Re: Question for you all

2006-10-31 Thread Peter Kringle
Ok, since I got no replies, I will now ask how to do what I believe is required to make this happen. Basicly I have the follow steps to do. Strip the already PKCS7 signature from the firmware Create a PKCS7 signature of my own of the firmware (this is the easy part) Inject the signature I

PKCS12 question

2006-10-31 Thread Eshwaramoorthy Babu
Hi, Is it possible to have onlythe certificate in PKCS12 file. I do not want to include my private key . I just want my certificate in PKCS12 format. If so Can anyone tell me the command to convert the certificate into PKCS12 Thanks in advance, Babu

Re: Multithreading problem

2006-10-31 Thread kalikali
This won't work for a variety of reasons. One is that an SSL_write may fail because of a negotiation in progress and being able to *read* data from the socket may allow the write to progress. Even in my dreams I didn't imagined that you have try to compile it. Of course it won't work!!!

Re: man pages of PKCS12

2006-10-31 Thread Alexis Lefort
I found a source code in the openssl examples. But I still don't know how to test the type of the file (X.509 or PKCS#12). Is there a mean to do so? regards Alexis Alexis Lefort a crit: I have now several other questions: - does PKCS#12 files always have the ".p12" extension in their

Re: SSL Client authendication

2006-10-31 Thread Eshwaramoorthy Babu
Hi Bernhard, Thanks for your response. Thanks for your response.We have already purchased the certificate. But we do not have have private key with us. because we have submitted the csr request from CA's website. My client is not Browser. It is JAVA application. Now, Can I use this certificate

Re: man pages of PKCS12

2006-10-31 Thread Dr. Stephen Henson
On Tue, Oct 31, 2006, Alexis Lefort wrote: I found a source code in the openssl examples.br But I still don't know how to test the type of the file (X.509 or PKCS#12). Is there a mean to do so?br Don't post in HTML. Easiest option is to call d2i_PKCS12() and friends and see if you get an

Re: SSL Client authendication

2006-10-31 Thread Marek Marcola
Hello, My client is not Browser. It is JAVA application. Now, Can I use this certificate with my JAVA clients with out private key? will client authendication work without private key? SSL client authentication requires client private key AND certificate. When server requires client

RE: Multithreading problem

2006-10-31 Thread David Schwartz
Windows sends FD_WRITE event if writing is possible and previous invokation of 'send' has failed with WSAEWOULDBLOCK code (only this code, if it has failed from other reason, FD_WRITE will not be send and waiting for it will cause deadlock)... Let me try one more time: 1) The code

Re: SSL Client authendication

2006-10-31 Thread Bernhard Froehlich
Eshwaramoorthy Babu wrote: Hi Bernhard, Thanks for your response. Thanks for your response. We have already purchased the certificate. But we do not have have private key with us. because we have submitted the csr request from CA's website. My client is not Browser. It is JAVA

RE: SSL Client authendication

2006-10-31 Thread David Schwartz
We have already purchased the certificate. But we do not have have private key with us. because we have submitted the csr request from CA's website. My client is not Browser. It is JAVA application. Now, Can I use this certificate with my JAVA clients with out private key? will client

Re: SSL Client authendication

2006-10-31 Thread Victor Duchovni
On Tue, Oct 31, 2006 at 09:20:53PM +0100, Bernhard Froehlich wrote: My client is not Browser. It is JAVA application. Now, Can I use this certificate with my JAVA clients with out private key? will client authendication work without private key? -Babu As Marek already said, a private key

Re: Error accepting connections

2006-10-31 Thread Marek Marcola
Hello, I have a SSL Server application .. In a test scenario 20 clients try connecting to the server simultaneously. In most of the test run atleast one connection fails. The server logs the following message for the failed connection: ** server.c:809 Error accepting SSL connection

RE: Error accepting connections

2006-10-31 Thread Chong Peng
prabhu: wesaw similiar problem (i.e. bad record mac) when i have an ssl client (java implementation, talking tlsv1) try to connect to an ssl server (openssl, talking sslv3 only).we solved the problem by changing "sslv3_server_method" to "sslv23_server_method". i do not know why, but this

Re: CRLDistributionPoints

2006-10-31 Thread Karsten Ohme
Dr. Stephen Henson wrote: On Sun, Oct 29, 2006, Karsten Ohme wrote: Hello, The example from: http://www.openssl.org/docs/apps/x509v3_config.html Those docs are for 0.9.9-dev check the docs with your distribution. OK, works better. Almost. But I want to add an base DN for an LDAP

Re: PKCS12 question

2006-10-31 Thread Krishna Prasad
Hi A PKCS#12 file will have to contain the private key,you cannot have only the certificate in PKCS#12 format. regards krish On 10/31/06, Eshwaramoorthy Babu [EMAIL PROTECTED] wrote: Hi, Is it possible to have onlythe certificate in PKCS12 file. I do not want to include my private key . I