Error loading CA private key

2008-03-03 Thread suresh_iyengar
Hello, I am running the foll. commands for setting up openldap with openssl. And getting the error listed below. Please help. Also I checked out changing openssl.cnf line to private_key = $dir/private/cakey.pem # The private key [EMAIL PROTECTED] misc]# ./CA.pl -newca CA certificate

Error loading CA private key

2008-03-03 Thread suresh p
Hello, I am running the foll. commands for setting up openldap with openssl. And getting the error listed below. Please help. Also I checked out changing openssl.cnf line to private_key = $dir/private/cakey.pem # The private key [EMAIL PROTECTED] misc]# ./CA.pl -newca CA certificate

Fwd: [Fwd: Re: How to handle dead sessions with SSL_write]

2008-03-03 Thread Gayathri Sundar
From: Gayathri Sundar [EMAIL PROTECTED] Date: Fri, Feb 29, 2008 at 9:35 AM Subject: [Fwd: Re: How to handle dead sessions with SSL_write] Original Message Subject: Re: How to handle dead sessions with SSL_write From:Gayathri Sundar

OpenSSL error:

2008-03-03 Thread Arp222
hi i am getting the following error when i run the command: gcc -o client client.o -lcrypto -lssl In function 'main': undefined reference to 'init_OpenSSL' undefined reference to 'handle_error' --- what shud i do? please help! -- View this message in context:

FIPS for WinCE

2008-03-03 Thread Jari Niskala
Hi, I am currently attempting to build a version of the OpenSSL library for WinCE with FIPS enabled (non-FIPS works great :-) ). The version I am using is 0.9.8f from openssl-fips-1.1.2. So the main question I was hoping to get answered before I spend more time trying to make it work is

Does anybody already made a DTLS renegotiation?

2008-03-03 Thread João Pedro Patriarca
When the server receives a ClientHello as a response to the HelloRequest, the message sequence number (msg_hdr.seq) doesn’t match with the expected value (d1-handshake_read_seq). The code where we verify it is at d1_both.c file, at line 645 from openssl-0.9.8g release. Thanks, João Pedro

Error reading certificate request in newreq.pem

2008-03-03 Thread Padmavathi Dt
Hii all, Now I am trying to install client side certificate for openldap,which is another machine(than LDAP). I am using the same CA which we created for the server.The PATH variable was set correctly. When i run the following command, /usr/local/ssl/misc/CA.sh -sign It is asking for PEM pass

Re: FIPS for WinCE

2008-03-03 Thread Steve Marquess
Jari Niskala wrote: So the main question I was hoping to get answered before I spend more time trying to make it work is whether it is even possible to have FIPS enabled OpenSSL on the WinCE platform? In the FIPS 1.1.1 documentation it mentions that Windows CE is not a supported platform but

Re: Definition of ECDSA_SIG_seq_tt

2008-03-03 Thread Dr. Stephen Henson
On Sun, Mar 02, 2008, Skanda Nagaraja wrote: Hi, I am trying to port some ECDSA specific code from openssl. A structure named ECDSA_SIG_seg_tt gets called by another structure ECDSA_SIG_it. These two structures are used in crypto/asn1/tasn_enc.c and crypto/asn1/tasn_dec.c. Is it

gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. Plain certificates signed by CA work well. When I'm trying to use gLite-generated proxy certificate, the server responses Unknown ca

gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. Plain certificates signed by CA work well. When I'm trying to use gLite-generated proxy certificate, the server responses Unknown ca

Re: gLite proxy certificate support.

2008-03-03 Thread Ian Alderman
On Mon, Mar 03, 2008 at 06:31:47PM +0300, Vladimir Voznesensky wrote: Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. Plain certificates signed by CA work well. When I'm trying

Re: gLite proxy certificate support.

2008-03-03 Thread Richard Levitte
In message [EMAIL PROTECTED] on Mon, 03 Mar 2008 18:31:47 +0300, Vladimir Voznesensky [EMAIL PROTECTED] said: vovic Hello. vovic vovic I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. vovic

How can I create libeay32.dll and ssleay32.dll with visual stadio 2005?

2008-03-03 Thread learning openssl
Hello, I hope to create libeay32.dll and ssleay32.dll with visual stadio 2005. But I don't know how to do it. Please help me! _ Express yourself instantly with MSN Messenger! Download today it's FREE!

openssl.cnf - two questions

2008-03-03 Thread Frans de Boer
Dear people, 1. I seem to remember that you could place an include statement in de openssl.cnf file. I wonder if I am mistaken, since that does not work. 2. Secondly, is there a proper description of the contents of the openssl.cnf file, especially with the

openssl.cnf - two questions

2008-03-03 Thread Frans de Boer
Dear people, 1. I seem to remember that you could place an include statement in de openssl.cnf file. I wonder if I am mistaken, since that does not work. 2. Secondly, is there a proper description of the contents of the openssl.cnf file, especially with the

Re: gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Ian, I use glite-voms-proxy-init, but it seems to be the same tool as voms-proxy-init. Ian Alderman wrote: On Mon, Mar 03, 2008 at 06:31:47PM +0300, Vladimir Voznesensky wrote: Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage

Re: How can I create libeay32.dll and ssleay32.dll with visual stadio 2005?

2008-03-03 Thread Urjit Gokhale
You can either build these from the source, or get the binaries. If you prefer to build from the source, download the source from http://www.openssl.org/source and read INSTALL.W32 If you prefer to get the precompiled libraries, you can get them from http://www.openssl.org/related/binaries.html

Re: gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Dear Richard, Does OpenSSL accept 1.3.6.1.4.1.3536.1.222 extension as proxyCertInfo in CN=1234567890 proxies? Thanks. Richard Levitte wrote: In message [EMAIL PROTECTED] on Mon, 03 Mar 2008 18:31:47 +0300, Vladimir Voznesensky [EMAIL PROTECTED] said: vovic Hello. vovic vovic I'm trying

Re: gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
I've tried. It seems not to support. Ok, thank you. Vladimir Voznesensky wrote: Dear Richard, Does OpenSSL accept 1.3.6.1.4.1.3536.1.222 extension as proxyCertInfo in CN=1234567890 proxies? Thanks. Richard Levitte wrote: In message [EMAIL PROTECTED] on Mon, 03 Mar 2008 18:31:47 +0300,

Re: how to decrypt encrypted PCSK8 witch NULL-Byte (0x00) in binary-password

2008-03-03 Thread newsgroup
Thank you for you quick response :). But passing in passwords with '-passin file:somthing.txt' causes problems with newlines in password. Openssl read only first line :( and that will trun the NULL-byte-problem to a NEWLINE-problem. Any other suggestions? Thanks in advance :) Fabian You