-X 32 bad option for ar on AIX

2008-07-02 Thread J J
Hi, I'm having the same problem described in the link below while trying to build openssl 0.9.8h on AIX 5.3. http://www.mail-archive.com/[EMAIL PROTECTED]/msg03570.html I got around it by modifying line 410 of Configure to change the "-X 32" option to "-X32". Based on the link above it looks li

Re: about "bad record mac" when doing authentication using EAP-TTLS, thanks

2008-07-02 Thread doki_pen
Jinhua Zhu wrote: Hello, I'm doing a project using EAP-TTLS for authenticating users, it's run ok when just have a single access, but when I have more times access continuously there will generate a log "SSL: SSL3 alert: write (local SSL3 detected an error):fatal:bad record mac" context is ser

Re: TLSv1 problem

2008-07-02 Thread doki_pen
Kyle Hamilton wrote: If the firewall is interfering, then the firewall is likely the endpoint of the proxy connection, and is applying its access rules -- the client is not authorized to make a connection, so the server is shutting it down with the appropriate "access_denied" error code. Granted

Certificates for a not trusted server

2008-07-02 Thread Renato Araújo Ferreira
Hello, I have a program that is installed in some desktops to listen for connections from a client that connect to this desktop to gathe some information about the system. The problem is that these desktops (server side) are not the trusted part of the communication because they, unlike the gat

Re: TLSv1 problem

2008-07-02 Thread Kyle Hamilton
If the firewall is interfering, then the firewall is likely the endpoint of the proxy connection, and is applying its access rules -- the client is not authorized to make a connection, so the server is shutting it down with the appropriate "access_denied" error code. Granted, this doesn't help peo

about "bad record mac" when doing authentication using EAP-TTLS, thanks

2008-07-02 Thread Jinhua Zhu
Hello, I'm doing a project using EAP-TTLS for authenticating users, it's run ok when just have a single access, but when I have more times access continuously there will generate a log "SSL: SSL3 alert: write (local SSL3 detected an error):fatal:bad record mac" context is server has sent it's ce

Re: TLSv1 problem

2008-07-02 Thread doki_pen
doki_pen wrote: This is on Gentoo. I'm not sure if they have patched these things * apache-2.2.9 * openssl-0.9.8h I'm having a problem using TLS with firefox3 clients. The client reports an SSL problem. I've done a pcap in wireshark. The client sends "Client Hello" with TLS 1.0. The serve

Re: how to create IPSEC certs with SubjectAltName

2008-07-02 Thread Kyle Hamilton
http://www.openssl.org/docs/apps/x509v3_config.html Look for 'Subject Alternative Name'. I have not looked at OpenBSD's isakmpd, so I don't know what exactly they need to have in there. -Kyle H On Tue, Jul 1, 2008 at 3:00 PM, <[EMAIL PROTECTED]> wrote: > I've been wrestling with the openssl.cn

Problem in openSSL during TLS handshake. Pls HELP.

2008-07-02 Thread Tejesh Vijayakumar
Hi, I have ported Xsupplicant(EAP) code on Vxworks platform for a wireless modem. I am testing TLS authentication. Currently i am able to receive "server certificate, server key exchange, server hello done" messages from the server. But I am unable to send "client certificate, client key exchan

how to create IPSEC certs with SubjectAltName

2008-07-02 Thread travis
I've been wrestling with the openssl.cnf and don't understand it. I need to make some certs for some OpenBSD IPSec hosts (isakmpd) and they require this field to have something in it. Where should I start reading? -- Crypto ergo sum. https://www.subspacefield.org/~travis/ Truth does not fear s