OpenSSL 3.0 different behaviour on smaller DH groups?

e/vagrant/+bug/1964025 Cheers, -- Simon Chopin Foundations Team Ubuntu MOTU simon.cho...@canonical.comscho...@ubuntu.com

query on PEM_write_bio_PKCS8PrivateKey

encryption algorithms. Do we have an API for converting the encrypted private key file to an unencrypted private key file in PKCS#8 format? Regards Simon

query on key usage OIDs

am looking for the APIs used to get the OIDs associated with Digital Signature and Key Encipherment from the certificate. Reagrds Simon

query on api PKCS12_parse()

. p12 = d2i_PKCS12_fp(fp, NULL); PKCS12_parse(p12, passwd, &pkey, &cert, &ca)) Regards Simon

query on dns resolver

where I can start looking (for the dns resolution). Thank you for your time. Regards Simon

build error

x27;, 'openssl-ptest', '', d)} openssl-dbg openssl openssl-doc openssl-dev openssl-static openssl-locale openssl-bin which triggered exception AttributeError: 'module' object has no attribute 'contains' ERROR: Command execution failed: Exited with 1 Regards Simon

Query on openssl-1.1.0h build error

s64r2* | make[1]: *** [crypto/aes/aes-mips.o] Error 1 | make[1]: Leaving directory `/home/sbaby/workspace/WQAR/tmp/work/mips-mv-linux/openssl-1.1.0h-r0/openssl-1.1.0h' | make: *** [all] Error 2 | + die 'oe_runmake failed' | + oefatal 'oe_runmake failed' Regards Simon

RE: Working inside X509_STORE_CTX using verification callbacks

Okay. Thanks Matt, I didn't see that one in x509_vfy.c, I must look harder. I will modify our own copy of OpenSSL1.1.1c to provide the missing functions and open a PR on the master. Simon Edwards On 25/09/2019 12:31, Matt Caswell wrote: On 25/09/2019 12:22, Simon Edwards wrote: >

Working inside X509_STORE_CTX using verification callbacks

t different keys. The second (or later) of these may be the signer of the certificate being verified. The OpenSSL version would stop when it encountered the first certificate with an incorrect key. If OpenSSL now supports this situation we could remove the need to set our own callback. Si

Re: [openssl-users] Posting a question

That's odd. I've been waiting for a post that I sent on Friday to appear. Nothing so far. The list seems to be far more active now than on Friday. On Sun, Apr 29, 2018 at 5:44 PM, Salz, Rich via openssl-users < openssl-users@openssl.org> wrote: > >- I have posted my question into the forum.

[openssl-users] Why is CARoot handling different in Servers verifying Clients versus Clients verifying Servers? Is Server verifying Clients broken in dual-cert-type installations?

-Enhance-SSL-load-client-CA-file-td52977.html Am I missing something fundamental here? Is the Server side verification supposed to work for multiple signature types when they are identifying the same CARoot entities? If so, I suggest that the sig' type not being checked alongside the SubjectN

Re: [openssl-users] alert number 46:

accept newer certificates unless it can validate them fully? Simon On Sun, Nov 12, 2017 at 2:28 PM, Kyle Hamilton wrote: > Use a publicly-trusted certification authority, such as Let's Encrypt. > The problem is from the remote side (it's sending the alert that it > does not rec

[openssl-users] Certificate expired on https://mta.openssl.org/

I am getting a certificate expired error on the above URL. Simon -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] alert number 46:

On Sun, Nov 12, 2017 at 4:55 AM, Jan Just Keijser wrote: > Hi, > > On 12/11/17 05:39, Simon Matthews wrote: >> >> I have generated a new certificate for my CentOS 6/postfix server, and >> it seems to work with most clients, but when I try to send email using >&g

[openssl-users] alert number 46:

q -in smtp.matthews-family.org.uk.csr -CA MatthewsCA2017.pem -CAkey MatthewsCA2017.key -CAcreateserial -out smtp.matthews-family.org.uk.crt -days 3000 -sha256 Any ideas on what might be wrong? Simon -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Give a buffer to a BIO

The BIO_write sends back the number of bytes of the client hello. But that doesn't work, because when the handshake is re executed I still get a WANT_READ in response, instead of a WANT_WRITE (to send the server HELLO). What I am missing ? Best regards, Simon

Maximum Fragment Length Negotiation RFC 6066

openssl-dev mailing list from Attila Gulyas who had been working on implementing this functionality and was looking to submit their work. I however have not been able to find any reference to this work in gitweb, so am assuming this was never done. Is my assumption here correct? Thanks, Simon

Maximum Fragment Length Negotiation RFC 6066

openssl-dev mailing list from Attila Gulyas who had been working on implementing this functionality and was looking to submit their work. I however have not been able to find any reference to this work in gitweb, so am assuming this was never done. Is my assumption here correct? Thanks, Simon

RE: Openssl default_ca values while using HSM - LunaCA3

Thanks Mat - that info really helps. I validated your input and queried the private key file - which indeed pointed to handles on the HSM. For further validation - i tried to sign using the sautil output key file on another box w/o hsm and it failed. - Simon Charles - > From: argem

RE: Openssl default_ca values while using HSM - LunaCA3

# sautil -l "my-rsa-private-label" g 2048 # openssl req -engine LunaCA3 -new -nodes -key "my-rsa-private-label" -keyform ENGINE -out tmpkey.req -days 30 Which works but when using openssl ca routine - it is not able to find / load the keys - Simon Charl

RE: Openssl default_ca values while using HSM - LunaCA3

here. Any help would be much appreciated. Thanks. - Simon Charles - > Subject: Re: Openssl default_ca values while using HSM - LunaCA3 > From: ppatter...@carillon.ca > Date: Thu, 13 Dec 2012 13:54:11 -0500 > To: openssl-users@openssl.org; charlessi...@hotmail.com > > Hello

RE: Openssl default_ca values while using HSM - LunaCA3

/usr/local/openssl/ssl/bin/openssl version OpenSSL 1.0.0e 6 Sep 2011 - Simon Charles - > Date: Thu, 13 Dec 2012 19:53:40 +0100 > From: st...@openssl.org > To: openssl-users@openssl.org > Subject: Re: Openssl default_ca values while using HSM - LunaCA3 > > On Thu, D

RE: Openssl default_ca values while using HSM - LunaCA3

6D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:696: * Looks like it is trying to read the key from disk on not from the HSM. Thanks. - Simon Charles - > Date: Thu, 13 Dec 2012 15:48:09 +0100 > From: st...@openssl.org > To: openssl-users@openssl.org > Subject: Re:

Openssl ca parameters while using HSM

All , What would the default_ca section look like while using LunaCA3 HSM for storing CA private key. Openssl looks for certificate and private_key on disk - how do i make openssl ca routine aware of private keys on the HSM ( LunaCA3 ) Thanks. - Simon Charles -

Openssl default_ca values while using HSM - LunaCA3

. Openssl looks for certificate and private_key on disk - how do i make openssl ca routine aware of private keys on the HSM ( LunaCA3 ) Thanks. - Simon Charles -

Re: FIPS build questions

story if yo're cross compiling, which you're not. Good luck. Simon >

RE: Failing to build OpenSSL 1.0.0f on obsolete Debian box (i386, kernel 2.0.36)

liam A. Rowe Jr. wrote: > On 1/18/2012 9:57 AM, Brooke, Simon wrote: > > Sadly, removing -fomit-frame-pointer does not work. > > Isn't that the default behavior for -O3? > On GCC - yes. OP is using the ancestor of what is now known as GCC. The answer was in another pers

RE: Failing to build OpenSSL 1.0.0f on obsolete Debian box (i386, kernel 2.0.36)

had been removed from the Makefiles, and indeed it had. But many thanks for the suggestion! Cheers Simon -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Michael S. Zick Sent: 18 January 2012 14:05 To: openssl-users@openssl.org

RE: Failing to build OpenSSL 1.0.0f on obsolete Debian box (i386, kernel 2.0.36)

box (i386, kernel 2.0.36) On 1/18/2012 12:00 PM, Brooke, Simon wrote: > Hi > > We have a box running Debian 2.1 still in production, and for complicated > reasons we can't replace it immediately. I'm trying to compile OpenSSH for > it, and to do that I need to compi

Failing to build OpenSSL 1.0.0f on obsolete Debian box (i386, kernel 2.0.36)

0386, version 1, statically linked, stripped Output from make (after doing config) is as follows: $ make making all in crypto... make[1]: Entering directory `/tmp/simon/openssl-1.0.0f/crypto' gcc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTER

RE: OpenSSL 0.9.8n released - it doesn't compile

st.c:125: error: expected ':' or ')' before ';' token md4_dgst.c:126: error: expected ':' or ')' before ';' token md4_dgst.c:127: error: expected ':' or ')' before ';' token md4_dgst.c:128: error:

Re: OpenSSL 0.9.8m-beta1 release

On Thu, Jan 21, 2010 at 12:59:36AM +0100, OpenSSL wrote: > >The OpenSSL project team is pleased to announce the release of >version 0.9.8m-beta1 of our open source toolkit for SSL/TLS. This new >OpenSSL version is a security and bug fix beta release which implements >draft-ietf-tls

RE: openssl-users

Hi Damian, Thank you for your help but I still have one concern if I use a self generated certification that the user must confirm each time he wants to access the site. do you have a solution for this? sorry to bother you, warm regards, Simon > Date: Sat, 20 Jun 2009 17:01

openssl-users

hi, I am a new user of openssl, I have html software that users must put user name and password to get access but it is in plain text how can I use opennssl to circumvent this odd without using an international ca. Thank you, Simon Charbel, CISM, CISA Microsoft brings you a new

blowfish implementation

that the key length may be internally truncated since I cannot seem to find much documentation regarding this. Thanks, Simon __ OpenSSL Project http://www.openssl.org User Support Mailing List

Changing VC-WIN64A compiler flags

dynamic CRTS, rather than a static link version. So how can I modify the VC flag using the OpenSSL Configuration options? Regards, Simon Edwards Please consider the environment before printing this e-mail. Micro Focus Limited is registered in England and Wales. Registered number: 01504593 Re

Re: Reg compilation problem with openssl.fips.1.1.1

You can not use the "shared" option for the fips module (1.1.1) You are only supposed to use the "fips" option, which will build a single fips canister object file. This object file can then be used to link into your openssl build (eg. 0.9.7m). For openssl itself, you _should_ be able to use

Re: OpenSSL FIPS Object Module v1.2

he API against, even if everything's stubbed out. :P) I do have to ask, though: is this one going to compile properly on Intel-based Macs? 1.1 and 1.1.1 didn't. -Kyle H On Nov 29, 2007 5:22 PM, Brendan Simon < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote: Where

OpenSSL FIPS Object Module v1.2

Where can I find information about OpenSSL FIPS Object Module v1.2 ??? Where can this be downloaded from? CVS only? Or are there tarballs somewhere? Where does FIPS related development/discussion take place? Just the users mailing list? Is there a spot on the website dedicated to FIPS relate

Re: FIPS request for future OpenSSL releases

rary trivially behaves as the traditional openssl (with all functionalities). The former is called FIPS-validated App and latter is FIPS-capable App. On Nov 29, 2007 4:22 PM, Brendan Simon <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote: Hi, I require FIPS functional

FIPS request for future OpenSSL releases

Hi, I require FIPS functionality in OpenSSL but I do NOT have a requirement to run in FIPS mode. What I would like is to build OpenSSL and have ALL functions available to me so I can choose which ones I want to use. At the moment there are some functions that are only available if the -fips

RSA_X931_generate_key

I want to use the RSA_X931_generate_key() function as part of a dynamic library, but it seems to only be available when using fips mode and presumably the fipscanister. The codes is surrounded by "#ifdef OPENSSL_FIPS". I'm happy to use the fipscansister, but it seems that both openssl-fips-1

Re: fips build with shared libraries

David Schwartz wrote: I'm happy to use the fipscansister, but it seems that both openssl-fips-1.1.1 and openssl-0.9.7m both fail building if configured using "./config fips shared". Why are you trying to build the FIPS canister with anything other than "./config fips"? Without the "sh

RSA_X931_generate_key with shared libraries

I want to use the RSA_X931_generate_key() function as part of a dynamic library, but it seems to only be available when using fips mode and presumably the fipscanister. The codes is surrounded by "#ifdef OPENSSL_FIPS". I'm happy to use the fipscansister, but it seems that both openssl-fips-1.1.1

Re: Can't build FIPS capable OpenSSL

I can't even build openssl-fips.1.1.1 if the "shared" option is specified. I had to remove it as you (Bill) did for the openssl-0.9.7m. My build host is an oldish Debian (Woody) PowerPC box. $ uname -a Linux larabee 2.4.25-powerpc #1 mer avr 14 15:38:38 CEST 2004 ppc unknown Why does "shared

Key Rotation over a long-lived SSL connection

Hi, Folks, I have a long lived SSL connection which I'd like to create a new symmetric key every hour. Can someone shed some example or tips how to do it? Thanks ahead * http://RateMyBossCafe.com Leverage the Wisdom of Crowds

Re: refresh validity dates on a certificate

c:83:50:ad: 98:c1:70:89 Simon McMahon Software Engineer Australia Development Laboratory IBM +61 7 5552 4002 Kyle Hamilton <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 25/10/2007 06:24 PM Please respond to openssl-users@openssl.org To Simon McMahon/Australia/Contr/[EMAIL

Re: refresh validity dates on a certificate

e extensions without looking at them. It probably should update the "Authority Key Identifier" if it is present in the extensions. Simon McMahon Simon McMahon/Australia/Contr/[EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 25/10/2007 02:48 PM Please respond to openssl-users@openssl.or

Re: refresh validity dates on a certificate

39:c9:0c:2d:38:4b:2e:ae:21:f7:b7:3a:a0:82:03: c3:fd Simon McMahon "Kyle Hamilton" <[EMAIL PROTECTED]> 25/10/2007 01:09 PM To openssl-users@openssl.org, Simon McMahon/Australia/Contr/[EMAIL PROTECTED] cc Subject Re: refresh validity dates on a certificate

RE: refresh validity dates on a certificate

be in openssl. Any reason why it's not in the 'openssl' command line tool? If I patch the openssl tool to add this will it get integrated into the main code base? I.e. would anyone else use this to refresh end-user certs? Simon McMahon "David Schwartz" <[EMAIL PRO

Re: refresh validity dates on a certificate

atter. The thing I would like to use is "openssl x509" and specify the old cert and get a new cert from it with all the extensions preserved. Thanks, Simon McMahon Simon McMahon/Australia/Contr/[EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 24/10/2007 03:27 PM Please respond to o

refresh validity dates on a certificate

it? Regards, Simon McMahon __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]

RE: How to prevent SSL from blocking from Network interruption

ts using a single thread, but it does get tricky as everything revolves around detecting activity and responding quickly before returning to detection mode again. Its impossible to do it reliably using blocking-mode calls. Regards, Simon Edwards -Original Message- From: [EMAIL PROTECTE

RE: openssl clients for windows

Hi Gary, Sorry the quick fix didn't work. Amit is right, you've a different dependency issue from the one that I found. So dependencywalker should throw it up. Regards, Simon Edwards Communications Software Development Micro Focus -Original Message- From: [EMAIL PROTECTE

RE: openssl clients for windows

its not on the system path and will initially give you the same load error. So go hunt for it on your system drive, and stick a copy of it somewhere on the path. Regards, Simon Edwards Communications Software Development Micro Focus -Original Message- From: [EMAIL PROTECTED] [mai

strip down openssl api

Hi, I want to use the openssl library on a mobile device. Due to the limited memory space I want to strip down the openssl api in that way, that I can still offer proper SSL/TLS functionality to connect to a https webserver yet use as less memory as possible. Any advices/ recommendations? --

strip down openssl api

? Regards Simon -- "Feel free" - 10 GB Mailbox, 100 FreeSMS/Monat ... Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail __ OpenSSL Project http://www.openssl.org User Support Ma

RE: Process getting locked on Win32

27;s suggestion. Regards, Simon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: 26 March 2007 12:30 To: openssl-users@openssl.org Subject: Re: Process getting locked on Win32 On Mon, Mar 26, 2007, Rocky S wrote: > On 3/

How to do SSL key rotation over a long lived connection

Hi, folks, Does anyone know how can the encryption key used to secure SSL communication be changed/rotated over a long-lived (hours to days) SSL connection to prevent sniffers from deciphering the key by analyzing a arge amount of traffic? Thanks for comments Paul ___

garbage-in garbage-out - was OCSP response nonce extension encoding not DER

e request (with nonce) from my end is now DER encoded. Regards, Simon McMahon Simon McMahon/Australia/Contr/[EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 01/10/2007 12:56 PM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject OCSP response nonce extension e

OCSP response nonce extension encoding not DER

The error I get is a bad signature. The entire ocsp response is attached. Simon McMahon eeoknonce_x.orsp Description: Binary data

Re: ocsp responder certificate generation documentation( reg)

siest for me. The "-text" argument lets you see every ocsp request and response on the responder's console window. This is worth setting so you can see if the cert is being sent with the response and if nonce is being sent etc. The -ignore_err is needed to make the responder kee

Re: ocsp responder certificate generation documentation( reg)

eight and works so it is worth the effort! You can certainly learn a lot about OCSP responder from using this one. Regards, Simon McMahon "Sowjanya Malika" <[EMAIL PROTECTED]> 12/06/2006 10:21 PM To Simon McMahon/Australia/Contr/[EMAIL PROTECTED] cc Subject ocsp responder c

Re: ocsp signed requests - bug ?

_certs) includes an empty sequence for 'certs' which the responder must be looking for. I'm still not sure how or if the responder is validating the request in the -no_certs case. I used a cert that the responder could not have known and it still responded 'good'. I.e. no

Re: ocsp signed requests - bug ?

#x27; is not present. Regards, Simon McMahon. Simon McMahon/Australia/Contr/[EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 11/13/2006 11:28 AM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject ocsp signed requests - bug ? Hi, Not sure if this belongs on

ocsp signed requests - bug ?

tificate OPTIONAL} Which shows the certs are optional too. Regards, Simon McMahon. gskreq.der Description: Binary data

ocsp signed requests?

responder will just verify it automatically if the request is signed but can I set it up to reject unsigned requests? Regards, Simon McMahon __ OpenSSL Project http://www.openssl.org User Support Mailing

Re: ocsp-nocheck

to use OpenSSL correctly for this. Cheers, Simon McMahon "Dr. Stephen Henson" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 11/07/2006 10:10 PM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject Re: ocsp-nocheck On Tue, Nov 0

Re: ocsp-nocheck

Found it: extendedKeyUsage = OCSP Signing, OCSP No Check does the trick. The RFC doesn't exactly make this clear that 'nocheck' is a part of ExtendedKeyUsage but I guess that is not OpenSSL's problem. Thanks. __ OpenSSL Pr

ocsp-nocheck

sions to certs but couldn't get it to work. Regards, Simon McMahon __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org

ocsp response validation problem

u use -CA (a server argument) then it also fails and this is pretty confusing. Note: A sample of how to make a OCSP responder cert with OCSPSigning in the extended key usage would be nice too. When I work this bit out I can send in a sample for that if that helps. Simon Mc

Re: Accessing Manual Pages in openssl

e. That should be done shortly, within the next 2 weeks. I'll post it here or a link to it when done. Simon __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Printer-friendly documentation? (Newbie)

ible for example to generate a huge file.txt or file.html, then I could work with that no problem (or a pdf too). Thanks, Simon __ OpenSSL Project http://www.openssl.org User Support Mailing L

Printer-friendly documentation? (Newbie)

e a newbie yells: "I wanna RTFM!!" Well, in my case it's not read but rather print, so i can read at my convenience! Thanks a lot in advance, Simon __ OpenSSL Project http://www.op

Re: Decryption with RSA public keys not possible?

bear in mind that the software user has control over the smartcard but not over the software owner's public key. So, is this safe? Any comments? Thanks in advance :-) Kind regards, Simon de Hartog __ OpenSSL Proj

Re: Decryption with RSA public keys not possible?

desirable. So I just want to use public/private keys, no certificates for this. Steve. Kind regards, Simon de Hartog __ OpenSSL Project http://www.openssl.org User Support Mailing List

Decryption with RSA public keys not possible?

this in Python (sorry, wasn't my choice :-( ), so I can't use the RSA_public_decrypt() subroutine which, judging from internet comments, *can* actually decrypt data with an RSA public key... Any comments are welcome. Thanks in advance. Kind regards,

Mailing list daily digest

Does anyone know how to get a daily digest version of this mailing list. Mailman supports digests but I am not familiar with Majordomo. I tried the support page of the website but could not find any relevant info. Thanks, Brendan. _

Re: please help me on OCSP

+YWdT4cDohuSqEeu+x5R -END CERTIFICATE- --- satish danduvarma <[EMAIL PROTECTED]> wrote: > Hi Paul, >Thats great. Thanks for your quick response. > What is tgv.pem file. how can we get that file. > > Thanks in advance, > Varma > > On 8/24/05, Paul Simon <[EMA

Re: please help me on OCSP

Maybe your URL is wrong. I just tried this: openssl ocsp -issuer VeriSignClientECA.pem -url http://ocsp.verisign.com -cert eca_usr_cert.pem -VAfile tgv.pem -no_nonce -text and it works fine as follows: D:\prjs\ocsp\newEcaCA>openssl ocsp -issuer VeriSignClientECA.pem -url http://ocs p.verisign.co

FIPS140-2: ANSI X9.31 in openssl ???

that will intereoperate with other openssl crypto functionality. Hopefully someone can answer my questions or point me in the right direction. Cheers, Brendan Simon. __ OpenSSL Project http

openssl in kernel modules

that a correct interpretation? 3) If I am wrong and it is allowed to use openssl in kernel modules, then how does one stop system header files interfering with kernel/linux header files ??? eg. files, etc. Cheers, Brendan Simon. (Please CC me as well as the

RE: Investigating a leak

mance if you have to service a continual stream of new client connections that prevent the select() from blocking at all, but that is unlikely in the real world. Regards, Simon - -- Simon Edwards -Original Message- From: Cesc [mailto:[EMAIL PROTECTED] Sent: 19 July 2005 09:

RE: Investigating a leak

engines or doing anything fancy, so these are probably not a comprehensive list of resource releasing functions. Regards, Simon - -- Simon Edwards -Original Message- From: Amar Desai [mailto:[EMAIL PROTECTED] Sent: 18 July 2005 16:59 To: openssl-users@openssl.org Subject: Re: Investiga

Re: Creating certs for others (without their private keys)

nding this poor treatment of private keys! Simon McMahon Work: (07) 31311420 Mobile: (043) 2294180 >>> [EMAIL PROTECTED] 07/05/05 12:50am >>> > Darn, I thought I explained the problem: openssl "req" seems to require > private key of the cert requestor, which

Base64 decoding bug - outputs the file name to stdout.

the same output in all cases. Obviously I just fixed my problem by using method 1 instead of 2 but if behaviour 2 is not necessary then maybe it should be dropped so as not to be a trap for the unwary. Note: Platform Windows XP, openssl-0.9.7g. Cheers, Simon. Simon McMahon Work: (07) 31

Re: openssl smime data corruption bug

Got it built under windows and is working fine now. Thanks very much! Simon. Simon McMahon Work: (07) 31311420 Mobile: (043) 2294180 >>> [EMAIL PROTECTED] 05/20/05 08:58am >>> Hi Steve, Thanks very much for the reply! I am a bit new to OpenSSL and the release procedur

Re: openssl smime data corruption bug

Hi Steve, Thanks very much for the reply! I am a bit new to OpenSSL and the release procedure. I did not build OpenSSL from source, I just downloaded the windows binary. Is it easy to upgrade to the snapshot? Is there an FAQ or instructions for this for Windows? Cheers, Simon. Simon

openssl smime data corruption bug

mime -out temp_dv.smime -recip fac_enc1.pem -passin pass:Pass-123 C:\>openssl smime -verify -CAfile testHICca.pem -in temp_dv.smime -certfile fac_sign2.pem -out result.hl7 Error reading S/MIME message 3252:error:2107A088:PKCS7 routines:SMIME_read_PKCS7:no multipart body failure:.\c

openssl smime usage to have multiple file attachments per smime encoding

, command line interface required. Thanks, Simon McMahon. Simon McMahon Work: (07) 31311420 Mobile: (043) 2294180 *** This email, including any attachments sent with it, is confidential and for the sole use o

Net::SSLeay and Perl 5.8 .

ssl/x509.h:67, from /usr/local/ssl/include/openssl/ssl.h:122, from SSLeay.xs:76: /usr/local/ssl/include/openssl/des.h:193: parse error before `&' make: *** [SSLeay.o] Error 1 sqhome1:/va

Perl openssl module Net:SSLeay does not compile on Perl 5.8 with ithreads.

ideas ? I'm using openssl1.16d, but the same error occurs with openssl1.16c . Cheers Simon Clewer __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Compile failure on openssh-3.4p1

ents is welcomed!! Thanks in advance. Simon __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: Global PKI on DNS?

(Please respect Reply-To) "Eric A. Hall" <[EMAIL PROTECTED]> writes: > on 6/8/2002 8:54 PM Simon Josefsson said the following: > >> Despite the FUD presented by certain individuals that doesn't want >> keys/certs in DNS, people have already tarted doi

Re: Global PKI on DNS?

Pekka Savola <[EMAIL PROTECTED]> writes: > On Sat, 8 Jun 2002, Michael Richardson wrote: >> > "Franck" == Franck Martin <[EMAIL PROTECTED]> writes: >> Franck> I was wondering if the best system to build a global PKI wouldn't be the >> Franck> DNS system already in place? >> >> Fra

REMOVE

__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

win2k question

for a beginner) and I don’t know what doing now… I just make the first certificate with IIS and after, I’m freeze!   Thanks for your help!   - Simon Sheehy

Solaris 2.6

your help in this matter.. Regards Simon De Friend 0044 7951578 570 __ Do You Yahoo!? Check out Yahoo! Shopping and Yahoo! Auctions for all of your unique holiday gifts! Buy at http://shopping.yahoo.com or bid at http://auctions.yahoo.com

RE: Building openSSL for VxWorks5.4 (Embedded)

Does anyone out there have a sample config for openSSL on VxWorks ? I've looked in the mailing archive and could'nt find any. Thanks -Original Message----- From: Simon, Mathew (Mathew) Sent: Wednesday, October 10, 2001 12:23 PM To: [EMAIL PROTECTED] Subject: Building o

Building openSSL for VxWorks5.4 (Embedded)

or NT first ? I tried to manually compile the files in Vxworks and most of them did except for about 20 of them which gave compilation errors. This was done without configuring openssl for NT. Does anyone have any experience compiling openssl for VxWorks ? I would appreciate any help. Thanks, Mathew

  1   2   >