RE: The paper I wrote once...

2000-05-18 Thread Tariq Habib
Hi Leonid: It is sad to hear that. The name of your paper seems to be very interesting. Once somebody returns the original copy, can we have it again over the mailing list. I would like to have a copy myself. Thanks. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTEC

how to send client certificate

2000-05-18 Thread haikel mejri
-- On Mon, 15 May 2000 13:07:25 haikel mejri wrote: >Hi, > >after getting the signed client public key (gnerated by netscape), i have generated a >client certificate. >I want to know how to send this client certificate to its owner. >any one can help me! > >thank you. > > >**

RE: Windows COM SSL_connect problems

2000-05-18 Thread Michael Wojcik
> -Original Message- > From: DeJuan Jackson [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, May 17, 2000 3:20 PM > Speaking of RAND_screen what does it use to seed the PRNG? I believe it uses the contents of the screen buffer, though I haven't looked at it. > Does it have to be a prompt

Re: CSR

2000-05-18 Thread Dr Stephen Henson
Tim Willis wrote: > > > I seem to be having some config problems with OpenSSL. When I try to > > create a CSR, openSSL tries to use this to find the config file: > > d:/openssl/d:/openssl/ssl/openssl.cnf > > Where can I go to correct this obviously incorrect syntax? > > This is probably hard co

Re: PKCS7_sign question

2000-05-18 Thread Dr Stephen Henson
Marco Russo wrote: > > Hi all. > I' m looking at the PKCS7_sign function: > > > if(!(flags & PKCS7_NOCERTS)) { > PKCS7_add_certificate(p7, signcert); > if(certs) for(i = 0; i < sk_X509_num(certs); i++) >PKCS7_add_certificate(p7, sk_X509_value(certs, i)); > } > > > Why can't I

Re: (No Subject)

2000-05-18 Thread Nico Aragon
Hello, Escribía "haikel mejri" <[EMAIL PROTECTED]>, hablando de (No Subject) con fecha Mon, 15 May 2000 13:07:25 +0100, >after getting the signed client public key (gnerated by netscape), i have generated a >client certificate. >I want to know how to send this client certificate to its owner.

The paper I wrote once...

2000-05-18 Thread Lenya Khachaturov
Hello everybody, About a month ago I posted a paper to this list, called "Client-server authentication with Apache using OpenSSL". Unfortunately, I've recently lost all my data, and want somebody to send me a copy of this paper to my e-mail, if you still have it. Thanks ahead for your help. -

CSR

2000-05-18 Thread Tim Willis
> I seem to be having some config problems with OpenSSL. When I try to > create a CSR, openSSL tries to use this to find the config file: > d:/openssl/d:/openssl/ssl/openssl.cnf > Where can I go to correct this obviously incorrect syntax? > > Thanks. > > Tim Willis > IS Technician > Code Rite

PKCS7_sign question

2000-05-18 Thread Marco Russo
Hi all. I' m looking at the PKCS7_sign function: if(!(flags & PKCS7_NOCERTS)) { PKCS7_add_certificate(p7, signcert); if(certs) for(i = 0; i < sk_X509_num(certs); i++) PKCS7_add_certificate(p7, sk_X509_value(certs, i)); } Why can't I include additional certificates in the p7 st

Re: Réf. : Re: chain of certificate

2000-05-18 Thread Dr Stephen Henson
Arnaud De Timmerman wrote: > > hi, > > >[3 level CA info deleted] > > >that reply was intended to show how you create a CA chain with 3 or more > >certificates in it. If you just want a root CA and an end user > >certificate then read the CA.pl manual page, as indicated in the FAQ. > > I check

Can Crypt be installed non-root?

2000-05-18 Thread Guy Simonian
I've sucessfully downloaded and make'd openssl-0.9.5a on FreeBSD, and downloaded Crypt-SSLeay-0.16 Since Crypt has no config file, is it engineered to only run (and locate libraries correctly) if installed out of root? Guy __

Dependencies involving openssl and Crypt-SSLeay

2000-05-18 Thread Guy Simonian
I've downloaded openssl-0.9.5a on FreeBSD, along with Crypt-SSLeay-0.16 Openssl has a ./config file where I can specify alternate directories using --prefix and --openssldir, however Crypt has no such config file. Both have make programs, make, make test, make install. Crypt has a test progra

Re: Documentation for BIO routines?

2000-05-18 Thread Ulf Möller
Ted Powell wrote: > Besides the OpenSSL source code, and the file bio.doc > from 0.6.6 (included in openssl-0.9.5a/doc/ssleay.txt), > is there any other documentation for the BIO routines? I don't think so. __ OpenSSL Project

Problems with Make

2000-05-18 Thread John E. Hart
Can Anyone Help Me? Please excuse me, I am a newbie to Apache and ssl but I am having a problem nonetheless. I am attempting to install Apache 1.3.12 with openssl 0.9.5 on a Sun Ultra 1 Enterprise running Solaris 5.7. I have configured the rsaref, ran make, make install and all went fine. I the

Re: Basic help :)

2000-05-18 Thread brunet eric
  >I try to run the basic s_client/s_server application with elementary communication (no certificats client and server), >but when I give the same ciphers suite for client/server for SSLv3 (like RC4-MD5), I have got the msg : no_shared_ciphers: I don't understand :~( >And does these programs gen

Re: Problems with oracle web server

2000-05-18 Thread Jose Amador
Hi Andrew Griffin escribió: > Jose, > > What's the version of Oracle Web Server? The version is 3.0.2. Do you know wich is the recommended version that works with other certificates ? > > > many of Oracles earlier web server technologies had the trusted CA's > hardwired into the application. T

RE: PKI GUI

2000-05-18 Thread Mark E. Schoneman
Jonah's GUI is all java with a JNI interface Jonah is a PKIX Freeware Library that was jointly written by Iris, Lotus, and IBM. The source code for all but the crypto has been available on http://web.mit.edu/pfl for domestic distribution and on http://www.foobar.com/jonah for worldwide distribut