Re: DSA Certs & CA

2000-01-21 Thread Skye Poier
I think I might have it figured out. 1. Do steps at http://www.intertrader.com/library/SSLeay/no_rsa.cfm to generate DSA Certificate 2. Server side, do the equivalent of: openssl s_server -key privkey.pem -cert signed.pem -CAfile demoCA/cacert.pem 3. Client side, do the equivalent of: openssl

DSA Certs & CA

2000-01-21 Thread Skye Poier
I'm following the instructions at: http://www.intertrader.com/library/SSLeay/no_rsa.cfm to generate certs for my client/server application. Once I've done the final step "generating a DSA certificate", then I would distribute signed.pem with the client, and load privkey.pem in the server, right

Re: alignment and thread problem - solaris

2000-01-21 Thread Richard Levitte - VMS Whacker
From: Randy Wright <[EMAIL PROTECTED]> rw26> I know that malloc is not reentrant. However, if somewhere in the openssl rw26> libraries malloc is also called, perhaps that is when I get this crash. Yes, OpenSSL uses malloc by default. I think it is generally assumed that any OS that supports th

Re: pine + ssl?

2000-01-21 Thread Leland V. Lammert
At 09:01 PM 1/21/00 , you wrote: >Hello *! > >I'm actually searching for patches, in order to force the good old pine >to talk ssl. >Does anybody knows where I can get these patches as a non-american human >being? > >Thank you very much. Mark, I would think it far easier to run over an SSH conne

Re: DLL problem

2000-01-21 Thread Rodney Thayer
Depending on how you install VC you can have issues with threading. If you compile for multithreading but have the single thread only version of VC loaded, I recall problems... At 08:25 AM 1/21/00 +, Andrew Cooke wrote: >Hi, > >I've compiled 0.9.4 using VC5 and haven't had any problems. >

SSL_write SSL_read hangs??? Need help.

2000-01-21 Thread Grebelsky, Konstantin
Hi, I am just beginning with SSL and for now I am trying to get client and server talking only this is not happening. The client and server code is provided below. No certification needed at this time. Any ideas what I am doing wrong? Kostia [EMAIL PROTECTED] Server: +++ /* SSL prel

Re: alignment and thread problem - solaris

2000-01-21 Thread Randy Wright
On Thu, 20 Jan 2000, Richard Levitte - VMS Whacker wrote: > rw26> I'm using openssl-0.9.4 on solirs 2.6 on a Sun E3500 (sparc) > [...] > > Noted. > > rw26> The other problem is with my multithreading. I'm opening a thread > rw26> for each new accepted socket. When I do this I I call SSL_new, s

Re: pine + ssl?

2000-01-21 Thread Wyman Eric Miles
I have seen patches to IMAP 4.7 from UWashington. Since pine's own IMAP internals build off that, it should work for pine. Can't find the URL in my bookmarks, though. Of course, I saw the original post on this list, so better information can't be long in coming... Wy On Fri, 21 Jan 2000, Ma

Re: alignment and thread problem - solaris

2000-01-21 Thread Goetz Babin-Ebell
At 15:55 19.01.00 -0500, you wrote: Hello, (sorry for my last mail, mixed cancel with send...) >I'm using openssl-0.9.4 on solirs 2.6 on a Sun E3500 (sparc) >with the egcs gcc compiler v. 2.91.60. The application is multithreaded >using pthreads. > >Anyway, when I run my app, I call n = SSL_read

Help understanding the SSL protocol

2000-01-21 Thread Graeme Cutler
Hi, Firstly I apologise for the length of the mail note and also some of the questions asked. But I have spent time reading various articles/books and unfortunately I've become totally confused. So please be gentle with any replies you send ;-) I thought I had a reasonable grasp of: a) how th

About CA based in OPENSSL and generate a Client Certificate to my CISCO Router

2000-01-21 Thread Raul Gutierrez Rodriguez
HI: I dont know if it is the best place to ask it.. I dowload OpenSSL 0.9.4 version and install it, I setup a CA that work offline, I operate it by command line. I am reading the documentation of my CISCO's router 2509 about how setup a IPSec connection with other CISCO's router 2509. to setup

pine + ssl?

2000-01-21 Thread Mark Semmler
Hello *! I'm actually searching for patches, in order to force the good old pine to talk ssl. Does anybody knows where I can get these patches as a non-american human being? Thank you very much. Ctrl-D Mark Mark Semml

Re: Question on generating DH certificate (or signed DH parameter)

2000-01-21 Thread Andrew Cooke
There's a summary that's out-of-date, but still more-or-less OK at http://www.intertrader.com/library/SSLeay/no_rsa.cfm (Ignore the instructions on building the code and note that revoking a certificate is now possible with the openssl ca command) Andrew > Jun-Hua Li wrote: > > Hi, I am new a

Trusted Certificate

2000-01-21 Thread Joe Schiavone
How do I make my personal (created with openssl) Netscape Certificate Trusted. It loads into netscape successfully. However, upon clicking the Verify button, the response is that it is NOT Trusted. More INFO: I created my own CA Certificate and my own Netscape certificate, (p12) using the Open

Re: How to generate keys to use DH-RSA-DES-CBC3-SHA cipher?

2000-01-21 Thread Lutz Jaenicke
On Fri, Jan 21, 2000 at 10:32:11AM +0100, [EMAIL PROTECTED] wrote: > >> In order to use DH-RSA-DES-CBC3-SHA or > >> DH-DSS-DES-CBC3-SHA ciphers, how can I: > >> > >> 1. generate a private key? > >> 2. request a CSR? > >> 3. sign that CSR using demoCA? > > > >The EDH-RSA-DES-CBC3-SHA cip

Re: How to generate keys to use DH-RSA-DES-CBC3-SHA cipher?

2000-01-21 Thread damien_wang
>> In order to use DH-RSA-DES-CBC3-SHA or >> DH-DSS-DES-CBC3-SHA ciphers, how can I: >> >> 1. generate a private key? >> 2. request a CSR? >> 3. sign that CSR using demoCA? > >The EDH-RSA-DES-CBC3-SHA cipher is using ephemeral DH keys with RSA >authentication, so you can stay with the n

Question on generating DH certificate (or signed DH parameter)

2000-01-21 Thread Jun-Hua Li
Hi, I am new at security, if any stupid question, please forgive me . Currently I am trying to do SSL with EDH cipher suite.After generate a DH parameter and load it, I think  I need something for authentication, but what is that to be ? DH parameter signed by a CA ? I've tried to use CA

Re: DLL problem

2000-01-21 Thread Andrew Cooke
Hi, I've compiled 0.9.4 using VC5 and haven't had any problems. As far as I remember, I just followed the instructions in INSTALL.W32. In particular, I don't remember specifying anything about threads (although the makefile ms\ntdll.mak does include the MD flag). The library is used in multit