Re: trying to get valid SSL cert working with uw-imap server.

2007-05-23 Thread Rabellino Sergio
[EMAIL PROTECTED] wrote: hey list, I have a uw-imap server installed on a solaris box. We currently have a working SSL certificate thats about to expire on our server. On top of that, our internal team that issues the certificates is changing their root certs, so we need to update that as

Re: PKCS#7

2006-01-17 Thread Rabellino Sergio
Bernhard Froehlich wrote: [EMAIL PROTECTED] wrote: Hi! I need to convert PKCS#7 attached signatures to PKCS#7 detached signatures. Is it possibly? Is there any example? Thanks anyway! Since noone else answered I'll thay the little I believe to know about the subject... ;) I don't

Re: Having problem compillin in solaris 10.

2005-09-02 Thread Rabellino Sergio
Lisandro Grullon wrote: Andrea, can you point me in the right direction where to find the compiler to supportamd64. thanks. I can give you a download for a tar of my gcc 4.0.1 installation... (/opt/gnu as installpath). Try on http://www.di.unito.it/~rabser/gcc_401_Solaris10_amd64.tar.gz

Re: For those of you using Solaris 10.

2005-08-31 Thread Rabellino Sergio
Lisandro Grullon wrote: Hi all, After struggling with the installation in two different production servers of openssl 0.9.8 I decided to give it a shot in a new clean server just install. I install the usual stuff (make,gcc, libconv,perl(is already include in Solaris 10) ) After you install

Re: DES_ede3_cbc_encrypt and padding

2005-08-30 Thread Rabellino Sergio
Alicia da Conceicao wrote: Greetings: The DES_ede3_cbc_encrypt() routine does not appear to properly pad data to fill out the last block. Consider, if the last block contains 4 bytes for the unencrypted text test, DES_ede3_cbc_encrypt() is only padding the remaining characters with NULL

Re: How can i convert p12/pfx to java key store (JKS) format

2005-08-22 Thread Rabellino Sergio
Jaleel P.A wrote: Hi, How can i convert p12/pfx to java key store (JKS) format Please let me know. This is bit urgent. thanks Jaleel Take a look at http://www.lazgosoftware.com/kse The KeyStore Explorer could be the simplest way to do that, or you can do this by hands, using the java

Re: Documentation on Sendmail TLS

2005-08-17 Thread Rabellino Sergio
Stephen T Albright wrote: Hello to all. First let me apologize for this message if it is not the correct list, but I need to start somewhere. Now my question. I have recently been tasked with recompiling Sendmail on a Sunfire 120 to include TLS support. I understand I need OpenSSL, and I

Openssl 0.9.8 make test failed - addendum

2005-07-06 Thread Rabellino Sergio
This is the segmentation-fault line inside destest.c DES_ede3_cbcm_encrypt(cbc_data,cbc_out,16L,ks,ks2,ks3,iv3,iv2,DES_ENCRYPT); I'm using gcc as stated below: Reading specs from /usr/local/gnu_r342_solaris9/bin/../lib/gcc/sparc-sun-solaris2.9/3.4.2/specs Configured with:

Re: Any issues with WinXP SP2?

2004-08-17 Thread Rabellino Sergio
Lucius Millinder wrote: Know where I can get the url:// for sp2? Here you can find the download area for XP-SP2 (english only for now...) http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/winxpsp2.mspx Lucius L. Millinder Jr. Security SAN Systems Specialist -Original Message-

Re: 0.9.7c Vulnerability??

2003-12-30 Thread Rabellino Sergio
Fred Merritt wrote: Michael, Andrew, Fred, and Mark, first of all, thank you for your rapid response to my append to this list. All your comments were constructive, and helpful. Do I have any reason to think that this is an OpenSSL bug? No - I

0.9.7a Win32-VC++ 6.0 Compilation problem

2003-02-24 Thread Rabellino Sergio
Dear developers, I had a little (maybe) trouble to get compile the latest release of the package: the compiler is telling me about a redefinition of NETSCAPE_ENCRYPTED_PKEY and NETSCAPE_PKEY in the file crypto/asn1/n_pkey.c at line 96 and 109 ( DECLARE_ASN1_ENCODE_FUNCTIONS_const ).

Re: 0.9.7a Win32-VC++ 6.0 Compilation problem

2003-02-24 Thread Rabellino Sergio
Dr. Stephen Henson wrote: On Mon, Feb 24, 2003, Rabellino Sergio wrote: Dear developers, I had a little (maybe) trouble to get compile the latest release of the package: the compiler is telling me about a redefinition of NETSCAPE_ENCRYPTED_PKEY and NETSCAPE_PKEY in the file crypto/asn1

Re: I just want the binaries for W2K

2002-12-13 Thread Rabellino Sergio
Peter 'Luna' Runestig wrote: Marcel Elsner wrote: Hi, i am sick of compiling everything again and again using 3 or more different compilers. I really tried it but now just want running code. Is anybody out there who allready has the binarys for windows 2000? if, then please send it or give

Re: Remove passprase

2002-10-25 Thread Rabellino Sergio
Robbert Hardin wrote: Hello Bruno I tried, but it doesn't work: # openssl rsa -in cakey.pem -out canokey.pem read RSA key Enter PEM pass phrase: unable to load key 15251:error:06065064:digital envelope routines:EVP_DecryptFinal:bad

Re: SSL_write problems

2002-09-02 Thread Rabellino Sergio
Trey A Mujakporue wrote: I recently posted a message to the list with details of a problem i am experiencing with Qpopper ver 4.04 with SSL/TLS enabled using Openssl version 0.9.6e It seems like this probelm has been ongoing for the past 2 years but there has been no fix. From my

Re: Compiling OpenSSH 3.3 or 3.4 with OpenSSL 0.9.6e under Solari s 9

2002-08-01 Thread Rabellino Sergio
Lutz Jaenicke wrote: On Thu, Aug 01, 2002 at 11:15:24AM +1000, Kalam, Imran wrote: I get the similar error when I am compiling openssl-0.6.c on solaris 2.6 operating system but the only difference is it complains about libld.so.1, which is missing from /usr/lib but it exits in

Re: build a pkcs10 request using private / public key on asmartcard

2002-07-19 Thread Rabellino Sergio
Hul van den, G (Gerrit) wrote: Hi all, I want to build a pkcs10 request using the openssl software, but with the private/public key on a smartcard. I have a pcks11 library to access the smartcard. If have stripped the req.c source, and now I have to do two things: - Push the public

Re: anybody is working with openssl and visual basic?

2002-04-03 Thread Rabellino Sergio
Yes, i've done an tool for corporate user certification (key and cert management) interfacing visualbasic with openssl. What do you need ? -- Dott. Sergio Rabellino Technical Staff Department of Computer Science University of Torino (Italy) Member of the Internet Society

Re: Java + SSL

2002-04-03 Thread Rabellino Sergio
Zamangoer, Ferruh wrote: Hi All, have anybody experiences with the following Error, which occurs when I want to use the example from the JNDI == LDAP == Security to connect to an LDAP Server over SSL: cutscence // Set up the environment for creating the initial context Hashtable env

Re: No certificates in popup dialog box.

2002-03-07 Thread Rabellino Sergio
Dr S N Henson wrote: Brandon Amundson wrote: I am trying to sign a server cert from IIS 5.0 with my CA (openssl) that runs on my linux webserver. I have successfully signed the cert and move it back into IIS but when I go to access the site, the certificate dialog box pops up

Re: Client certificate verification

2002-02-25 Thread Rabellino Sergio
Michael Sierchio wrote: Sharkey, Aoife wrote: Hi I am having aproblem where the server is unable to verify the client certificate I created. The Server is running IIS and is listening on port 443 for SSL traffic. here is an example of the ssldump file I didn't see anything

Re: Expired Certificate in CRL

2002-01-25 Thread Rabellino Sergio
// Rabellino Sergio - [EMAIL PROTECTED] // Computer Science Department of Torino #include stdio.h #include stdlib.h #include time.h /* Openssl Includes */ #include openssl/conf.h #include openssl/bio.h #include openssl/err.h #include openssl/bn.h #include openssl/txt_db.h #include openssl/evp.h

SSL_connect on Non-Blocking Socket under Windows

2001-10-22 Thread Rabellino Sergio
Dear list users, i'm going to code a tls-telnet module for teraterm under windows socket 2.x, using the Non Blocking version of the sockets. Supposing that I can't never revert the socket to blocking, there's someone that has the right solution for doing the SSL_connect either with tls or sslv3

Re: How I can create a Cert STORE

2001-05-04 Thread Rabellino Sergio
Antonio Ruiz Martínez wrote: Hello! Like I say in the subject How I can create a Cert Store? Thanks in advance, Regards, Antonio. Are you thinking about the Java Keystore (and certs... also)? -- Dott. Sergio Rabellino Technical Staff Department of Computer Science

Re: How I can create a Cert STORE

2001-05-04 Thread Rabellino Sergio
Antonio Ruiz Martínez wrote: Rabellino Sergio wrote: Antonio Ruiz Martínez wrote: Hello! Like I say in the subject How I can create a Cert Store? Thanks in advance, Regards, Antonio. Are you thinking about the Java Keystore (and certs... also

Re: Problems with Microsoft IIS csr

2001-04-23 Thread Rabellino Sergio
Enrico Russo wrote: Hi, I've some problems with string encoding. The Root Cert (created and self-signed with openssl) DN is : subject= /C=IT/ST=GE/L=Genova/O=Universit\xE0 di Genova/OU=Unige CA/CN=unige [EMAIL PROTECTED] When I try to sign requests created with Microsoft IIS or IE