Re: function PEM_read_RSAPrivateKey not returning

2006-02-21 Thread Kyle Hamilton
On 2/21/06, William A. Rowe, Jr. <[EMAIL PROTECTED]> wrote: > One most confusing thing is that MS actually has two -different- pdb > files. One is a source program database, one is an executable program > database. You want to locate the one with a name matching your .dll > files into the same lo

Silly CA/certs questions...

2006-02-21 Thread Jeff Wiegley
Sorry for the newb question but I've been reading howtos and turorials all afternoon and I can't figure out how to make a CA thingy. (Or even if I should) Second sorry that this is so long. It's a reflection of how confused all of this has made me. If you want to skip to the summary question at t

Re: function PEM_read_RSAPrivateKey not returning

2006-02-21 Thread William A. Rowe, Jr.
Matthias wrote: I deleted all ssl-related DLLs on my system now. When I compile OpenSSL as described in INSTALL.W32, point the include library directory of my example program on "openssl\out32dll", recompile my example program, copy the 2 DLLs from "openssl\out32dll" to my example project dir

Re: Different skey size returned by i2d_RSAPrivateKey

2006-02-21 Thread Alpt
On Tue, Feb 21, 2006 at 01:49:25PM +0100, : ~> The way you are supposed to use this stuff is to first get the length, then ~> allocate enough memory and finally write out the encoding. ~> ~> It isn't a good idea to make assumptions about the maximum size. It risks ~> buffer overrun vulnerabilities

Re: function PEM_read_RSAPrivateKey not returning

2006-02-21 Thread William A. Rowe, Jr.
Matthias wrote: Kyle Hamilton wrote: Did you make sure to remove %SYSTEMROOT%\system32\ssleay32.dll and libeay32.dll? Just running the uninstaller doesn't get rid of them. No, I forgot that. Sorry, my fault. I now replaced those two DLLs with the ones I compiled myself. Good news: in Relea

Re: how to resolve depth=0

2006-02-21 Thread Winston Ford
Wow, the issue has been resolved. Many thanks for keen eyes. After commenting out the SSLCertificateChainFile directive in my httpd.conf, one was still returned in the handshake. I include a dir of vhost.conf's and had backed up the one which had ssl issues. Apache was still pulling the

Re: how to resolve depth=0

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Winston Ford wrote: > Yes, the current cert was bought this weekend from starfield > (godaddy). Reason being, another client site has a cert from > starfield, and IE successfully completes handshake. Site is https:// > www.shopelizabethbrady.com It is running on same

Re: how to resolve depth=0

2006-02-21 Thread Winston Ford
Yes, the current cert was bought this weekend from starfield (godaddy). Reason being, another client site has a cert from starfield, and IE successfully completes handshake. Site is https:// www.shopelizabethbrady.com It is running on same machine, same apache, Apache/1.3.33 mod_ssl/2.8.2

Re: how to resolve depth=0

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Winston Ford wrote: > Hello, > > I'll spare my sob story, suffice to say there's week old blood on the > wall.. > > Here's what I'm trying to resolve: > > [pbAl:~] winstonf% openssl s_client -connect www.elegantbabygifts.com: > 443 -state > CONNECTED(0003) > SSL_con

how to resolve depth=0

2006-02-21 Thread Winston Ford
Hello, I'll spare my sob story, suffice to say there's week old blood on the wall.. Here's what I'm trying to resolve: [pbAl:~] winstonf% openssl s_client -connect www.elegantbabygifts.com: 443 -state CONNECTED(0003) SSL_connect:before/connect initialization SSL_connect:SSLv2/v3 write

RE: Memory grows

2006-02-21 Thread Fell, Anthony
I too have noticed a similar leak on a VxWorks client used to secure LDAP connections.  I hopefully will investigate this issue in the next few weeks.  I will provide any pertinent details to the group if/when I have any. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Samy

Re: Different skey size returned by i2d_RSAPrivateKey

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Alpt wrote: > > Hi there, > > I want to pack a RSA priv key and this is what I'm doing: > > ... > rsa=RSA_generate_key(1024, RSA_F4, NULL, NULL); > len=i2d_RSAPrivateKey(rsa, priv); > ... > > > Why isn't `len' always the same? > Is it normal? Yes its normal. Some key co

Re: Problem with verifying root certificate GlobalSign

2006-02-21 Thread Dr. Stephen Henson
On Tue, Feb 21, 2006, Martijn Moret wrote: > Hi all, > > A partner that we need to communicate with has a certificate signed by > globalsign. I downloaded the certificates from: > http://support.globalsign.net/en/serversign/server_faq_body.cfm > > When converting these to PEM and running them tr

Problem with verifying root certificate GlobalSign

2006-02-21 Thread Martijn Moret
Hi all, A partner that we need to communicate with has a certificate signed by globalsign. I downloaded the certificates from: http://support.globalsign.net/en/serversign/server_faq_body.cfm When converting these to PEM and running them trough the openssl verify command, i get the following error