RE: Netscape CA Cert Replacement...

1999-06-08 Thread Wyatt, Anthony
Sorry all, I just read the instructions and I found out how to do it. Sorry to waste everyones time. Anthony > -Original Message- > From: Wyatt, Anthony > Sent: Wednesday, June 09, 1999 3:34 PM > To: '[EMAIL PROTECTED]' > Subject: Netscape CA Cert Replacement... > > Hi, >

Netscape CA Cert Replacement...

1999-06-08 Thread Wyatt, Anthony
Hi, I have an Export Version of Netscapes Certificate server. What I would like to do is generate new keys for it from my openSLL CA. The Netscape doco explains how to generate a new server key with a packaged command called sec-key. It asks where I want to put the key, then asks for a bunc

Re: Crypt::SSLeay and OpenSSL 0.9.3a

1999-06-08 Thread Trevor Phillips
Ulf Möller wrote: > > >/usr/local/ssl/include/openssl/des.h:96: #error "_ is defined, but some > >strange definition the DES library cannot handle that." > >/usr/local/ssl/include/openssl/des.h:98: warning: `_' redefined > > You can simply remove the #error and the #define _ in des.h. Now > fixe

No Subject

1999-06-08 Thread leo_zhong
hi. where can i find openssl step by step document to create CA, create server cert and user cert in win32? thanks in advence. leo 99/6/9 __ »¶Ó­Ê¹ÓÃÊ×¶¼ÔÚÏßÃâ

openSSL for java

1999-06-08 Thread Anonymous
1. Is there a plan to port openSSL to the Java platform? 2. Do you know of anyone who has taken the current openSSL and implemet HTTPS in Java? Thanks. RK __ OpenSSL Project http://www.openssl.or

Re: I've modify CA.pl

1999-06-08 Thread Dr Stephen Henson
Raul Gutierrez wrote: > > Plasma: > > My problem is that i importe the certificate well, I see it in Personal > section of Tool>Internet Options>Contents>Certificate. i can see that this > certificate are valid :)) > > But my problem is that i have a IIS intalled whit SSL, when the IIS resquest

Re: Certificate format conversion

1999-06-08 Thread Dr Stephen Henson
Mario Fabiano wrote: > > Sorry, I did a mistake. > What I want to do is to convert from PEM to PKCS#7. > I got the PEM format certificate processing with openssl a PKCS#10 > request, but what I actually need is a PKCS#7 certificate. > You can use the 'crl2pkcs7' utility for this. It is used to

Re: Crypt::SSLeay and OpenSSL 0.9.3a

1999-06-08 Thread Ulf Möller
>/usr/local/ssl/include/openssl/des.h:96: #error "_ is defined, but some >strange definition the DES library cannot handle that." >/usr/local/ssl/include/openssl/des.h:98: warning: `_' redefined You can simply remove the #error and the #define _ in des.h. Now fixed.

About SSL_SERVER_CERT and SSL_CLIENT_CERT

1999-06-08 Thread Raul Gutierrez
Hi: How can i see the field of Server and Client's Certificated in apache + mod_ssl, i read in the http.conf that exist two environment variables SSL_SERVER_CERT and SSL_CLIENT_CERT , but i dont kow to work with it. Exist some CGI that show all field of the CERTIFICATE? if exist please send me.

Re: Can openssl use in SCO Unix 5.0.4?

1999-06-08 Thread Nic Hines
At 17:22 08/06/1999 +0100, you wrote: >panjie wrote: >> >> Dear sir, >> I tried to compile openssl-0.9.1c.tar.gz in SCO Unix 5.0.4. >> But i failed now. The compiler told me some symbol doesn't >> declare. >> Have you ever use openssl on a SCO platform? >> Thank you very much! > >Unfo

Re: Certificate format conversion

1999-06-08 Thread Mario Fabiano
Holger Reif wrote: > > In principle impossible, since the PKCS#10 request contains a > signature with the private key of the requestor. > > But if you have both, the cert and the corresponding private > key, you can try to play with > openssl x509 -x509toreq -signkey > > If you asked about how

Re: I've modify CA.pl

1999-06-08 Thread Raul Gutierrez
Plasma: My problem is that i importe the certificate well, I see it in Personal section of Tool>Internet Options>Contents>Certificate. i can see that this certificate are valid :)) But my problem is that i have a IIS intalled whit SSL, when the IIS resquest me a Certificate for client autenticat

Re: Can openssl use in SCO Unix 5.0.4?

1999-06-08 Thread Ben Laurie
panjie wrote: > > Dear sir, > I tried to compile openssl-0.9.1c.tar.gz in SCO Unix 5.0.4. > But i failed now. The compiler told me some symbol doesn't > declare. > Have you ever use openssl on a SCO platform? > Thank you very much! Unfortunately my SCO machines are all dead. But if y

Problems issue Certificate

1999-06-08 Thread Raul Gutierrez
Hi I want to create a Server Certificate for my IIS4.0 on my NT4 with Openssl 0.9.3, I create a Certificate sign resquest file (.csr) with Key Manager on my IIS, i create a certificate with openssl whit the folowing comand : ca -config openssl.cnf -out ./SegCA/certs/server_seg.crt -infiles ./Seg

Can openssl use in SCO Unix 5.0.4?

1999-06-08 Thread panjie
Dear sir, I tried to compile openssl-0.9.1c.tar.gz in SCO Unix 5.0.4. But i failed now. The compiler told me some symbol doesn't declare. Have you ever use openssl on a SCO platform? Thank you very much! a user panjie __

Re: SGC implementation ?

1999-06-08 Thread Ralf S. Engelschall
In article <[EMAIL PROTECTED]> you wrote: > I heard that openssl has implemented the server-gated > crypto(SGC) or the step-up protocol > for selectively enabling strong crypto. Any pointers > as to which version has it and which files > in the source code relate to its implementation ? For

Re: Problem compiling openssl+Apache+mod_perl

1999-06-08 Thread Ralf S. Engelschall
In article <[EMAIL PROTECTED]> you wrote: > On Mon, May 31, 1999 at 01:38:26PM -0700, DC Mahoney wrote: > >> I'm trying to install OpenSSL 0.9.3a, Apache-SSL, and >> mod_perl. > [...] >> /usr/src/local/apache/openssl-0.9.3a/include/openssl/des.h:96: #error "_ is >defined, but some strange defin

Re: Crypt::SSLeay and OpenSSL 0.9.3a

1999-06-08 Thread Ralf S. Engelschall
In article <[EMAIL PROTECTED]> you wrote: > I'm trying to upgrade to OpenSSL 0.9.3a, but am being hampered by > problems getting a Net::SSL Perl Module going with it. Previously I was > using Crypt::SSLeay, with a patch for it to work (with 0.9.2). I've > edited the Crypt::SSLeay config to use t

MSIE4 certificate Y2K problem?

1999-06-08 Thread Radovan Semancik
Hello! I have problem issuing certificates for MSIE 4 that have "not-after" date beyond 1.1.2000, MSIE says the certificate is "expired". Is it a MSIE problem with Y2K compliance or just problem of OpenSSL ca program in issuing certificates? -- Radovan Semancik

Re: Using tcpd and stunnel wrappers together

1999-06-08 Thread Michael Stroeder
Leon Alexander wrote: > > How do I implement both tcpd and stunnel simultaneously? IMHO the stunnel FAQ says that stunnel uses libwrap (TCP-wrapper lib) if present during compiling. Have a look at stunnel's FAQ to see how to set permissions for stunnel in /etc/hosts.allow. Ciao, Michael. __