Set Own CA under NT ?

2000-05-19 Thread Wing
Hello All,     I use the following to generate( server.key, server.crt, ca.key & ca.crt )   openssl genrsa -des3 -out server.key 1024 openssl req -new server.key -out server.csr openssl genrsa -des3 -out ca.key 1024 openssl req -new -x509 -days 365 -key ca.key -out ca.crt   then ... should sig

Re: Another non-blocking question

2000-05-19 Thread Bradley Beck Asztalos
Michael Farajian wrote: What protocol are you using for your application layer data?  If you are using HTTP/1.1 then the connection is left open by default and you have to make sure that you are only reading as much data as is specified by the content-length header. But this problem is not pecul

Unable to run the client/server programs which are written using API functions of OPENSSL

2000-05-19 Thread Raaj Krissna
I had installed the OpenSSL software on my Linux systems.I had written some client/server applications using API functions of 'C' of OpenSSL on Linux .But iam unable to run that programs & when iam tried to run them, Iam getting the following errors. I tried to run those programs(by linking with t

Another non-blocking question

2000-05-19 Thread Michael Farajian
We are using Win32 non-blocking sockets for our communication.  Everything seems to be working with one exception.   Recursive calls to SSL_read() get the server response, but when to STOP calling it is the question I've seen posted here quite often.  Below is a very simplified version of t

RE: RSA_public_encrypt and randomness

2000-05-19 Thread Lou Sheward
Hi, Try calling RAND_screen() first. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Marco Donati > Sent: Friday, May 19, 2000 7:56 AM > To: OpenSSL Users (E-mail) > Subject: RSA_public_encrypt and randomness > > > I have problems using the RSA_publ

Re: shared libraries solaris 2.6

2000-05-19 Thread Michael Sierchio
Mathias Leinmueller wrote: > In February there was already a discussion about how to build shared > libraries for solaris 2.6, however, I cannot see how it has to be done > though. In the change log I read that shared library support is now > available for solaris gcc. I did this in a fairly cru

Errors compiling darkspell gadgets

2000-05-19 Thread Lenya Khachaturov
Hello there, First of all I'd like to thank everybody who sent me my paper. I've received about 10 copies of it. Thanks, please don't send anymore :-) I've just started playing with OpenSSL programming under Linux, OpenSSL installed fine and I'm having the libraries in /usr/local/lib But when try

Re: Bug in SSLv3 protocol using SSLv23 method?

2000-05-19 Thread Claus Assmann
On Fri, May 19, 2000, Richard Levitte - VMS Whacker wrote: > From: Claus Assmann <[EMAIL PROTECTED]> > ca+ssl> ! According to the SSL/TLS standard, the first 2 bytes of that secret > ca+ssl> ! should be the protocol version. Since CgatePro insists on TLSv0 (aka > ca+ssl> ! SSL 3.0), the OpenSSL c

Re: Bug in SSLv3 protocol using SSLv23 method?

2000-05-19 Thread Richard Levitte - VMS Whacker
From: Claus Assmann <[EMAIL PROTECTED]> ca+ssl> Me again... sorry to bother you. I still have a problem with the ca+ssl> MTA at mail.stalker.com. The developer from Stalker was very helpful ca+ssl> and he concluded there is a bug in OpenSSL. ca+ssl> ca+ssl> Here is his e-mail: ca+ssl> ca+ssl>

Re: Comment in custom certificate

2000-05-19 Thread Amit Chopra
Hi, Check the openssl.cnf file. See nsComment in there. Amit. Frank Luedke wrote: > > How can I change the comment in a custom certificate? I am using > Apache 1.3.9 with OpenSSL 0.9.5 and generated a few custom > certificates. Unfortunately I haven't found out how I can change > the comment

Re: Problems with oracle web server

2000-05-19 Thread Jose Amador
Andrew Griffin escribió: > Jose, > > It's not until you get to OAS 4.0.8.1 that you can use other CA certificates. > > regards > > Andy Griffin. > > Jose Amador wrote: > > > Hi > > > > Andrew Griffin escribió: > > > > > Jose, > > > > > > What's the version of Oracle Web Server? > > > > The versio

RSA_public_encrypt and randomness

2000-05-19 Thread Marco Donati
I have problems using the RSA_public_encrypt function, since it always return -1 (by the way, the return value is the length of the envrypted data, isn't it?) Since I've compiled openssl 0.9.5a in debug mode (as a static library on Windows NT), I was able to observe this sequence of calls: RSA_p

The paper I wrote once... Document Attached

2000-05-19 Thread Amol Natu
Hi Lenoid The document you mentioned is attached alongwith. Regards Amol Mr. Tariq, I am copying this mail to you as per your request. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tariq Habib Sent: Friday, May 19, 2000 9:25 AM To: [EMAIL PROTECTED

Bug in SSLv3 protocol using SSLv23 method?

2000-05-19 Thread Claus Assmann
Me again... sorry to bother you. I still have a problem with the MTA at mail.stalker.com. The developer from Stalker was very helpful and he concluded there is a bug in OpenSSL. Here is his e-mail: ! We have added the check for the "premaster secret" verification. ! According to the SSL/TLS sta

shared libraries solaris 2.6

2000-05-19 Thread Mathias Leinmueller
Hi, In February there was already a discussion about how to build shared libraries for solaris 2.6, however, I cannot see how it has to be done though. In the change log I read that shared library support is now available for solaris gcc. Could anybody please post a step by step list, how to bui

RE: Looking for "getting started" guide.

2000-05-19 Thread Bob McConnell
Is this the one you are looking for? Bob McConnell > -Original Message- > From: Lenya Khachaturov [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, March 29, 2000 12:20 PM > To: Mike Frisch > Subject: Re: Looking for "getting started" guide. > > > Hello Mike, > > Here's a step-by-step you

Re: Client-server authentication in Apache Web Server with OpenSSL.Here it is!

2000-05-19 Thread Stewart Nutter
Lenya - replay of the doc you sent. At 05:20 PM 2000-03-28 +0400, you wrote: >Here is the translation of a paper many of you requested. >Some changes where made since the russian variant appeared >2 days ago. Check it. > >Best regards, > Lenya mailto:[EMAIL PROTECTED] >

Re: interoperability, esp. with a SSLv3(?) server

2000-05-19 Thread Bodo Moeller
On Tue, May 16, 2000 at 08:45:08PM -0700, Claus Assmann wrote: > I have a question about the different SSL versions, i.e., which one > should a client use to be interoperable? The specific problem is > with the MTA at mail.stalker.com. I finally got around to do some > more debugging and found ou

Re: various memory leaks?

2000-05-19 Thread Bodo Moeller
On Tue, May 16, 2000 at 09:45:20PM +1200, James Pullen wrote: [...] > Second one is more FYI. I've seen in the examples and the list archives > that ERR_remove_state(0) should be called to clean up some stuff at the > end. What I don't think anyone's mentioned is that it cleans up thread > spe

Re: Problems with oracle web server

2000-05-19 Thread Andrew Griffin
Jose, It's not until you get to OAS 4.0.8.1 that you can use other CA certificates. regards Andy Griffin. Jose Amador wrote: > Hi > > Andrew Griffin escribió: > > > Jose, > > > > What's the version of Oracle Web Server? > > The version is 3.0.2. Do you know wich is the recommended version tha