Re: send encrypted s/mime message for Netscape to read?

1999-02-17 Thread J. Andres Hall
Steve, Fortunately you don“t need to "put it together yourself"! Check the IETF S/MIME Freeware at: http://www.imc.org/ietf-smime/ Andrew. >Hi Steve, > >> > I need to send a message to a Netscape user (S/MIME), and encrypt >> > it using the cert he's sent me in a signed message. (In other >>

Re: send encrypted s/mime message for Netscape to read?

1999-02-17 Thread Theodore Hope
Hi Steve, > > I need to send a message to a Netscape user (S/MIME), and encrypt > > it using the cert he's sent me in a signed message. (In other > > words, I'm want my script to behave like another Netscape Mail). > > I'm using SSLeay 0.9.0b. > > > > Presumably I would extract his public key

openssl-0.9.1c IRIX 6.2 cc v7.2.1

1999-02-17 Thread David Coles
Hi, I'm getting problems with crypto/bn/bn_lcl.h: #define BN_MULL_SIZE_NORMAL (16) // 32 #define BN_MUL_RECURSIVE_SIZE_NORMAL(16) // 32 /* less than */ #define BN_SQR_RECURSIVE_SIZE_NORMAL(16) // 32 #define BN_MUL_LOW_RECURSIVE_SIZE_NORMAL(32)

Re: Q: SSLeay-0.9.0b: UTCTime usage in X.509

1999-02-17 Thread Dr Stephen Henson
Heiko Nardmann wrote: > > > > > I've called this ASN1_TIME and there are various functions that > > (hoepefully) handle things appropriately. > > > > I've also fixed the X509 certificate and CRL code so it now accepts Time > > instead of just UTCTime. > > > > Steve. > > So is there a patch avail

RE: Relaying only certifieds

1999-02-17 Thread Ulrich Kroener
Henri, So you have the following: 1. A server certificate 2. Your very own CA certificate 3. A client certificate Just check this: 1. All of the above are different certificates (the server cert is not self-signed), 2. you have your own independent CA in a separate directory, 3. all of th

Re: Q: SSLeay-0.9.0b: problems with certificate algorithm

1999-02-17 Thread chlee
Heiko Nardmann wrote: > > Hi! > > I have gotten an certificate with the following object identifier: > 2B 24 03 03 01 02 88 00 11 > That's Teletrust signature algorithm. Object Identifier in ASN.1 notation is 1.3.36.3.3.1.2.1024.11 . You must add this OID in ssleay for success. - Chang

Q: CVS OpenSSL version: M_ASN1_New_Error() macro?

1999-02-17 Thread Heiko Nardmann
The same problem as I had with M_ASN1_New_Malloc occurrs again with the macro M_ASN1_New_Error(). Does this mean that every function that uses one of those M_ASN1_New_* macros has to include an M_ASN1_D2I_vars() macro call at its beginning? I now just use the old version (SSLeay 0.9.0b) of these

Q: CVS OpenSSL version: M_ASN1_New_Malloc() macro?

1999-02-17 Thread Heiko Nardmann
Hi! I just saw that in the file crypto/asn1/asn1_mac.h the definition of the macro M_ASN1_New_Malloc changed between SSLeay 0.9.0b to the CVS version: SSLeay 0.9.0b: 196 #define M_ASN1_New_Malloc(ret,type) \ 197 if ((ret=(type *)Malloc(sizeof(type))) == NULL) goto err2; CVS vers

Q: CVS OpenSSL version: ERR_R_NESTED_ASN1_ERROR - where?

1999-02-17 Thread Heiko Nardmann
Hi! I just got some files from the CVS repository, e.g. a_gentm.c. Now I am looking for the constant ERR_R_NESTED_ASN1_ERROR. Which header file do I have to get for it? I already have asn.1 and asn1_mac.h. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Se

RE: Relaying only certifieds

1999-02-17 Thread GOMEZ Henri
> Sounds like you would need a dedicated server or virtual directory. > [GOMEZ Henri] Ya, a sort of relay to private resources to users around the net. > Why would you let the clients that do not provide a cert > continue access?!? > [GOMEZ Henri] Yes, I don't want people wit

Q: SSLeay-0.9.0b: problems with certificate algorithm

1999-02-17 Thread Heiko Nardmann
Hi! I have gotten an certificate with the following object identifier: 2B 24 03 03 01 02 88 00 11 Does anyone know which algorithm this is? SSLeay has problems getting the type (EVP_PKEY_RSA/_DSA) from the given certificate (results in type=0). This seems to be due to a unsuccessfull OBJ_bsearch

Re: Q: SSLeay-0.9.0b: UTCTime usage in X.509

1999-02-17 Thread Heiko Nardmann
Dr Stephen Henson wrote: > > Heiko Nardmann wrote: > > > > Hi! > > > > I am using SSLeay-0.9.0b for a project. > > Now I found that decoding an X.509 certificate > > does not work since the decoding of the Validity > > field assumes UTCTime to be used although the standard > > says UTCTime OR Gen