CA and Certificates

1999-08-19 Thread Patrick Brewer
I subscribe to this list at work, but I'm sending from home. I'm just starting here, thanks for responces to my questions about openssl.cnf. As I read a little more I'm coming up with new questions. If I get a certificate from a CA can I then become a CA and create certificates for machin

Re: Certificate Authority in Netscape Browser

1999-08-19 Thread Dr Stephen Henson
CASTELAIN Didier wrote: > > Hello, > > For an inside project, we must be our own certificate authority. > Is there a way to indicate a new certificate authority in netscape (4.5 & > 4.6) > In the security menu 'signers', there is only , and > > Thank you for your help > > Didier > > PS: sor

Re: Netscape and demo server problem

1999-08-19 Thread Grim
> > Don't know about the short story, but the form data has a bug > (typo in the posting to the newsgroup?) The GET cannot be > used (to the best of my knowledge) with form data - you > want to be using "POST /someurl.cgi HTTP/1.0" > Oh, now I feel VERY VERY dumb, thankyou. If I said I really D

Re: Crypt::SSLeay as ActiveState PPM

1999-08-19 Thread Joshua Chamas
[EMAIL PROTECTED] wrote: > > Joshua, > I have been trying to get an https connection via LWP for a while and > had been struggling with compiling the SSLeay and the Crypt perl > modules. I have the activestate perl for win32. So what does it mean > to have the activestate PPM where I don't have t

Re: Crypt::SSLeay as ActiveState PPM

1999-08-19 Thread dougc
Joshua, I have been trying to get an https connection via LWP for a while and had been struggling with compiling the SSLeay and the Crypt perl modules. I have the activestate perl for win32. So what does it mean to have the activestate PPM where I don't have to compile. Can I just download the mod

Crypt::SSLeay as ActiveState PPM

1999-08-19 Thread Joshua Chamas
Hey, Just wanted to let you all know that Crypt::SSLeay is available as an ActiveState PPM, meaning that you can get perl for win32 and do https connections via libwww-perl, all without needing a compiler. How good! With PerlApp, which has come of age, this means that you can easily code a Perl

OpenSSL Support for Crypt::SSLeay

1999-08-19 Thread Joshua Chamas
Hey, I am interested in supporting Crypt::SSLeay via the OpenSSL users mailing list, where I would answer questions posted directly to the list about Crypt::SSLeay. The advantage here is that things that are more generally openssl issues could be picked up by you wizards out there, and genera

Re: Netscape and demo server problem

1999-08-19 Thread Thomas Reinke
Don't know about the short story, but the form data has a bug (typo in the posting to the newsgroup?) The GET cannot be used (to the best of my knowledge) with form data - you want to be using "POST /someurl.cgi HTTP/1.0" GET expects all name-value pairs to be in the URL, and the CGI processing t

"kick starting" SSL_pending?

1999-08-19 Thread Nick Sayer
I have some code that does a sort of read buffering scheme. I need to be able to tell if n characters are available to read, and if so to read them. I tried to use SSL_pending() to do this, but found that upon entering for the first time, SSL_pending() _always_ returned 0. I am also not convinced

Netscape and demo server problem

1999-08-19 Thread Grim
Hi I have looked through the archives and cannot find an answer to this question. I know relatively little about SSL or cryptography in general so I am probably asking an obvious question that I will get flamed for... The long and short story: Short story: Short story: I cannot connect using n

A bug in SSLv3 when session id reuse?

1999-08-19 Thread Yunhong Li
I downloaded openssl-0.9.4, configured the target to bsdi-elf-gcc and compiled on my BSDI-4.0 machine. The performance from "s_time" in "app/openssl" is extremely slow when session id is reused. Here is how I run the command: openssl s_server -port -cert server.pem -www -ssl3

Re: More: Anybody can help?

1999-08-19 Thread Michael Slass
I have a guess: >From openssl.cnf: [ ca ] default_ca = foo # The default ca section [foo] dir = # Where ev

Announce: M2Crypto 0.01

1999-08-19 Thread Ng Pheng Siong
I am pleased to announce the release of M2Crypto 0.01; the package is available at http://www.post1.com/home/ngps Following is the README: The M2 Python Crypto Toolkit 0.01 --- The M2 Python Crypto Toolkit (M2Crypto) == Python www.python.org +

More: Anybody can help?

1999-08-19 Thread Roberto Lopez Navarro
Well folks, I have found something curious. I have already sign my server cert, but something extrange happened the ca utility always used the "user_cert" profile for adding extensions when singing. Although I insisted in using the "server_cert" profile, somehow it did not work. But if I modi

CSR and Netscape

1999-08-19 Thread root
Now I have 2 problems: 1) I have created a CSR using openssl. But it doesn't ask me for the Name of the server. This causes problems when I install the certificate. I have created a selfsign test CRT and obtained a test CRT from thawte.com. In either case the browsers complain that my s

Anybody can help?

1999-08-19 Thread Roberto Lopez Navarro
I am finding this error when trying to sign a cert-req. It is for an SSL server. Keys are alright. It seems a problem with the openssl.cnf. I am able to sign csr for user but when trying to do the same for a server I get this: CA:FALSE:invalid type in ´policy´configuration. The file openssl.conf

apache with ssl

1999-08-19 Thread Emre Binisik
** High Priority ** I'm trying to combine SSL with a new module. When the user has a SSL Connection without Client Certificate and someoneelse build's up an ssl connection I can't recongnize him as a new person with a new request. How can recognize or distinguish different SSL Connections using

Re: Certificate Authority in Netscape Browser

1999-08-19 Thread Emmanuel_Poitier
Hi, you have to go in the Security > Certificates > Yours , and here you can import a certificate stored on your disk. Bye, Emmanuel Poitier On Thu, 19 Aug 1999, you wrote: >Hello, > >For an inside project, we must be our own certificate authority. >Is there a way to indicate a new certificate

Re: openssl pkcs12 and Expect

1999-08-19 Thread Arend van der Veen
I found my error. I forgot to wait until openssl command completed before exiting expect. I added "expect eof" when sequence of commands was done and everything worked. I originally exited as soon as I enter the pass phrases. Therefore, to automate signing a request I used the following script

Re: SSLeay.cnf and/or openssl.cnf

1999-08-19 Thread Oracle DBA
> > This is a multi-part message in MIME format. > --AFAD13739286B50E9EFBB2F4 > Content-Type: text/plain; charset=us-ascii > Content-Transfer-Encoding: 7bit > > I too bought the Mandrake 6.0 secure server, and found that the config file was > not in the rpm. I e-mailed customer suppo

Certificate Authority in Netscape Browser

1999-08-19 Thread CASTELAIN Didier
Hello, For an inside project, we must be our own certificate authority. Is there a way to indicate a new certificate authority in netscape (4.5 & 4.6) In the security menu 'signers', there is only , and Thank you for your help Didier PS: sorry for my english ;-) > SYSICOM USWE