Problems creating certificates

2000-06-26 Thread peter
Hi,.. I can't seem to generate a valid certificate for my openSSL app. Whenever I try a certificate that is produced by me, using the openssl command line tool, or some other tool, I get the following error msgs from my app.: 12359:error:0906406D:PEM routines:DEF_CALLBACK:problems getting passw

Re: SSL_CTX_use_PrivateKey_file() problem

2000-06-26 Thread raggi
>Hmmm. Are you manually calling PKC5_pbe_set() and EVP_PBE_CipherInit()? >You shouldn't have to. This kind of thing should be automatically >handled by the PKCS#8 code when you call SSL_CTX_use_PrivateKey_file(), Dear Dr. Henson Of course you were correct, I was on a wrong track. Thank you kind

Re: Re: Re: using RC4_128 and RC4_128_EXPORT40

2000-06-26 Thread Lutz Jaenicke
On Mon, Jun 26, 2000 at 02:55:35PM +0200, [EMAIL PROTECTED] wrote: ... > SSL 3.0 ciphers: > RC4 with 128 bit encryption and MD5 message authentication > RC4 with 40 bit encryption and MD5 message authentication > Triple DES with 168 bit encryption and SHA message authentication > D

Re: Re: Re: using RC4_128 and RC4_128_EXPORT40

2000-06-26 Thread silvio . matthes
Again, thanks for the quick answer >On Mon, Jun 26, 2000 at 01:11:58PM +0200, [EMAIL PROTECTED] wrote: >> >the texts for SSLv2 and SSLv3 are the same, this is of no importance. >> >What you really want is to use the 128bit domestic cipher and the 40bit >> >cipher as a fallback: >> >SSL_CTX_

OpenSSL & IIS

2000-06-26 Thread D'Arcy Rittich
Hi, can anyone give an example of creating and using SSL certificates with IIS4? After a few tries, I was able to generate and install a matching key pair, but was still unable to use https. I am likely having a problem with the IIS side of things - I was hoping there might be an experienced per

Re: Re: using RC4_128 and RC4_128_EXPORT40

2000-06-26 Thread Lutz Jaenicke
On Mon, Jun 26, 2000 at 01:11:58PM +0200, [EMAIL PROTECTED] wrote: > >the texts for SSLv2 and SSLv3 are the same, this is of no importance. > >What you really want is to use the 128bit domestic cipher and the 40bit > >cipher as a fallback: > >SSL_CTX_set_cipher_list(ctx, "RC-MD5:EXP-RC4-MD5");

Re: Server-Client communication

2000-06-26 Thread Richard Levitte - VMS Whacker
From: Roger Furtenheim <[EMAIL PROTECTED]> roger.furtenheim> The server application returns SSL_accept = 0 when roger.furtenheim> the client does SSL_connect. But the client returns roger.furtenheim> SSL_connect = -1. Why? Use ERR_print_errors_fp(stderr); to find out. If it's about the PRNG not

What is the max length of a block that can be signed?

2000-06-26 Thread carnation
My wonder is just as the title. At present , I'm using MD5 and RSA to make signatures. My data will be very large, so I'm wondering about the max of data that can be signed. Does the length vary with different digest algorithms? what are they ,then? I have looked up some books, but couldn't get a

Re: Re: using RC4_128 and RC4_128_EXPORT40

2000-06-26 Thread silvio . matthes
Hello Lutz, >> the other a Domestic Version. To set the communication right for the Domestic Version I have to do >> a >> SSL_CTX_set_cipher_list(ctx, SSL_TXT_RC4_128_WITH_MD5); >> >> If I try to connect with the same code to the Export-Version, the answer is 0 Bytes long, I have to c

Re: SSL Hardware accelerator

2000-06-26 Thread Geoff Thorpe
Hi there, On Sun, 25 Jun 2000, Wyman Eric Miles wrote: > I can give a counterrecommendation, at least. We have a Cryptoswift 100 > PCI demo unit. I recompiled OpenSSL 0.9.5a with the patches Rainbow > supplied. > > The first card we got was DOA. The system (Ultra 5/Solaris 2.6) > recognized

Server-Client communication

2000-06-26 Thread Roger Furtenheim
I'm trying to set up the server and client model shipped with openssl v0.9.5a. for win2000 The server application returns SSL_accept = 0 when the client does SSL_connect. But the client returns SSL_connect = -1. Why? Please if you got time, can anyone give me a hint on how to leap over this obst

Re: using RC4_128 and RC4_128_EXPORT40

2000-06-26 Thread Lutz Jaenicke
On Mon, Jun 26, 2000 at 12:08:28PM +0200, [EMAIL PROTECTED] wrote: > the other a Domestic Version. To set the communication right for the Domestic >Version I have to do > a > SSL_CTX_set_cipher_list(ctx, SSL_TXT_RC4_128_WITH_MD5); > > If I try to connect with the same code to the Expor

using RC4_128 and RC4_128_EXPORT40

2000-06-26 Thread silvio . matthes
Hello! I'm using OpenSSL to communicate with Netscape-Servers, one is an Export-Version, the other a Domestic Version. To set the communication right for the Domestic Version I have to do a SSL_CTX_set_cipher_list(ctx, SSL_TXT_RC4_128_WITH_MD5); If I try to connect with the same cod

Questions about certificates

2000-06-26 Thread JOSE . CARLOS
Hi Thank you all, for the product you have. I have two different problems that I would like your help, please. 1 - I'm generating test certificates for my company only with the last version SSLeay (I know that's a little bit old) compiled for Windows. I want to generate a certificate for I

Re: Cipher question...

2000-06-26 Thread Douglas Wikström
Hello! I know that a large PKI company uses their own homemade entropy collector to initialize the seed for the keygeneration of their smartcards. The entropy collector requires the admin to move around the mouse for quite a while, so this might not be applicable in a case requiring automation. (

Re: multiple certificates

2000-06-26 Thread Richard Levitte - VMS Whacker
From: Levy itai <[EMAIL PROTECTED]> itai> Is it possible to load more then 1 server certificate ? itai> Currently I'm using the SSL_CTX_use_certificate_file, and the itai> SSL_CTX_use_PrivateKey_file in order to load the certificate and itai> the private key at the initialization of the process.

multiple certificates

2000-06-26 Thread Levy itai
Hi, Is it possible to load more then 1 server certificate ? Currently I'm using the SSL_CTX_use_certificate_file, and the SSL_CTX_use_PrivateKey_file in order to load the certificate and the private key at the initialization of the process. I want to be able to load more then one certificate beca

Re: Certificate renewal

2000-06-26 Thread Radovan Semancik
[EMAIL PROTECTED] wrote: > > Radovan Semancik wrote: > > > > Hi! > > > > Maybe this is FAQ or even OT, but anyway: > > > > How is certificate renewal done? I mean the case, that user's > > certificate expired and she wants a new one. > > > > User sends a new CSR? How does CA handle it? And how ab

compile error on HPUX

2000-06-26 Thread myopenssl
Hi, Thanks for reading my question. I wish to get your suggestion and help. We developed an application which using OpenSSL libraries. We installed OpenSSL and our application on Solaris,AIX and Linux, and everything is OK. But when we turned to HPUX10.20,it seems not so lucky. We installed Open