Re: OpenSSL-0.9.2b on Digital Unix-4.0e compile problems

1999-05-14 Thread Sylvain Robitaille
Dr. George Seaton wrote: > I had the same problem on an Alpha with UNIX4.0D, use the > -no_asm option (this is from memory so you should check the > syntax). This is also mentioned in other newsgroups as a problem > on other OSs. Ah, well that is the same as the edit to Makefile.ssl that I m

mos_ssl mod_proxy

1999-05-14 Thread David Hajoglou
Let us (me) say that there is an apache compiled with mod_ssl and mod_proxy. ClientProxy_server(proxying to)another_server can the client and proxy server have an encrypted scession and still achieve the proxy to the other server? Are there any docs on such a topic? Thank you

Re: openssl-0.9.2b-rsaoaep.patch

1999-05-14 Thread Sylvain Robitaille
ron parker wrote: > [root@p266 openssl-0.9.2b]# /usr/local/openssl-0.9.2b/"patch -p0 > bash: /usr/local/openssl-0.9.2b/patch -p0 No such file or directory > > I've tried with quotes and without. Is patch in your path? On my (Linux -- I'm assuming you're working on a Linux system) systems, pat

Re: doc for openssl ?

1999-05-14 Thread Juan Pablo Rojas Jimenez
"Herve R.-P." wrote: > Hi all ! > > I'm currently developping a client/server app with openssl. > > As the only doc I have is the prototypes of the functions, it's > a bit difficult to make something solid (ie test return codes, > for example, SSL_accept() return -1, what does it mean ???). > > D

Re: IIS with openssl

1999-05-14 Thread Rafael Calzada Pradas
Hi Heber, Previously to generate the certificate request, I enabled Server Gated Cryptography. The process is described in http://www.microsoft.com/security/tech/sgc/EnableSGC.asp You need to edit the registry of your NT server, and create HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro

Re: IIS with openssl

1999-05-14 Thread Miguel Angel Fraga
Hi Heber, > The problem I´m having is: > > "The certificate file is not valid > Invalid password" > ... > The command I´m using is: > > openssl ca -policy policy_anything -days 365 -out iiscert.pem -infiles iis.req It seems to be OK. > Do you have any idea? 1. Certificate extensions... it wo

Re: PKCS#11

1999-05-14 Thread Vlasta Joskova
Lutz Behnke wrote: > Due to our firewall I cannot upload the patch to any ftp server, > but I am willing to send out patches to those that want them. Thanks for your answer and offer. I would like to test the patches - could you send them to me, please? Greetings from Prague, -- Vlasta Joskov

Re: Failure decoding X.509 Certificate / negative BN's ??

1999-05-14 Thread Dr Stephen Henson
I've just checked in various ASN1 fixes and a workaround for negative BNs in public keys. Use the compile option NEG_PUBKEY_BUG and it should now handle these. It seems to display that TeleSec certificate OK. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Emai

Re: HTTPS using s_client - only first line of data is sent?

1999-05-14 Thread Stefan Paletta
Chris Schoenfeld wrote/schrieb/scribsit: > I can do a simple GET: > GET / > That works fine. > > The problem is that the first line of input is immediately sent to the > server and processed, there is no way for me to send additional information > (headers, POST data, etc) required for more compl