SSL with IIS/IE

1999-04-14 Thread Miguel Angel Fraga
. Restart your Web server. (Steve, if you feel this information may be useful please include it in the OpenSSL documentation.) Thanks, / Miguel Angel Fraga [EMAIL PROTECTED] / __ OpenSSL Project

SSL with IIS/IE

1999-04-15 Thread Miguel Angel Fraga
Hello Sergio, > From: Sergio Rabellino <[EMAIL PROTECTED]> > ... > Anyone knows how to import a 1024 bit cert into IIS ?(I prefer > Apache/Unix, but my principal want IIS/NT support also... :-(( ) I don't know how to import 1024 bit certs into IIS, but you can generate a CSR (1024 bit RSA) using

Re: Code signing

1999-04-16 Thread Miguel Angel Fraga
er your search word(s) or phrase: Signing and Checking Code with Authenticode MSIE Authenticode issues: http://www.drh-consultancy.demon.co.uk/pkcs12faq.html Regards, / Miguel Angel Fraga [EMAIL PROTECTED] / _

CA certificate with IIS

1999-04-16 Thread Miguel Angel Fraga
> From: Pierre De Boeck <[EMAIL PROTECTED]> > I am trying since two days to insert my own root CA > into the trusted CA store of IIS. I use, as advised > by MS, the procedure described in SP4 involving the > CertMgr wizard but with no success... > By comparing the IIS list of trusted CA and the o

Re: SSL with IIS/IE

1999-04-20 Thread Miguel Angel Fraga
> From: Stefan Kelm > > Miguel, > > > I don't know how to import 1024 bit certs into IIS, but you can > > generate a CSR (1024 bit RSA) using NON domestic IIS4. > > > > If you are using SP3 you need a special schannel.dll, > > Do you need it? I can send it to you. > > what does schannel.dll do an

Re: IIS with openssl

1999-05-14 Thread Miguel Angel Fraga
Hi Heber, > The problem I´m having is: > > "The certificate file is not valid > Invalid password" > ... > The command I´m using is: > > openssl ca -policy policy_anything -days 365 -out iiscert.pem -infiles iis.req It seems to be OK. > Do you have any idea? 1. Certificate extensions... it wo

Net::SSLeay (1.05) and Windows NT

1999-08-02 Thread Miguel Angel Fraga
L_get_cipher_list(s, n); // <--- line 2508 RETVAL = SSL_get_cipher(s); // <--- line 2541 Does anybody know how to compile and run Net::SSLeay (1.05) under Windows NT? Or where i could find somebody who could answer my questions on this matter? Thanks in advance Miguel Angel Fraga // --

certificate renewal with MSIE 5

1999-09-28 Thread Miguel Angel Fraga
I'm having difficulty to install a new certificate after a certificate renewal w/ MSIE 5. Our certification authority have been tested during some time, now we have generated new CA's key pairs. In fact MSIE doesn't "refresh" the new certificate. (Same tests with Communicator 4.61 works fine ;-

RNGs

1999-10-07 Thread Miguel Angel Fraga
I was analyzing the RNG routines of OpenSSL, especially those related with Windows environment, RAND_screen seeds the random generator with the contents of the screen. It seems to be a poor RNG. Anybody has a better RNG for Windows? Any ideas, suggestions, or help would be most appreciated. Than

Re: RNGs

1999-10-12 Thread Miguel Angel Fraga
Rene, > Miguel > > > I was analyzing the RNG routines of OpenSSL, especially > > those related with Windows environment, RAND_screen seeds > > the random generator with the contents of the screen. It > > seems to be a poor RNG. > > Anybody has a better RNG for Windows? > > > > Any ideas, suggesti

Re: RNGs

1999-10-12 Thread Miguel Angel Fraga
Ulf Möller <[EMAIL PROTECTED]> wrote: > > The seed generation *is* the RNG. What happens later is a PRNG, not an RNG. > > An RNG with a poor seed is always a poor RNG. > > OpenSSL does not contain a "RNG". It uses a cryptographic PRNG, which > you as the application programmer have to initialize

Re: RNGs

1999-10-13 Thread Miguel Angel Fraga
rts automatically. I think the RAND_seed() function must be enhanced to use only when you generate a new request. Thank you. Bodo Moeller wrote: > > On Tue, Oct 12, 1999 at 11:43:01AM -0300, Miguel Angel Fraga wrote: > > >> In the case of Windows, one method for creating suc

Re: Problem Getting XENROLL.DLL to generate >512 client cert

1999-10-14 Thread Miguel Angel Fraga
Daniel, there is no secret, you are setting GenKeyFlags = 3, if you got a 512 RSA key it means that you have a "Microsoft Base Cryptographic Provider v1.0". You need a "Microsoft Enhanced Cryptographic Provider v1.0". Install the "Enhanced Provider" and set: Xenroll.providerName = "Microsof

Re: How do I config IIS4.0 with Service pack5.0 work with openssl to accept client certificate?

1999-10-14 Thread Miguel Angel Fraga
> From: zheng xiangyang > > I have setup a ca using openssl 0.9.4. I issued client certificate to the IE5.0 and server Certificate to IIS4.0 with NT Service Pack5.0. The SSL connection can be established if no client certificate is required by the server. But if I configure the server to require

Re: I can't import the certificate into my IIS

1999-11-06 Thread Miguel Angel Fraga
Hi, take a look to this page: http://www.mt.com.ar/certreq/informacion/iis/ Hope this helps, Miguel > Subject: I can't import the certificate into my IIS > From: "Dong Song" <[EMAIL PROTECTED]> > Date: 1999-11-03 9:37:32 > > Hi, dear sir, > > My IIS4.0 is running on the Winnt 4.0 w

Re: who can help me

1999-11-25 Thread Miguel Angel Fraga
(openssl genrsa -out xx.key ... ) openssl req -new -key xx.key -out ... Miguel - Original Message - From: Newton Nyante <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, November 24, 1999 17:41 Subject: Re: who can help me > Check out www.modssl.org It has info in the

Re: MS windows NT user...

2000-04-17 Thread Miguel Angel Fraga
If you are compiling on Win NT,   the Preprocessor definitions must be:       WIN32,  NDEBUG,  _WINDOWS,  FLAT_INC,  L_ENDIAN   Project Options:       /nologo  /MD  /W3 /GX /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "FLAT_INC" /D    "L_ENDIAN" /Fp"Release/libcnv32.pch" /YX /Fo"Release/" /Fd"Rel