Problem with OpenSSL 0.9.4 on MS Windows NT 4

2000-01-05 Thread Raul Gutierrez Rodriguez
Hi: I am testing openssl 0.9.4 on Red Hat Linux 6.0 and Windows NT 4 so that create a Certificate Agency at CUBA, I compile and install all ok following the install documentation file to unix and Windows NT 4 I use the same configuration file in linux and NT to work with openSSL. All the test

Re: Problems with Java SSL API

2000-01-05 Thread Alon Koren
I have the same problem probably. I'm also using ITISSL, and as of midnight Jan 1, I get a "certificate expired" error... I found the file certs/vsign3.pem, and my most immediate question is: How do I replace the certificate. That is, do I need to specify somewhere the name of this file? D

Re: Questions on client certificates

2000-01-05 Thread Andrew Cooke
Flemming Jans wrote: > I'm using openssl 0.9.4 on Sparc Solaris 2.6/2.7 for a webserver like > process which must recognize customers from a simple username/password > scheme or from a client certificate. > > The customer 'subscription' is stored in a database where the username > is the unique

RE: Can't load client's private key ?

2000-01-05 Thread Wade L. Scholine
> -Original Message- > From: Dr Stephen Henson [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, January 04, 2000 9:25 PM > To: [EMAIL PROTECTED] > Subject: Re: Can't load client's private key ? > > > > Dennis Xu wrote: > > { snip } > > You are probably missing an SSLeay_add_all_algorithm

Re: Questions on client certificates

2000-01-05 Thread Goetz Babin-Ebell
At 13:09 05.01.00 +0100, you wrote: >Hi, Hallo, >I'm using openssl 0.9.4 on Sparc Solaris 2.6/2.7 for a webserver like >process which must recognize customers from a simple username/password >scheme or from a client certificate. >The customer 'subscription' is stored in a database where the user

checking configuration options

2000-01-05 Thread Marko Asplund
is there a way for checking the configuration options of an OpenSSL installation? -- aspa __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PRO

Re: openssl deperately needs some intro docs

2000-01-05 Thread Dr Stephen Henson
CJ Holmes wrote: > > >On Thu, Dec 23, 1999 at 11:53:16AM -0600, Leland V. Lammert wrote: > > > As a toolkit, OpenSSL can only be used *directly* by a programmer > > > that knows C/C++, and in that case documentation is not required, as > > > the programmer has the experience to use the toolkit di

Re: Extracting the Common Name from a certificate

2000-01-05 Thread Lutz Jaenicke
On Wed, Jan 05, 2000 at 01:32:58PM +0100, Flemming Jans wrote: > Hi, > > Are there any specific funtions for extracting the CN from a certificate > ? > > Or do I have to extract it myself from the X509_get_subject_name() > buffer ? #define CCERT_BUFSIZ 256 SSL *con; X509 *peer; char peer_CN[CCE

problem when connecting to web site using ssl 2.0

2000-01-05 Thread 허진
Hi,   I have some problem when I try to connect to a web site. This web site uses Netscape-Enterprise web server and SSL 2.0. I uses SSLv23_client_method() function in my secure proxy program. I think there's some problem with negotiatiation.   Below is an error message I got

Extracting the Common Name from a certificate

2000-01-05 Thread Flemming Jans
Hi, Are there any specific funtions for extracting the CN from a certificate ? Or do I have to extract it myself from the X509_get_subject_name() buffer ? Regards, -- Flemming F. Jans Manager, Software Development Belle Systems A/S Tel.: +45 5944 2500 Mobile: +45 2340 9375 Fax.: +45 5944

Questions on client certificates

2000-01-05 Thread Flemming Jans
Hi, I'm using openssl 0.9.4 on Sparc Solaris 2.6/2.7 for a webserver like process which must recognize customers from a simple username/password scheme or from a client certificate. The customer 'subscription' is stored in a database where the username is the unique identifier. 1) When using a

Re: out of memory error with netscape/openssl

2000-01-05 Thread Ben Laurie
Ramesh Panuganty wrote: > > Hi, > > I get an "out of memory" error when I tried to connect to my machine > via netscape on "https" (both windows and linux platforms). Internet > explorer from 95/98/NT does not have any complaints and works > properly. > > My machine runs redhat6.0, linux kernel

Re: Seeking officers for Free-software-friendly CA

2000-01-05 Thread Nicolas Roumiantzeff
>One problem with this scenario - the user is still essentially trusting YOUR server instead of the CA. By trusting your server to install the proper CERT you are no worse (to the user) than using a self-signed CERT (which we do). Lee, I dont see your point: First, you mean "you are no BETTER

out of memory error with netscape/openssl

2000-01-05 Thread Ramesh Panuganty
Hi, I get an "out of memory" error when I tried to connect to my machine via netscape on "https" (both windows and linux platforms). Internet explorer from 95/98/NT does not have any complaints and works properly. My machine runs redhat6.0, linux kernel 2.2-15. I installed openssl 0.9.4-3 and