Re: Untrusted applet encryption

2000-02-29 Thread Charles Forsythe
> Any ideas? Running inside a browser, you may use HTTPS: URL's "for free." This is not documented, but it does work. If you want to use something you control, you can just use a symmetric encryption. Deliver the encryption key as an applet parameter on a secure web page. The encryption

Re: friendly name, enhanced key usage and purposes

2000-02-29 Thread Dr Stephen Henson
David aka SpanskA wrote: > > Hi, >I seen that some certificates have the fields friendly name, enhanced key > usage filled and only some purposes checked. I tried for about 2 days to do > it but nothing was successful. > > I saw that (apparently) the only type of certificate the permits it w

Re: Errors after upgrading to OpenSSL 0.9.5

2000-02-29 Thread Bennett Samowich
This post is just for the error tracking... A am running (Apache/1.3.11 Ben-SSL/1.38) and the change from OpenSSL-0.9.4 to OpenSSL-0.9.5 was uneventful. I'm not sure if I needed to recompile Apache or not in order to fully use the new OpenSSL package. Cheers, - Bennett __

Untrusted applet encryption

2000-02-29 Thread Gerard Monsen
Hi! I work for a small software development company in Oakland, CA. We're developing a product that will allow lawyers to view case information over the web using a Java applet. As you can imagine, these documents are extremely sensitive, so it's important for us to encrypt all of the dat

friendly name, enhanced key usage and purposes

2000-02-29 Thread David aka SpanskA
Hi, I seen that some certificates have the fields friendly name, enhanced key usage filled and only some purposes checked. I tried for about 2 days to do it but nothing was successful. I saw that (apparently) the only type of certificate the permits it with openssl was PKCS12. I seached the

Signing My own Certificate

2000-02-29 Thread Webmaster
I followed the docs at http://www.modssl.org/docs/2.5/ssl_faq.html Every step worked flawless except for the last step: ./sigh.sh server.csr I received the following after answering a few questions: Certificate is to be certified until Feb 28 21:21:56 2001 GMT (365 days) Sign the certificate? [

Re: WNT build error: s1-win32.asm(1711): error A2006: undefined symbol : L001shortcut

2000-02-29 Thread Alain Hebert
> Bill Shurtleff wrote: > > Hello, > > I'm building OpenSSL 0.9.5 under Windows NT using the MSASM 6.11 assembler. > When I assemble the assembly I get the following message: > > ..\crypto\sha\asm\s1-win32.asm(1711): error A2006: undefined symbol : > L001shortcut > > Is it legal to jump like t

can't configure

2000-02-29 Thread fjoseph
I get this message when I try to run config and I don't know what to do: Operating system: sun4u-sun-solaris2 This system (solaris-sparcv9-sc3) is not supported. See file INSTALL for details. I know the INSTALL says to edit the Configure file, but I don't know where to begin. ___

No Subject

2000-02-29 Thread Mads Rasmussen
 

building s_client

2000-02-29 Thread Andrew Teklemariam
Can someone help me identifying the list of file dependencies to build apps/s_client.c to do client side ssl? I built the crypto and ssl libraries using the makefiles provided but I am suspecting that this package is much bigger than what I need. Any help is appreciated. -andrew

Re: WNT build error: s1-win32.asm(1711): error A2006: undefined symbol : L001shortcut

2000-02-29 Thread Dr Stephen Henson
> Bill Shurtleff wrote: > > Hello, > > I'm building OpenSSL 0.9.5 under Windows NT using the MSASM 6.11 > assembler. When I assemble the assembly I get the following message: > > ..\crypto\sha\asm\s1-win32.asm(1711): error A2006: undefined symbol : > L001shortcut > > Is it legal to jump like t

Re: Sessions persisting without connections

2000-02-29 Thread Andrew Cooke
I didn't use the code below verbatim, as I already had my own, but I've finally tracked down why I wasn't getting the performance/session reuse I expected, and I think the same bug is in this example code (which is otherwise very clear and useful). So I'm posting a fix in case anyone does use th

WNT build error: s1-win32.asm(1711): error A2006: undefined symbol : L001shortcut

2000-02-29 Thread Bill Shurtleff
Hello,   I'm building OpenSSL 0.9.5 under Windows NT using the MSASM 6.11 assembler. When I assemble the assembly I get the following message:   ..\crypto\sha\asm\s1-win32.asm(1711): error A2006: undefined symbol : L001shortcut   Is it legal to jump like that from one text segment to another

RE: how to download a certificate to browser?

2000-02-29 Thread Barnes, Michael L.
You can't usually use printf("%s") on binary data because it will stop at the first NULL. I've enclosed a simple working sample. #include #include #include #include #include int main(int argc, char **argv) { FILE *in; void *buf; struct stat st; if (argc > 1) { i

Re: PKCS12 -> PEM or DER

2000-02-29 Thread hazel Gao
pkcs12->PEM openssl pkcs12 -in pkcs12file.p12 -out pemfile.pem Hazel --- David aka SpanskA <[EMAIL PROTECTED]> wrote: > Hi, >I'd like to know how I could take a PKCS12 file > and make a PEM or DER CA > certificate with it. > > > Thank you. > > > David > _

RE: how to download a certificate to browser?

2000-02-29 Thread Salz, Rich
DER is a binary format, and could well have nul bytes and other values outside the domain of C strings. >while ((ch=getc(CERT))!= EOF) > putchar(ch); Make sure that it's "int ch;" __ OpenSSL Project

Re: Client Side certs?

2000-02-29 Thread Ng Pheng Siong
On Tue, Feb 29, 2000 at 12:36:02AM -0800, Alex McLintock wrote: > Are there any docs/faqs that I should read about using OpenSSL to > do https with client side certificates. Does anyone use this in > perl, or Java (or any other programming language?) Take a look at M2Crypto, http://www.post1

Re: Global Server ID for Apache!

2000-02-29 Thread Theodore Hope
> i am trying to order a Global Server ID from > verisign for apache openssl. The site does not > list apache as supported list of servers. and > without selecting one of the suported servers > i cannot get the GSID. > > Can someone tell me how i can get GSID for > apache openssl ? Try the certi

PKCS12 -> PEM or DER

2000-02-29 Thread David aka SpanskA
Hi, I'd like to know how I could take a PKCS12 file and make a PEM or DER CA certificate with it. Thank you. David __ Get Your Private, Free Email at http://www.hotmail.com

Re: hello can some one helpme on this

2000-02-29 Thread hazel Gao
Use function "X509_Verify_cert" in openssl/crypto/x509/x509_verify.c as a clue to find answers to your questions for example. Hazel --- Krishnam Raju <[EMAIL PROTECTED]> wrote: > i am using open ssl api to build an application. i > hv couple of doubts > regd. the client and server certificates. >

RE: Win32 Mail Server + SSL

2000-02-29 Thread Sam Stern
Lenya, Three servers come immediately to mind: - Netscape ( http://serverwatch.internet.com/mailserver-nsmessage.html ) - Microsoft Exchange http://serverwatch.internet.com/mailserver-msexchange.html ) - Built-In SMTP server with IIS4 http://serverwatch.internet.com/webserver-msiis.html ). I h

Re: Errors after upgrading to OpenSSL 0.9.5

2000-02-29 Thread Lutz Jaenicke
On Tue, Feb 29, 2000 at 01:08:39AM -0500, Peter Avalos wrote: > After upgrading from OpenSSL 0.9.4 to 0.9.5, I get this error when trying to > start apache: > [error] mod_ssl: Init: Failed to generate temporary 512 bit RSA private key > > I can't find any information about this error. > > Here's

Re: how to download a certificate to browser?

2000-02-29 Thread Goetz Babin-Ebell
At 16:16 29.02.00 +0800, you wrote: >Yes! the certificate signed by CA is in format of DER and stored in cert.result. > >now that section is as following to return the certificate to browser: > >CERT=fopen("/usr/local/ssl/certs/cert.result"); >printf(Content-Type: application/x-x509-user-cert\n\n

RE: Help me!

2000-02-29 Thread Amol Natu
The WinZip 8.0 beta is able to extract the tar.gz files. I am not sure of the earlier versions.   Amol -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED]Sent: Monday, February 28, 2000 8:10 AMTo: [EMAIL PROTECTED]Subject: Re:

Client Side certs?

2000-02-29 Thread Alex McLintock
Hi, I am trying to automatically access a third party web site which requires client side certificates. I am pretty happy about installing client side certificates into a browser, but I am writing some perl code to do the web page fetch (its a form submission) and store the results. I have th

Re: how to download a certificate to browser?

2000-02-29 Thread alohaz
Yes! the certificate signed by CA is in format of DER and stored in cert.result. now that section is as following to return the certificate to browser: CERT=fopen("/usr/local/ssl/certs/cert.result"); printf(Content-Type: application/x-x509-user-cert\n\n"); while ((ch=getc(CERT))!= EOF) res

hello can some one helpme on this

2000-02-29 Thread Krishnam Raju
i am using open ssl api to build an application. i hv couple of doubts regd. the client and server certificates. i want to use client certificate, but dunno how to give it to ssl context so that it can use it in the handshake. there must be some api to set the client cert in to ctx. can some one h