Help for handshake failure with cisco router.

2000-03-09 Thread Dennis Xu
Hi,   When my Cisco router request a SSL connection to the openssl s_server, handshake failed. I am no familiar with the SSL handshake procedure, could someone tell me why does it happen? I attached all the debug and state message following:   =

Re: Commercial SSL in the US

2000-03-09 Thread Rich Salz
I don't know exactly what the original poster is trying to do, but you might want to get advice as to if your use violates US patent law. That is probably a more important issue than export. The RSA patent expires in September. > Commercial use as defined by the Feds is *SELLING* the software.

Re: Commercial SSL in the US

2000-03-09 Thread Rob Tanner
Don't know what your definition of obscene is when it comes to money, but I know that the Stronghold server that I purchased (actually Apache with SSL) cost me a grand total of $1025 and included a free Thawte certificate. That doesn't seem to awfully obscene. The computer you want to run it o

Re: IE5 and Verisign Global ID

2000-03-09 Thread Jeff Stewart
Hi, Thanks for the info. Indeed the cert shows this: X509v3 Extended Key Usage: Netscape Server Gated Crypto Signature Algorithm: md5WithRSAEncryption Tried what you suggested with no better luck. I'm also seeing this error in the site's error log: [error] mod_ssl: SSL hands

Re: Commercial SSL in the US

2000-03-09 Thread Ulf Möller
On Thu, Mar 09, 2000 at 11:10:24AM +, Gerard Monsen wrote: > Wow. I'm at a loss here. Does anyone know of any > way that my (tiny) company can legally use SSL for > commercial purposes in the US without paying an obscene > amount of money to RSA or buying an obscenely expensive > web s

Re: [ANNOUNCE] OpenSSL-0.9.5 MS Visual C++ Project files

2000-03-09 Thread Gregory Nicholls
"Andrew W. Gray" wrote: > OpenSSL-0.9.5 MS Visual C++ Project files Available > If you're not using Windows NT, 95 or 2000 you can delete this now. > Hiya, Just wanted to thank you for this. I used it and it was _damn_ easy. One comment, probably something I screwed up but . . The links

Re: Commercial SSL in the US

2000-03-09 Thread Leland V. Lammert
At 05:10 AM 3/9/00 , you wrote: > Wow. I'm at a loss here. Does anyone know of any >way that my (tiny) company can legally use SSL for >commercial purposes in the US without paying an obscene >amount of money to RSA or buying an obscenely expensive >web server system from a vendor? Yes. It

Re: unable to load 'random state' (OpenSSL 0.9.5 on Solaris)

2000-03-09 Thread Bodo Moeller
On Thu, Mar 09, 2000 at 10:39:17AM -0500, Don Badrak wrote: > On Thu, 9 Mar 2000, Theodore Hope wrote: >> When I run "openssl s_client -connect www.foo.bar:443" I get this: >> >> unable to load 'random state' >> This means that the random number generator has not been seeded >> with much rand

Re: adding trusted cert

2000-03-09 Thread Dr Stephen Henson
> Richard Dykiel wrote: > > Sorry if this seems trivial, but: > > 1- I created a root cert (self signed) > 2- I created a cert request for a CA cert > 3- I made my CA cert signed by my root cert: > it signed, but could not verify > What do you mean "does not verify"?? Which program doesn't

dublicates

2000-03-09 Thread Vadim Fedukovich
Hello, dublicates are generated by public.guangzhou.gd.cn and I dont know whom to contact there. Please let us do something right instead of just complyning "I have dublicates" back to the list driving traffic up. One might want to blacklist this host on primary list server. Thank all for yur

Commercial SSL in the US

2000-03-09 Thread Gerard Monsen
Wow. I'm at a loss here. Does anyone know of any way that my (tiny) company can legally use SSL for commercial purposes in the US without paying an obscene amount of money to RSA or buying an obscenely expensive web server system from a vendor? We were going to use an Apache web server wit

adding trusted cert

2000-03-09 Thread Richard Dykiel
Sorry if this seems trivial, but:   1- I created a root cert (self signed) 2- I created a cert request for a CA cert 3- I made my CA cert signed by my root cert:     it signed, but could not verify   I guessed it's because my root cert has not been installed as a "trusted" root. I' trying to se

Re: unable to load 'random state' (OpenSSL 0.9.5 on Solaris)

2000-03-09 Thread Theodore Hope
> > I just build OpenSSL 0.9.5, standard, on Solaris (SunOS) 5.6. > > When I run "openssl s_client -connect www.foo.bar:443" I get this: > > > > unable to load 'random state' > Hey, a "me too" here. > > This makes sense, now. I put 0.9.5 on Solars 2.6 and 7, and IRIX > 6.5, and with Crypt::

Re: Trouble building MSDOS version

2000-03-09 Thread Ulf Möller
On Thu, Mar 09, 2000 at 10:02:10AM -0500, Bob McConnell wrote: > Looking at the source, it's obvious that it's not expecting to have MSDOS > defined, the #IFDEF's only check for WIN32 and __ultrix. You'll have to add the relevent #ifdefs for MSDOS, there's no way around that. This is simple for

Re: urgent help

2000-03-09 Thread Dr Stephen Henson
Sadir Al-khafaji wrote: > > openssl x509 -req -in new.cert.csr -out client.cert.cert -signkey Ca.key > -CA saal-rsa.crt -CAkey Ca.key -CAcreateserial -days 365 > Signature ok > subject=/C=SE/ST=na/L=na/O=na/OU=na/CN=foo.com/Email=na > Getting Private key > Getting CA Private Key First problem y

RE: Verifying Certificates

2000-03-09 Thread Mark E. Schoneman
Bingo. Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dr Stephen Henson Sent: Wednesday, March 08, 2000 5:47 PM To: [EMAIL PROTECTED] Subject: Re: Verifying Certificates Mark E. Schoneman wrote: > > I'm aware I'm trying to cheat abit here, but h

splitting openssl processing between threads ?

2000-03-09 Thread Gregory Nicholls
Hi all, I'm in the process of designing what is effectively an ssl tunnel between 2 systems. I'd like to know if it's possible to seperate the session handling functions of openssl from the crypto ones. Something like process A handles the encryption of data and passes the encrypted dat

Re: unable to load 'random state' (OpenSSL 0.9.5 on Solaris)

2000-03-09 Thread Don Badrak
On Thu, 9 Mar 2000, Theodore Hope wrote: > I just build OpenSSL 0.9.5, standard, on Solaris (SunOS) 5.6. > When I run "openssl s_client -connect www.foo.bar:443" I get this: > > unable to load 'random state' > This means that the random number generator has not been seeded > with much random

Trouble building MSDOS version

2000-03-09 Thread Bob McConnell
Good morning, I know that the older 16 bit support is not being kept up to date, but I'm hoping there is someone that has a suggestion how to fix this. I am trying to build the library for an embedded DR-DOS target running on 386 and 486 processors on PC/104 cards. The target system is Ampro 3

Re: urgent help

2000-03-09 Thread Sadir Al-khafaji
Richard i am sure you are righ and i am sorry if i was vague with my question ok lets start Linux 2.2.13 SuSE apache 1.3.9 here is what i have done first i have issued a CA then i issued a new cert with which a signed with the following command openssl x509 -req -in new.cert.csr -out client.cert.

Re: urgent help

2000-03-09 Thread Richard Levitte - VMS Whacker
Sadir.Al-khafaji> urgent help, i am trying to get my browser to client Sadir.Al-khafaji> authenticate a an ssl server but it doesn't work. Sadir.Al-khafaji> Can any one help me out. do i have to generate a Sadir.Al-khafaji> server server and a client cert signed with ca so Sadir.Al-khafaji> that t

unable to load 'random state' (OpenSSL 0.9.5 on Solaris)

2000-03-09 Thread Theodore Hope
I just build OpenSSL 0.9.5, standard, on Solaris (SunOS) 5.6. When I run "openssl s_client -connect www.foo.bar:443" I get this: unable to load 'random state' This means that the random number generator has not been seeded with much random data. Consider setting the RANDFILE environment varia

Re:Re: correction...DSA self certificate use_cert..file failure

2000-03-09 Thread Grebelsky, Konstantin
> What does this file NosAdminUnixCert.pem look like? That error suggests > the certificate is corrupted somehow. Here is the file... it looks exactly > as some other certificate files I have seen. But different as others... I > have generated it using instructions of course with the names of the

Re: IE5 and Verisign Global ID

2000-03-09 Thread Dr Stephen Henson
Jeff Stewart wrote: > > Hi, > > I've seen this issue raised before but have been unable to find an > answer. I have an SSL enabled Apache server running on Solaris. > > Details: Solaris 2.6, Apache 1.3.12 + openssl-0.9.5 + mod_ssl-2.6.2 > running on a Sun Netra T1. > > We have a Ve