RE: Trying to statically link to libeay32.lib

2008-02-01 Thread Saju Paul
Jed, To build static openssl libraries; (libeay32.lib & ssleay32.lib) > perl Configure VC-WIN32 no-rc5 no-idea no-mdc2 > ms\do_nasm Edit: ms\nt.mak file (use any standard text editor) change '/MD' to '/MT' in CFLAG > nmake -f ms\nt.mak libeay32.lib & ssleay32.lib wi

RE: Trying to statically link to libeay32.lib

2008-02-01 Thread Saju Paul
Jed, To build static openssl libraries; (libeay32.lib & ssleay32.lib) > perl Configure VC-WIN32 no-rc5 no-idea no-mdc2 > ms\do_nasm Edit: ms\nt.mak file (use any standard text editor) change '/MD' to '/MT' in CFLAG > nmake -f ms\nt.mak libeay32.lib & ssleay32.lib wi

Re: Trying to statically link to libeay32.lib

2008-02-01 Thread Jed Mitten
> Did you follow the instructions in INSTALL.W32 for building the OpenSSL > static libraries and using them? Yeah, I was having a terrible time getting everything to compile. I was able to wrestle through a lot of it, but it simply wouldn't finished compiling. So I searched for others having si

RE: " unable to get local issuer certificate" & certificate not trusted errors

2008-02-01 Thread Saju Paul
who is the signer of certificate newcert.pem ? is it a self-signed certificate ? it should not be. newcert.pem should be signed by a trusted CA (thawte,verisign,godaddy etc.) or by a CA that is in google/gmail's CA repository. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTE

RE: Trying to statically link to libeay32.lib

2008-02-01 Thread Jeremy Farrell
> From: Jed Mitten > Sent: Friday, February 01, 2008 4:00 PM > > I am trying to statically link into libeay32.lib so that I can > distribute my application as a single executable instead of packaging > DLLs along with it. I am not new to programming, but I am new to > using libraries in C/C++. I

Re: Trying to statically link to libeay32.lib

2008-02-01 Thread Jed Mitten
Success! Scott, thank you for the help. I did indeed run nmake -f ms\ntdll.mak. Just to correct a type, I had to run 'nmake -f ms\nt.mak', not 'nt.dll'. Regards, Jed Mitten On Feb 1, 2008 12:48 PM, Scott Rueter <[EMAIL PROTECTED]> wrote: > Jed Mitten wrote: > > >I am trying to statically link

Re: Trying to statically link to libeay32.lib

2008-02-01 Thread Scott Rueter
Jed Mitten wrote: I am trying to statically link into libeay32.lib so that I can distribute my application as a single executable instead of packaging DLLs along with it. I am not new to programming, but I am new to using libraries in C/C++. I am also completely new to using OpenSSL in any app

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Dr. Stephen Henson
On Fri, Feb 01, 2008, Peter Van Biesen wrote: > Are you saying that if I do not have the private key -verify says : > > "wrong content type" > > how does openssl know which key to use for decryption/verification ? Or does > it just try them all ? I have difficulty to believe that no informatio

Engine LunaCA3 and openssl ts

2008-02-01 Thread Francis Demkiw
Hello, We would like to use the keys and certificats stored on the LunaCA3 card without using Keys on the disk when we timestamp document. What is the parameter to read the key directly from the HSM card ? We use the command : openssl ts -engine LunaCA3 -enginearg 1:10:11 -config openssl.cnf -

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Peter Van Biesen
A quick google takes me to http://www.madboa.com/geek/openssl/ which clearly states that failure to verify gives following error : Verification failure 9544:error:21075075:PKCS7 routines:PKCS7_verify:certificate verify error:pk7_smime.c:222:Verify error:self signed certificate Kindest regards,

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Peter Van Biesen
Are you saying that if I do not have the private key -verify says : "wrong content type" how does openssl know which key to use for decryption/verification ? Or does it just try them all ? I have difficulty to believe that no information can be retrieved from the pkcs7 container without the us

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Peter Van Biesen
Mmm did you open it ? Was the mime message wrong ? Dit you try : openssl smime -in peter.mbox -pk7out This works perfectly, proving this a correctly formatted message. The error occurs when you try a openssl pkcs7 ... command. I do know how to construct a valid mime message, I'm in the busi

Trying to statically link to libeay32.lib

2008-02-01 Thread Jed Mitten
I am trying to statically link into libeay32.lib so that I can distribute my application as a single executable instead of packaging DLLs along with it. I am not new to programming, but I am new to using libraries in C/C++. I am also completely new to using OpenSSL in any application. I did some

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Victor Duchovni
On Fri, Feb 01, 2008 at 04:42:50PM +0100, Peter Van Biesen wrote: > yes, I tried that too, same error. > > Just try and slap a mailheader on it ... ( or use the one I tested with in > attachment ) > Are you trying to "-verify" or "-decrypt"? The former will not work, the message is encrypted.

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Victor Duchovni
On Fri, Feb 01, 2008 at 04:42:50PM +0100, Peter Van Biesen wrote: > yes, I tried that too, same error. > > Just try and slap a mailheader on it ... ( or use the one I tested with in > attachment ) > Not any mail header, the original one that carries the correct MIME Content-Type header for the

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Peter Van Biesen
yes, I tried that too, same error. Just try and slap a mailheader on it ... ( or use the one I tested with in attachment ) Kindest regards, Peter. On Friday 01 February 2008 16:29:25 Victor Duchovni wrote: > On Fri, Feb 01, 2008 at 02:46:34PM +0100, Peter Van Biesen wrote: > > Hi, > > > > our c

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Victor Duchovni
On Fri, Feb 01, 2008 at 02:46:34PM +0100, Peter Van Biesen wrote: > Hi, > > our customers need to send sensitive information to us using s/mime. To this > end, they use a java application that uses the bouncycastle java api to > generate the message. However, when I try to verify such a message

Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-01 Thread Peter Van Biesen
Hi, our customers need to send sensitive information to us using s/mime. To this end, they use a java application that uses the bouncycastle java api to generate the message. However, when I try to verify such a message openssl gives me an error. The client- and the serverapplication seem to be

" unable to get local issuer certificate" & certificate not trusted errors

2008-02-01 Thread gopinath ethiraja
I tried to connect to a server using s_client command .but i get an error stating " unable to get local issuer certificate" & also it gives certificate not trusted " how to overcome this errors C:\OpenSSL\bin>openssl s_client -connect gmail.com:443 -verify 3 -cert newcert.p

measure network throughput in openssl

2008-02-01 Thread gopinath ethiraja
sir, is there any possibility of measuring network throughput using openssl tool. if so can u please give details Also i need details about the transmittred handshake data amount.. I tied to do this with s_time command. can u please give more details ___