Convert Netscape Server certs for mod_ssl

2000-04-05 Thread Larry Leszczynski
Hello - I've been handed over a legacy system using Netscape Enterprise Server and need to migrate the certificates and keys to Apache/mod_ssl. Does anyone have instructions on how to use openssl to convert the Netscape cert.db and key.db files to the .crt and .key files I need for Apache/mod_ss

SMIME SIGN MESSAGE - PLEASE HELP ME

2000-04-05 Thread Ivo MACHULDA
Hello all, I tray signing simple text file over openssl tool with thi comand:   /usr/local/ssl/bin/openssl smime -sign -in mail.txt -text -out mail.msg -signer user.pem   This comand write this error:   Can't read recipient certificate file user.pem13916:error:0906D06C:PEM routines:PEM_read_b

Re: error strings

2000-04-05 Thread Dr Stephen Henson
> Richard Dykiel wrote: > > Hello, > I'd appreciate a hint on the following: > when calling ERR_error_string, I dont get a readable error string, but > rather: > > error:0906D06C::lib(9) :func(109) :reason(108) > error:0B06F009::lib(11) :func(111) :reason(9) > error:2106B00B::lib(33) :func(10

error strings

2000-04-05 Thread Richard Dykiel
Hello, I'd appreciate a hint on the following: when calling ERR_error_string, I dont get a readable error string, but rather:    error:0906D06C::lib(9) :func(109) :reason(108) error:0B06F009::lib(11) :func(111) :reason(9) error:2106B00B::lib(33) :func(107) :reason(11) I call ERR_load_crypto_s

Re: CRLS........

2000-04-05 Thread Vadim Fedukovich
On Wed, Apr 05, 2000 at 01:38:14AM -0400, Michael Harvey wrote: > Be Nice ,..I am new > > I Need Help with setting up CRL's > I run a small www site for a special group > I set up a Self signed CA > > My Problem... > each client has a cert that is checked > How do create a Proper crl cer

Revoking Certificates

2000-04-05 Thread Jonh Hale
I have setup a mini-CA for a specific app. I generated a cert, self-signed it, and then used this cert (my CA cert) to sign other certs ("user Certs"). The user certs then pass out of my control. Now I want to revoke one of the user certs. Can you tell me how I do this? Or at least give me a h

Re: OpenSSL 0.9.5 + Netscape LDAP

2000-04-05 Thread Julio Sánchez Fernández
Mike Thomas wrote: > > I am trying to secure communication to my openLDAP server by using an > SSL tunnel. I have tried several OpenSSL derived offerings(stunnel, > sslproxy...). All seem to fail with a bad cert error in the > SSL3_READ_BYTES call. I am not performing any certificate verificat

Revoking Certificates

2000-04-05 Thread Jon Hale
I have setup a mini-CA for a specific app. I generated a cert, self-signed it, and then used this cert (my CA cert) to sign other certs ("user Certs"). The user certs then pass out of my control. Now I want to revoke one of the user certs. Can you tell me how I do this? Or at least give me a hi

An urgent question, please sir

2000-04-05 Thread pgold
Dear all , We are Computer Science group from the American University in Cairo, and we are graduating this semseter. In fact, our graduation project is about "Distributed Intrusion Detection System", and our system needs to use SSL in the connections between its components (i.e. the senso

Re: X.509 storage

2000-04-05 Thread hazel_gao
You can go and look into the files in openssl-0.9.x/apps, that is what I have done. I learned a lot from those sample code. Hazel xavier wrote: > Hi, > > I'd like to retrieve a X.509 cert from a file and populate a X509 > structure with it. I'm swimming in the doc but I don't know which > rout

X.509 storage

2000-04-05 Thread xavier
Hi, I'd like to retrieve a X.509 cert from a file and populate a X509 structure with it. I'm swimming in the doc but I don't know which routine to use... do I have to DER encode the cert into a file and then decode it with d2i_X509() ? Thank you in advance... - Xavier __

Re: Win32 Libraries???

2000-04-05 Thread jagad
Yes, try Jan Tomasek's site http://www.tomasek.cz/index_en.html , he has written MySSL, the Delphi wrapper to OpenSSL. Hope this help Jagad - Original Message - From: Matthew Clark <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, April 05, 2000 3:12 AM Subject: Win32 Librari

Re: CRL's.....HELP

2000-04-05 Thread hazel_gao
1. First, use "openssl ca" to generate a CRL. 2. Make sure that your web server supports CRL check. If it does, add the CRL file path to the web conf file. Hazel Michael Harvey wrote: > I Neeed Help with setting up CRL's > I run a small www site for a special group > I set up a Self signed CA