Re: SSL with IIS/IE

1999-04-15 Thread Rafael Calzada Pradas
OpenSSL Users: >Hello Sergio, > >> From: Sergio Rabellino <[EMAIL PROTECTED]> >> ... >> Anyone knows how to import a 1024 bit cert into IIS ?(I prefer >> Apache/Unix, but my principal want IIS/NT support also... :-(( ) > >I don't know how to import 1024 bit certs into IIS, but you can >generate a

Re: Create my own CA.

1999-04-15 Thread Steffen Dettmer
> I had read some of Certificate and CA documents. but still no > Idea how to create my own CA. please suggest. maybe you should take a look to: ftp://cgi.tfh-berlin.de/pub/ca Hope it helps a little... oki, Steffen _

Re: Multiple OU in personal certificate

1999-04-15 Thread Kaur Virunurm
You can repeat any attribute in DN as many times as you wish. The way to do it is to add multiple entries for this attribute into the [req] session of your config file. Example: 0.stateOrProvinceName = State or Province Name 1 (full name) 0.stateOrProvinceName_default = Estonia 1.st

Create my own CA.

1999-04-15 Thread Piriya Utamachant
Dear everyone. My department had created a software for our school. The software which is applet have to be signed using certificate to use with browser. Nowaday we use "Netscape signtool" but the problem is it can generate only short lifetime certificate. So I think I should create our ow

Multiple OU in personal certificate

1999-04-15 Thread Mario Fabiano
I got a free demo certificate from Verisign. The subject distinguished name shows three OU, i.e.: Subject: O=VeriSign, Inc., OU=VeriSign Trust Network, OU=www.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)98, OU=Persona Not Validated, OU=Digital ID Class 1 - Netscape, CN=Mario [EMAIL PR

Re: Socket closure not detected on NT (intermittent bug?)

1999-04-15 Thread Bodo Moeller
On Thu, Apr 15, 1999 at 11:53:01AM +0200, Stefan Pedersen wrote: > On Thu, 15 Apr 1999, Bodo Moeller wrote: > > Stefan Pedersen <[EMAIL PROTECTED]>: >>> if(retval == 0) >>> otherSideClosedConnection(); > > Not quite. If retval == 0, you still have to call SSL_get_error if > > yo

CA certificate with IIS

1999-04-15 Thread Pierre De Boeck
Hello, I am trying since two days to insert my own root CA into the trusted CA store of IIS. I use, as advised by MS, the procedure described in SP4 involving the CertMgr wizard but with no success... By comparing the IIS list of trusted CA and the one corresponding to the local_machine

SSL with IIS/IE

1999-04-15 Thread Miguel Angel Fraga
Hello Sergio, > From: Sergio Rabellino <[EMAIL PROTECTED]> > ... > Anyone knows how to import a 1024 bit cert into IIS ?(I prefer > Apache/Unix, but my principal want IIS/NT support also... :-(( ) I don't know how to import 1024 bit certs into IIS, but you can generate a CSR (1024 bit RSA) using

To: open-ssl developers: suggestion

1999-04-15 Thread Steffen Dettmer
Hi, I use open-ssl from within a Makefile. The problem is, that open-ssl generates a zero byte file in case of an error. So my Makefile needs ugly code to remove such empty files to work. Would it be possible (or is it already planned) to change this behavior in open-ssl-0.9.3? In case of an erro

Re: Socket closure not detected on NT (intermittent bug?)

1999-04-15 Thread Arne Ansper
> > > Now on Windows NT SP4 this code does not detect the closing of the > > WSAGetLastError is actually same as GetLastError, which returns the result > > of the last system call. > > This is true on NT, not on Windows 9x. yes. but you had problems under NT, right? arne ___

Re: Socket closure not detected on NT (intermittent bug?)

1999-04-15 Thread Andrew Cooke
As the person who started this thread can I suggest that you look at s_client.c in the apps directory. There is some sample code there that shows how to handle SSL_read (just search for SSL_read) - it's pretty clear what the code is trying to do. Andrew Stefan Pedersen wrote: > Ok...

Re: Socket closure not detected on NT (intermittent bug?)

1999-04-15 Thread Jeffrey Altman
> > > > Now on Windows NT SP4 this code does not detect the closing of the > > socket by the peer. SSL_ERROR_ZERO_RETURN is never returned by > > SSL_get_error(). When the peer closes the connection SSL_get_error() > > starts to return SSL_ERROR_SSYCALL. But WSAGetLastError() returns > > NO