errors...

2000-03-31 Thread Ricardo Stella
Well, I compiled lynx 2.8.2 using openssl 0.9.4 libraries (and rsaref) under Solaris 2.6. It works ! But now I'm trying to compile it using openssl 0.9.5 libs, under Solaris 2.7. I can't get it to work. It compiles, yes and lynx works to non-ssl ports, but I can't get in to ssl sites. As a sh

Best method for Certificate generation & maintenance on Linux...?

2000-03-31 Thread Matthew Clark
Hi, I'm fairly new to SSL and just have a few questions... If I am running stunnel, what is the best way to generate and maintain a list of authorised client keys?? (So basically I guess I want to be a small time CA - could eventually be thousands of certificates) I assume I need to create a roo

Re: Verisign -- Want some free certificate over the Internet?

2000-03-31 Thread Leland V. Lammert
At 11:28 AM 3/30/00 , you wrote: >This site distributes a free software called SecureAge which >is working on Windows 95/98/NT. It will give the user a free >certificate issued by that company, that certfiticate will enable >the user to > - send signed/encrypted email > - exchange secure docum

Re: secure channel with ADH w/o authentication or certs.

2000-03-31 Thread Andrew W. Gray
did you compile the libraries allowing ADH? I believe prior to 0.9.5 this was not enabled by default. Check the top level makefile. Andrew __ OpenSSL Project http://www.openssl.org User Support

Re: secure channel with ADH w/o authentication or certs.

2000-03-31 Thread Lutz Jaenicke
On Fri, Mar 31, 2000 at 01:55:44PM -0600, Wilder, John wrote: > I was looking through the openssl-users archive and found that someone succeeded in >something > I'm trying to do - create a secure channel with no certs or authentication. Only >thing is, I can't get it > to work. I see that it

Re: secure channel with ADH w/o authentication or certs.

2000-03-31 Thread Dr Stephen Henson
Wilder, John wrote: > > I was looking through the openssl-users archive and found that someone succeeded in >something > I'm trying to do - create a secure channel with no certs or authentication. Only >thing is, I can't get it > to work. I see that it works between s_server (with nocert opti

Re: secure channel with ADH w/o authentication or certs.

2000-03-31 Thread Jeffrey Altman
> I was looking through the openssl-users archive and found that > someone succeeded in something I'm trying to do - create a secure > channel with no certs or authentication. Only thing is, I can't get > it to work. I see that it works between s_server (with nocert > option) and s_client. I'm

secure channel with ADH w/o authentication or certs.

2000-03-31 Thread Wilder, John
I was looking through the openssl-users archive and found that someone succeeded in something I'm trying to do - create a secure channel with no certs or authentication. Only thing is, I can't get it to work. I see that it works between s_server (with nocert option) and s_client. I'm using o

Re: Verisign/NSI/Thawte monopoly

2000-03-31 Thread Michal Trojnara
Odpowiedz automatyczna: Do 31 marca jestem na szkoleniu. W pilnych sprawach prosze o kontakt z Romanem Iwanickim. Z powazaniem, Michal Trojnara >>> "[EMAIL PROTECTED]" 03/31/00 19:21 >>> hi, On Fri, 31 Mar 2000, Mark H. Wood wrote: > On Thu, 30 Mar 2000 [EMAIL PROTECTED] wrote: > > You mis

RE: _lrot* defined for mingw32

2000-03-31 Thread Bill
>> _lrotl and _lrotr can be used. This is not case >> and consequently, the linker will complain vigourously. > >Thanks for the report! (I wonder why the linker didn't complain when >I built the test programs?) > >What is the macro to test for VC++? I'm not certain, since I don't have VC++, but I

Re: Verisign/NSI/Thawte monopoly

2000-03-31 Thread dreamwvr
hi, On Fri, 31 Mar 2000, Mark H. Wood wrote: > On Thu, 30 Mar 2000 [EMAIL PROTECTED] wrote: > > You missed my point. Read on... > > > > > b) Certificates authenticate that the person is who they say they > > > are. hmmm... i have always thought the Certs from CA simply say yeah we know a

Re: Verisign/NSI/Thawte monopoly

2000-03-31 Thread Richard Levitte - VMS Whacker
mwood> Now I am surprised. The key only means that you have a mwood> reasonably secure channel to an unknown endpoint. Do lots of mwood> people really believe that it means any more than that? That mwood> is frightening. You wouldn't believe what J. Random Luser can believe... -- Richard Lev

Re: Installing 0.9.5 on top of 0.9.2b

2000-03-31 Thread Ng Pheng Siong
On Thu, Mar 30, 2000 at 02:11:37PM -0500, Wade L. Scholine wrote: > drwxrwxrwx 28 hadi software1024 Mar 27 14:40 .. ^^ ^^ Parent directory is 777, and not owned by root. (!) > Is there anything special that I need to do or watc

how can i unsubject this mail list?

2000-03-31 Thread floatboat
___ ÍÆ¼ö£¡YEAHÓÊÏä( http://freemail.yeah.com ) 8Õ׿ռ䡣 __ OpenSSL Project http://www.openssl.org User Support Mailing List

Please can I some help!!

2000-03-31 Thread Shekhar Chhabra
Hello my good people who use openssl! I would like some help please! I have installed apache on my windows NT workstation. This is the file I have installed - Apache 1.3.12 mod ssl 2.6.1 openssl 0.9.5 WIN32-i386.zip. I configeured apache no problem I can view my sites and get the cgi working no

Re: Verisign/NSI/Thawte monopoly

2000-03-31 Thread Mark H. Wood
On Thu, 30 Mar 2000 [EMAIL PROTECTED] wrote: > You missed my point. Read on... > > > b) Certificates authenticate that the person is who they say they > > are. > > > > Trust goes to trusting that second statement, not the trustworthiness > > of the company behind the statement. > > > >

Re: Verisign/NSI/Thawte monopoly

2000-03-31 Thread Mark H. Wood
On Thu, 30 Mar 2000, Thomas Reinke wrote: > [EMAIL PROTECTED] wrote: > > So it seems to me that while the cert may certify that said organization > > is who they say they are - nobody seems to ask if who they say they are > > has any relevance to anything. > > [snip] > > Look back to the problem

MSIE5.0 pkcs12 file import error

2000-03-31 Thread Stone Yang
Hi, I want to create a pkcs12 file for MSIE 5.0 , I try like this: openssl pkcs12 -export -in testcert.pem -inkey testkey.pem -out test.pfx -certfile cacert.pem After create pkcs12 file sucessfully , I try to import it but can't do it . But I try to import it to netscape, it

strange behaviour of MS IE4 when importing a certificate

2000-03-31 Thread Roland Dirlewanger
Hi, I noticed a strange behaviour while importing certificates generated with openssl 0.9.5 into MS IE4. The context : inside a community of users (let's think of it as an Intranet), we use a self-signed CA. This CA signed my CA. With this CA, I generate users certificates. I use the following o

XORing

2000-03-31 Thread xavier
Hi Cryptogurus, I'm just wondering something about something I saw in a protocol spec... How to implement something like: Y = X xor SHA-1(Z) Where X is an arbitrary array of bits which may be longer or shorter than the 160-bit output of SHA-1. Do I have to process X by 160-bit chunks