question

1999-10-11 Thread Firas Zureiqat
Hi all, I am getting this error when I run the following command on Solaris 7 prompt: my $server_name # =some server my $post_number # =some port perl -e 'use Net::SSLeay; ($page)=Net::SSLeay::get_https("$server_name",$port_number,"/"); print "$page\n";' Error: SSL_connect 22765: 1 - error:14

Re: Key Value Pair Mismatch

1999-10-11 Thread Holger Reif
You are on the wrong list, you wanted to got to [EMAIL PROTECTED] The question is answered: http://www.modssl.org/docs/2.4/ssl_faq.html#ToC28 Why they differ is a question I can'T abnswer. Best thing is try again from scratch following what step-by-step guide. Charles Ritter schrieb: > > I'm

Is this a good cert? was re minimal client/server

1999-10-11 Thread Terrell Larson
It is a proper file created by openssl and it reads in properly in openssl by the very same routine that fails to read it in serv.cpp The failure message right down to the line number appears to be identical to what happens when I stuff a bad file into the apps... but when I stuff what I think

Key Value Pair Mismatch

1999-10-11 Thread Charles Ritter
I'm using OpenSSL from RedHat rpms and signing my own server key. Before creating the key I checked the client connection with Netscape and the Snake Oil key. It worked. When I created a new server.key and server.crt, based on the OpenSSL documentation, it failed with the following error: [11/Oct

No Subject

1999-10-11 Thread Firas Zureiqat
Hi, I am running openssl 0.9.4 and perl Net::SLLeay 1.05 on Solaris 7. When I try connecting to a WEB site using the script below it comes up the with the following error: SSL_connect 21244: 1 - error:14094417:SSL routines:SSL3_READ_BYTES:sslv3 alert illegal parameter Any ideas ...? ===

RE: license for openssl in UK and proof the NSA monitors all emails.

1999-10-11 Thread Rubinstein, Dmitry
> -Original Message- > From: Michael Ströder [mailto:[EMAIL PROTECTED]] > Sent: Sunday, October 10, 1999 2:00 PM > To: [EMAIL PROTECTED] > Subject: Re: license for openssl in UK and proof the NSA monitors all > emails. > > > "Rubinstein, Dmitry" wrote: > > > > will have any hits from

Re: error in building 0.9.4 under linux

1999-10-11 Thread shich
I just don't know how can I re-install them.You are suggesting I should get gdbm and install in my system so that my perl can find gdbm? or I should re-install the perl so that the "libgdbm.so.l" will be installed properly? I have thought I can untar the perl.tgz directly and then the perl will w

Re: RNGs

1999-10-11 Thread Ulf Möller
> The seed generation *is* the RNG. What happens later is a PRNG, not an RNG. > An RNG with a poor seed is always a poor RNG. OpenSSL does not contain a "RNG". It uses a cryptographic PRNG, which you as the application programmer have to initialize by calling RAND_seed() with appropriate input.

NEW DEVELOPMENT RELEASE AVAILABLE SNAP-12-10-1999 (CODE FREEZE)

1999-10-11 Thread Massimiliano Pala
OpenCA Version SNAP-12-10-1999 RELEASED - Developer Release === OpenCA - The Open Certification Authority Toolkit (http://www.openca.org) The OpenCA core team wants to announce the newly issued SNAPSHOT of the OpenCA s

RE: Create key and PGP

1999-10-11 Thread Nelson Alves da Silva Filho
> 2) I need to encrypt a message like PGP Please, see ftp://dslab1.cs.uit.no/pub/PGPlib.tar.gz. PGPlib is a library that lets you generate and manipulate PGP packets. It uses an old version of SSLeay for cryptographic functionality. Probably, however, it can easily use OpenSSL instead. appl

minimal client/server

1999-10-11 Thread Terrell Larson
I'm trying to get the minimal client and server code running. It is found in openssl-0.9.4/demos/ssl under the names of cli.cpp and serv.cpp. I've got the code compiled and linked, furthermore the cli.cpp code does seem to work. Here's where I'm runnign into a problem. With serv.cpp we need

Re: RNGs

1999-10-11 Thread EKR
amanda <[EMAIL PROTECTED]> writes: > The seed generation *is* the RNG. What happens later is a PRNG, not an RNG. > > An RNG with a poor seed is always a poor RNG. Yes, but there are a number of ways for an RNG to be poor that will still make it acceptable for use to seed a PRNG, because the PRN

RE: Need Help Sending Request via HTTPS

1999-10-11 Thread Fierke, John
P.S. This connection would be performed through our Proxy server if that introduces additional concerns! Thanks -Original Message- From: Fierke, John [mailto:[EMAIL PROTECTED]] Sent: Friday, October 08, 1999 4:48 PM To: '[EMAIL PROTECTED]' Subject: Need Help Sending Request via HTTPS

Re: ITAR

1999-10-11 Thread Dr Stephen Henson
Holger Reif wrote: > > Dr Stephen Henson schrieb: > > > > Disabling the CSP check is another possibility. > > I wasn'T aware that this is that easy... > Apparently it involves changing one conditional jmp to an unconditional one then fixing the DLL checksum. Steve. -- Dr Stephen N. Henson.

Re: error in building 0.9.4 under linux

1999-10-11 Thread ade t`s mail
it sounds like slackware and there is a problem with the gdbm libs try takeing out gdm and perl and re installing them that worked for me :) sys admin kingston-internet.net hull - Original Message - From: shich <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, October 10, 1999 1:5

Re: RNGs

1999-10-11 Thread amanda
The seed generation *is* the RNG. What happens later is a PRNG, not an RNG. An RNG with a poor seed is always a poor RNG. A. On Fri, 8 Oct 1999, Reni G. Eberhard wrote: > > I was analyzing the RNG routines of OpenSSL, especially > > those related with Windows environment, RAND_screen seeds >

Re: ITAR

1999-10-11 Thread Holger Reif
Dr Stephen Henson schrieb: > > Holger Reif wrote: > > > > BUT: only one CSP signed by everybody and his dog can be > > loaded at any given time since the replacement NSAKEY is > > different for every provider. > > Eh? > > This need not be the case. Users could include their own keypair as > NSA