Re: make rules to build shared libraries in Solaris and Digital UNIX

Steve VanDevender wrote: > The below diff to the OpenSSL 0.9.4 Makefile.org adds rules for building > shared library versions of OpenSSL on Solaris and Digital UNIX (formerly > OSF/1, now Compaq Tru64 UNIX). When linked against these shared > libraries the test suite passes all tests and I am suc

strange phenomenon

hi. i am dealing with a PKCS7 SignedAndEnveloped data. i construct a PKCS7 structure by given DER encoded data. then use function PKCS7_dataDecode() decoded it, the function return a BIO pointer. Use this bio and BIO_read, i thought i can get the clear data. But when i read it into one buff

Re: make rules to build shared libraries in Solaris and Digital UNIX

Hi Steve, I am working intensively with the openssl for Tru64, on shared libraries, I obtained success (the best time results) using the following shell script: #!/bin/sh # osf.sh - Shared libraries assembly for DEC ALPHA OSF/1 formely Tru64 # 02/22/2000 by Jose Roberto Fernandes ([EMAIL PROTE

Re: Is OpenSSL supported on WinCE3.0?

Hi > "HL" == Hakan Lindh <[EMAIL PROTECTED]> writes: HL> Trying to port OpenSSL to WinCE3.0. Yikes! Why do you think they call it "wince" anyway? -- \js I just heard the SEVENTIES were over!! And I was just getting in touch with my LEISURE SUIT!! ___

Is OpenSSL supported on WinCE3.0?

Trying to port OpenSSL to WinCE3.0. Has anyone done this before, and if so, would you share the experience? Also, is there someone that has loaded the necessary files into Visual Studio and turned it in to a project instead of using nmake?? Thanks, /Hakan Lindh Senior Software Engineer Mobile Dev

About DER and PEM Format..

What is the meaning of DER, PEM and PKCS12 Format? Slds Raul Gutierrez __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Mana

Re: server configuration problem

Osvaldo Brito <[EMAIL PROTECTED]>: > $ openssl s_client -host localhost -port 443 > CONNECTED(0003) > >[EMAIL PROTECTED] > verify error:num=18:self signed certificate > verify return:1 > >[EMAIL PROTECTED] > verify error:num=7:certificate signature failed > verify return:1 > 14228:error:04

make rules to build shared libraries in Solaris and Digital UNIX

The below diff to the OpenSSL 0.9.4 Makefile.org adds rules for building shared library versions of OpenSSL on Solaris and Digital UNIX (formerly OSF/1, now Compaq Tru64 UNIX). When linked against these shared libraries the test suite passes all tests and I am successfully using the shared librar

Re: how to convert Netscape's cert7.db to PEM?

I found the answer on the modssl mailing list. See: http://marc.theaimsgroup.com/?l=apache-modssl&m=94274021419529&w=2 I compiled it on Linux, works fine. Greets, Jean-Marc >Try the file http://www.e-softinc.com/cacerts.txt > >It contains a list of certs that were found in the >mod_ssl packa

Examples of Client Side Cache

Hello, Can anyone point me to an example of setting up and using a client side cache? Thanks, -Steve -- __ Steve Shah ([EMAIL PROTECTED]) | SysAdmin/Coder/Gabbernaut/DJ/Writer/Minister http://www.planetoid.org

RE: Certificate dilemma

Are you doing a SSL_CTX_set_client_CA_list() in the server? > -Original Message- > From: Mario Bai [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, February 22, 2000 4:52 PM > To: [EMAIL PROTECTED] > Subject: Certificate dilemma > > > Wondering if anyone ran into this or has a quick response

Re: openssl.cnf

dykiel> just to mention, the REQ part of the documentation is not dykiel> accessible from the index page of the OpenSSL web site dykiel> http://www.openssl.org/docs/ It's not available *directly*. However, if you go in on the "openssl(1)" link, you'll find req(1) with a link at the end of that p

Re: openssl.cnf

On Wed, Feb 23, 2000 at 09:13:28AM -0500, Richard Dykiel wrote: > just to mention, the REQ part of the documentation is not accessible from > the index page of the OpenSSL web site http://www.openssl.org/docs/ You can click through the openssl(1) page. "req" is an option to the openssl command l

Re: problems with signing message digest with rsa

On Wed, Feb 23, 2000 at 03:13:28PM +0200, Elen Mägioja wrote: > The code i managed to write is added below. It seems to work > ok... no errors... the signature gets printed out... but what makes > me wonder is the output format of the signature. That's not in the > format I want to get... Shouldn

Re: openssl.cnf

You can try -config option. It looks like: openssl req -new -key vsign.key -out vsign.req -config \YourFilePath\openssl.cnf Frances Lung At 03:01 PM 2/22/00 -0800, you wrote: >hi > >I tried to generate a certificate request file >using openssl on NT. The openssl binary complains >that /usr/

RE: basic...

server.csr is the certificate signing request (you send this to a CA and they return you the server.crt which is basically the server.csr signed by the CA) server.crt is the certificate itself and server.key is the private key associated with the public key on the certificate. -Mensaje ori

Re: openssl.cnf

Ulf, just to mention, the REQ part of the documentation is not accessible from the index page of the OpenSSL web site http://www.openssl.org/docs/ Maybe other interesting existing documents are not accessible too. As a newcomer in OpenSSL, I wish they would. Thanks. - Original Message -

problems with signing message digest with rsa

Hi, I have a message digest i want to sign with my RSA private key and i just want the signature printed out on screen. I found a lot of help in demos/sign.c but I still have problems. The code i managed to write is added below. It seems to work ok... no errors... the signature gets printed ou

basic...

Hi, What's the diference betwen this files: server.csr, server.crt, server.key Thank you in advance. Osvaldo Brito [EMAIL PROTECTED] [EMAIL PROTECTED] __ OpenSSL Project http://www.

server configuration problem

Hi, When i execute this command line: $ openssl s_client -host localhost -port 443 I get this stdout error message: CONNECTED(0003) [EMAIL PROTECTED] verify error:num=18:self signed certificate verify return:1 [EMAIL PROTECTED] verify error:num=7:certificate signature failed verify retur

Re: import certificate

Hi, I've tried to run the above command line, and i've got this stdout error mesage: Error loading private key 13988:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610: Any help? Thanks in advance! Osvaldo Brito [EMAIL PROTECTED] [EMAIL PROTECTED] On Mon, 21 Feb 2

Re: s_client question

Hi, I'm configuring the apache mod-ssl. When i try the connection via netscape broswer, i get this error message: The server's certificate has an invalid signature. You will not be able to connect to this site securely. At the same time, in the error_log file: [Wed Feb 23 05:36:52 2000] [error

error creating serial number index

>= Original Message From [EMAIL PROTECTED] = >You should include SSLeay_add_all_algorithms(). I could verify the signature using X509_REQ_verify() now. The problem now come to saving the index.txt file. I sign the certificate request, and the index.txt file is saved with information li

RE: New in SSl ....

If you're running Redhat you got the easy way : 1) You need to install openssl and openssl-devel RPM: http://www.modssl.org/contrib/openssl-0.9.4-1.i386.rpm http://www.modssl.org/contrib/openssl-devel-0.9.4-1.i586.rpm 2) For apache you need an SSL version of Apache : h