Warnings during the openSSL installation.

1999-03-12 Thread Leonid Elbert
>cc -I../crypto -I../include -O -DNOPROTO -c s2_meth.c -o s2_meth.o >In file included from ssl_locl.h:75, > from s2_meth.c:61: >../include/err.h:230: warning: parameter names (without types) in function declaration >cc -I../crypto -I../include -O -DNOPROTO -c s2_srvr.c -o s2_sr

New to certificates - question

1999-03-12 Thread Chris Brezil
I am new to SSL and in trying to create my first certificate request, I am having a problem. Here is the configuration. I have downloaded and compiled openssl (v0.9.1c) on Windows NT 4 with MS VC++ 6.0. I am ultimately trying create a secure Web server using Openssl, mod_ssl and Apache 1.3.4 on W

Re: Building with NO_RSA broken?

1999-03-12 Thread Jeffrey Altman
> I'm not sure I like this, because you have no strong assurance that > you've successfully eliminated RSA everywhere, and it also means that > programs that use OpenSSL can only be certified RSA-clean with runtime > testing. > > I agree that #iffing the entire source file is the way to go, thou

Re: Building with NO_RSA broken?

1999-03-12 Thread Ben Laurie
Jeffrey Altman wrote: > > > Frank O'Dwyer wrote: > > > > > > Hi, > > > > > > Is it still possible to build OpenSSL without RSA support? The configure > > > script doesn't mention -DNO_RSA as an option, and when I went ahead and > > > specified it anyway, the build was broken in a number of places

Re: Building with NO_RSA broken?

1999-03-12 Thread Jeffrey Altman
> Frank O'Dwyer wrote: > > > > Hi, > > > > Is it still possible to build OpenSSL without RSA support? The configure > > script doesn't mention -DNO_RSA as an option, and when I went ahead and > > specified it anyway, the build was broken in a number of places. Are > > there any other flags I nee

Re: Building with NO_RSA broken?

1999-03-12 Thread Dr Stephen Henson
Frank O'Dwyer wrote: > > Hi, > > Is it still possible to build OpenSSL without RSA support? The configure > script doesn't mention -DNO_RSA as an option, and when I went ahead and > specified it anyway, the build was broken in a number of places. Are > there any other flags I need to add? > It

Re: Server cert or site cert ?

1999-03-12 Thread Thomas Reinke
Actually, doesn't a 302 redirect cause problems with browsers? Our experience has been that the browser pops up a warning messaging indicating that the site the user wants to visit is not the one actually being visited. Ulrich Kroener wrote: > > One way to do it is to use the good old HTTP 3xx m

Building with NO_RSA broken?

1999-03-12 Thread Frank O'Dwyer
Hi, Is it still possible to build OpenSSL without RSA support? The configure script doesn't mention -DNO_RSA as an option, and when I went ahead and specified it anyway, the build was broken in a number of places. Are there any other flags I need to add? Cheers, Frank O'Dwyer. __

RE: Server cert or site cert ?

1999-03-12 Thread Ulrich Kroener
One way to do it is to use the good old HTTP 3xx message. See the HTTP specs at w3.org or at http://www.w3.org/Protocols/rfc2068/rfc2068 regarding 10.3.3 302 Moved Temporarily Ulrich ---Juergen Rensen <[EMAIL PROTECTED]> wrote: > > I'm not sure if I understand, how would you do a re-

Re: Idea/example needed (s_client)

1999-03-12 Thread Thomas Reinke
I'm somewhat surprised that you get as far as you indicate - "-quiet" is modifying the behaviour somewhat. When you run s_client without it, it will always terminate before getting the http response. This is because s_client is designed to terminate whenever it gets an EOF on stdin. When you pipe

Idea/example needed (s_client)

1999-03-12 Thread Soeren Schroeder
I am new to SSL, and need to build an application talking to another host on top of SSLv3. I've installed SSLeay 0.9.0b on my FreeBSD unix server, installed Apache mod_ssl, obtained and installed the Verisign Certificate, and done some initial testing. So far so good. I planned on using s_client

RE: Server cert or site cert ?

1999-03-12 Thread Juergen Rensen
I'm not sure if I understand, how would you do a re-direct? Juergen -Original Message- From: Goetz Babin-Ebell [SMTP:[EMAIL PROTECTED]] Sent: Friday, March 12, 1999 9:39 PM To: [EMAIL PROTECTED] Subject:RE: Server cert or site cert ? At 12:33 12.03.99 +1300, you wrote:

Re: Server cert or site cert ?

1999-03-12 Thread Ben Laurie
Goetz Babin-Ebell wrote: > > At 12:33 12.03.99 +1300, you wrote: > >Yes, I forgot. But then you would have to type that (URL+port) into your > browser, right? > > > >-Original Message- > >From: Goetz Babin-Ebell [SMTP:[EMAIL PROTECTED]] > > >https://www.company_a.com:1443/secure_page.ht

RE: Server cert or site cert ?

1999-03-12 Thread Goetz Babin-Ebell
At 12:33 12.03.99 +1300, you wrote: >Yes, I forgot. But then you would have to type that (URL+port) into your browser, right? > >-Original Message- >From: Goetz Babin-Ebell [SMTP:[EMAIL PROTECTED]] >https://www.company_a.com:1443/secure_page.html >https://www.company_b.com:2443/secure_pa

RE: Fresh meat -- Java SSL using OpenSSL (SSLeay)

1999-03-12 Thread Andrei Popovici
Buchs Christian writes: > > > > Do you support (or plan to support) also SSLeay-0.9.0b or OpenSSL ? > > > > > > It builds and works fine with SSLeay-0.9.0b and openssl-0.9.1c without > > changes. (just tested) > > Not under NT unfortunately... You're right. I'm just writing a fix.. s