Generating certificates from IIS certificate requests

2008-06-23 Thread Eric Chamberlain
I have an IIS (.NET 2.0) server from which I generated a certificate request using the standard wizard. I am now trying to use OpenSSL to generate a certificate from that certificate request. I tried just generating another certificate but IIS caught the mismatch and will not install the cer

Problems with KEY validation on different platforms

2008-06-23 Thread José Leonardo Ayres Pereira
Hello everybody, I have a problem that I consider unusual and hope you can help me with it. I must execute some EDI files transmissions with a customer and these files must go encrypted. So, I’ve generated a CSR file (with the .KEY using a password and all the other stuff) in my machine

Handshake before BIO pairs using

2008-06-23 Thread Vladimir Sabanov
Hi, all! How can i do handshake before using BIO pairs for encrypt/decrypt, if as transport i use Winsock(WSASend and WSARecv)? some example this is send function: DWORD CSSLTLSLayer::Send(IN OVERLAPPED *pOverlapped, IN WSABUF *pBuffer,

Re: RFC 4130 checksum in SHA1

2008-06-23 Thread jkoehring
I have to admit, I am not very familiar with the openssl commands. The one question I have is exactly what are the contents of original.txt after running the commands you list? Does it contain exactly the contents of the first part of the multipart/signed? javierm wrote: > > Thanks for the wait:

Re: RFC 4130 checksum in SHA1

2008-06-23 Thread jkoehring
The mechanism for calculating the MIC for an AS2 message is exactly the same as that for an AS1 message. The two protocols are practically identical except that the outermost contents of AS1 messages are frequently encoded (base64 , quoted-printable, etc) so that they may be transported safely ov

DH Generator 2

2008-06-23 Thread Steve . Pauly
Does anyone have a technical reference on the use of special generator value 2 in DH keys? Steven Pauly Pitney Bowes GMS This email message may contain confidential, proprietary and/or privileged information. It is intended only for the use of the intended recipient(s). If you have received it

Re: using NNTPS (nnrp with ssl) with windows mail / thunderbird on windows vista

2008-06-23 Thread javierm
Your logic is correct, in Thunderbird, you have the preferences|advanced and this shows you a set of tabs, the last one of which is "Certificates". Press View Certificates Button and you get another dialog with 4 tabs 1.- the first tab (your certificates) is for the pk12 ones 2.- other people's c

Re: RFC 4130 checksum in SHA1

2008-06-23 Thread javierm
Hi: After I decrypt and then verify, the original content is the set of 2 blue lines below and without at the end of the second blue line. Content-Type: multipart/signed; micalg=sha1; protocol="application/pkcs7-signature"; boundary="=_Part_49479_882783390.1213441157558"

using NNTPS (nnrp with ssl) with windows mail / thunderbird on windows vista

2008-06-23 Thread David Hláčik
Hello, i have working nnrpd with SSL configuration. I am using my custom generated SSL certificate signed with my own Certification Authority. Each time i am accessing news in Windows Mail client i am getting message , that certificate is not trusted and cannot be verified. I want to get rid off t

Re: RFC 4130 checksum in SHA1

2008-06-23 Thread javierm
jkoehring wrote: > > I have to admit, I am not very familiar with the openssl commands. The one > question I have is exactly what are the contents of original.txt after > running the commands you list? Does it contain exactly the contents of the > first part of the multipart/signed? > > javier

Re: RFC 4130 checksum in SHA1

2008-06-23 Thread javierm
Hi and thanks again: Completely clear. I found some weird content in the original message which is only a XML in 2 lines. It's not a multipart (not a multipart inside another multipart, but only an XML in UTF-8, which is then signed and finally encrypted, then sent). The weird content to which