client certificate woes

1999-05-06 Thread John Martin
Hi all, I have a client, written in C, that *attempts* to use a certificate while connecting to a server that I have written, in Perl, that attempts to read this certificate. In the client, I can query about the servers certificate, and it seems to work fine. But no matter what I try, I can't se

Re: Unrecognized certificate request generated by Cisco 2501

1999-05-06 Thread Ajith Thrivikramannair
Cisco router use CEP protocol to enroll certificates. It can only request certificates to CA servers which supports CEP. I do not know how you made Cisco router to save the Certi request in this attached file. How did you get it? regards ajith (Disclaimer: This is only a personnel email. i am jus

Re: Handshake protocol query

1999-05-06 Thread Bodo Moeller
"Wade L. Scholine" <[EMAIL PROTECTED]>: >> Record layer is below the whole stuff (menaing the >> handshake protocol itsself uses the record layer as >> well). > But the record layer is basically doing no-ops (except maybe > fragmentation & defragmentation) during the initial handshake? Yes. I

Re: thread safety of lib methods

1999-05-06 Thread Bodo Moeller
[EMAIL PROTECTED] (Colin Bradley): > May I ask someone who is familiar with the degree of thread > safety of the OpenSSL libraries to comment on it? I have been > unable to find clear documentation on this aspect of the > implementation, but noted that some of the libraries > appear

Re: newbie-q: where is PEM format defined?

1999-05-06 Thread Bodo Moeller
> Holger Reif wrote: >> What OpenSSL calls PEM is nothing more than the raw cert or request >> content, base63 encoded and wrapped by -BEGIN XYZ- and >^^ base64 :-) >> -END XYZ- lines. It doesn't use RFC1421-1432! >> >> The name is a bit misleading :-| It is mor

Re: PKCS 12 patches for Openssl 0.9.2b

1999-05-06 Thread Dr Stephen Henson
Matthew Ling wrote: > > Have anybody managed to re-generate the PKCS12 patches (originally built > for SSLeay 0.8.1) so that it works for openssl 0.9.2b? > The patches are no longer used in OpenSSL and SSLeay 0.9.X it is a separate external program. Details on my homepage. OpenSSL 0.9.3 will i

Re: Unrecognized certificate request generated by Cisco 2501

1999-05-06 Thread Dr Stephen Henson
John Wehle wrote: > > > John Wehle wrote: > > > > > > The Cisco 2501 generates the enclosed ASN1 data stream when asked > > > to generated a certificate request. How do I certify it? It > > > doesn't seem to be recognized as a request by openssl. > > > > > > $ openssl req -inform der < cert_req

Re: PKCS 12 patches for Openssl 0.9.2b

1999-05-06 Thread Richard Levitte - VMS Whacker
mling> Have anybody managed to re-generate the PKCS12 patches mling> (originally built for SSLeay 0.8.1) so that it works for mling> openssl 0.9.2b? You might want to get the 0.9.3 (currently under development) snapshot, or wait one week and a couple of days for 0.9.3 to be released. PKCS12 is p

Re: Certificate site?

1999-05-06 Thread Massimiliano Pala
Magnus Hyllander wrote: > > Hi, > > I'm new to this list and to OpenSSL, so I'm sorry if this question has > been answered many times before. > > I just installed Apache-SSL with OpenSSL, and created and signed my own > certificate as described in the FAQ on http://www.apache-ssl.org. When I >

Re: Suggestions for the next OpenSSL-Release

1999-05-06 Thread Massimiliano Pala
Lars Weber wrote: > > Hello everybody ! > > I have some (late) suggestions for the next OpenSSL-Release: > > 1) Fingerprint for requests > > It would be nice to see an option "fingerprint" for the "req" application, > like in the "x509" application. > > For example: > > openssl req -finger

Problem retrieving Environment variables from my shared object module

1999-05-06 Thread Howard Uman
I am having a problem getting any server set environment variables in my own module. I am able to retrieve the standard environment variables (like PATH), but am unable to get anything set by the server (like HTTP_HOST). I tried changing the load order to move my module after mod_ssl, but that d

Re: Unrecognized certificate request generated by Cisco 2501

1999-05-06 Thread John Wehle
> John Wehle wrote: > > > > The Cisco 2501 generates the enclosed ASN1 data stream when asked > > to generated a certificate request. How do I certify it? It > > doesn't seem to be recognized as a request by openssl. > > > > $ openssl req -inform der < cert_req.27281 > > Using configuration fr

PKCS 12 patches for Openssl 0.9.2b

1999-05-06 Thread Matthew Ling
Have anybody managed to re-generate the PKCS12 patches (originally built for SSLeay 0.8.1) so that it works for openssl 0.9.2b? __ OpenSSL Project http://www.openssl.org User Support Mailing Lis

compile time error

1999-05-06 Thread Ben Srour '00
Hey, I just compiled OpenSSL 0.9.2b on my irix6.2 box, it was a clean compile, no errors. When i try and compile apache, i get the following error: thanks for any help! -Ben <=== src/modules/standard ===> src/modules/ssl cc -c -I../../os/unix -I../../include -I/usr/people/bsrour/

Re: Certificate site?

1999-05-06 Thread Magnus Hyllander
Actually I think I found solution myself. When creating the certificate I was prompted for "Common name (e.g. YOUR name)", so naturally I filled in my own name. But it seems this is actually the site name that Netscape is referring to, so if I set it to mail-nl.europe.rational.com (the name of the

Re: Suggestions for the next OpenSSL-Release

1999-05-06 Thread Dr Stephen Henson
Lars Weber wrote: > > > 3) Strange behavior if "serial" is set to "00" > > If someone puts the value "00" in serial instead of "01", that will > cause some funny things after issuing the first cert. The > "serial"-file contains "5C5C5C5D" and the serial-number of the new > certs is set to "0".

Re: Certificate site?

1999-05-06 Thread Ben Laurie
Magnus Hyllander wrote: > > Hi, > > I'm new to this list and to OpenSSL, so I'm sorry if this question has > been answered many times before. > > I just installed Apache-SSL with OpenSSL, and created and signed my own > certificate as described in the FAQ on http://www.apache-ssl.org. When I >

Certificate site?

1999-05-06 Thread Magnus Hyllander
Hi, I'm new to this list and to OpenSSL, so I'm sorry if this question has been answered many times before. I just installed Apache-SSL with OpenSSL, and created and signed my own certificate as described in the FAQ on http://www.apache-ssl.org. When I use this certficate however, Netscape compl

Suggestions for the next OpenSSL-Release

1999-05-06 Thread Lars Weber
Hello everybody ! I have some (late) suggestions for the next OpenSSL-Release: 1) Fingerprint for requests It would be nice to see an option "fingerprint" for the "req" application, like in the "x509" application. For example: openssl req -fingerprint -in req.pem This should calculate

Re: Unrecognized certificate request generated by Cisco 2501

1999-05-06 Thread Ed Dembowski
This is part of the IPSEC stuff. I know Verisign handles this. I'll be evaluating that, along with NetworkAlchemy's box. Are IPSEC CSR's different, or is this a Cisco thing? I know the CSR's have to hold the IP addressesof the encryption interfaces. On Thu, 06 May 1999 Ben Laurie wrote: > > J

Re: Unrecognized certificate request generated by Cisco 2501

1999-05-06 Thread Erwann ABALEA
On Thu, 6 May 1999, Ben Laurie wrote: > John Wehle wrote: > > > > The Cisco 2501 generates the enclosed ASN1 data stream when asked > > to generated a certificate request. > > Gosh, when did they start doing that? They did that some months ago, as you'll see in the draft I sent. These request

Compiler Error

1999-05-06 Thread Tressel, Axel
Hi Guys, I'm trying to build openssl-0.9.2b on HP-UX 10.20 with gcc-Version 2.8.1. The build crashes with the following message: gcc -I.. -I../../include -DB_ENDIAN -O3 -c bn_asm.c gcc: Internal compiler error: program cc1 got fatal signal 10 *** Error exit code 1 Stop. *** Error exit code 1 Sto

Re: Unrecognized certificate request generated by Cisco 2501

1999-05-06 Thread Ben Laurie
John Wehle wrote: > > The Cisco 2501 generates the enclosed ASN1 data stream when asked > to generated a certificate request. Gosh, when did they start doing that? > How do I certify it? It > doesn't seem to be recognized as a request by openssl. > > $ openssl req -inform der < cert_req.2728