using Solaris 10.

2005-08-31 Thread Lisandro Grullon
Hi jamie, I was having the same problem compiling it in a production system. I google out that error and got your answer ;however, after getting around the addition of "_XPG6" into the make file I think it was. Something other problem was coming out, it was reference to the crypto library or so

Re: For those of you using Solaris 10.

2005-08-31 Thread Rabellino Sergio
Lisandro Grullon wrote: Hi all, After struggling with the installation in two different production servers of openssl 0.9.8 I decided to give it a shot in a new clean server just install. I install the usual stuff (make,gcc, libconv,perl(is already include in Solaris 10) ) After you install

RE: For those of you using Solaris 10.

2005-08-31 Thread Adams, Jamie (Mission Systems)
I had problems compiling on Solaris 10 (UltraSPARC III) in Sun One Studio 7 but I got around it by setting the "_XPG6" symbol. Here are my notes from that day: # ./Configure solaris-sparcv8-cc:"cc -D_XPG6 -lnsl -lsocket" NOTES: There were two problems during the compile that are resolv

For those of you using Solaris 10.

2005-08-31 Thread Lisandro Grullon
Hi all, After struggling with the installation in two different production servers of openssl 0.9.8 I decided to give it a shot in a new clean server just install. I install the usual stuff (make,gcc, libconv,perl(is already include in Solaris 10) ) After you install those things you will need

Re: Does OpenSSL support AttributeCertificate RFC 3281?

2005-08-31 Thread Richard Levitte
Hashim Saleem writes: I just want to know that whether OpenSSL supports Attribute Certificates or not? I've searched in OpenSSL headers and couldnt find AttributeCertificate data type there. Not, currently. There hasn't been a huge incentive so far. Sponsoring might work :-). Cheers, R

Does OpenSSL support AttributeCertificate RFC 3281?

2005-08-31 Thread Hashim Saleem
Hi,   I just want to know that whether OpenSSL supports Attribute Certificates or not? I've searched in OpenSSL headers and couldnt find AttributeCertificate data type there.   Regards, Hashim Saleem

Re: OSSL 0.9.8 Engine problems

2005-08-31 Thread Steffen Pankratz
On Tue, 30 Aug 2005 23:53:37 +0200 Nils Larsch <[EMAIL PROTECTED]> wrote: > Steffen Pankratz wrote: > ... > >>well, if openssl is build without DES support the DES nids are not > >>added to the internal list of OIDs when OPENSSL_add_all_ciphers is > >>called, hence the OBJ_* functions know nothing

Re: Signing a file

2005-08-31 Thread Dr. Stephen Henson
On Tue, Aug 30, 2005, Roberto Arias Alegria wrote: > Hello Stephen, > > Thanks for helping me, I'm new using open-ssl I really appreciate your > support. > > Then I used "openssl asn1parse -inform DER -in file.key" and I got this: > > 0:d=0 hl=4 l= 710 cons: SEQUENCE > 4:d=1 hl=2 l=

Builiding OpenSSL library for RSA support

2005-08-31 Thread Bhupendra K Joshi
Hi ,   I am building the OpenSSL library under Microsoft Windows. I only want RSA support but I am getting following error:- WinCryptoLibrary.lib(x_sig.obj) : error LNK2001: unresolved external symbol _ASN1_OCTET_STRING_itWinCryptoLibrary.lib(x_algor.obj) : error LNK2001: unresolved external symbo