Hi,
i have a question about BIO´s used in OpenSSL.
Is a reference our there how to use these BIO´s?
thanks Meik
__
OpenSSL Project http://www.openssl.org
User Support Mailing List
Amos Blackman wrote:
>Any suggestions for getting a reasonable set of generally trusted root
>certificates (such as netscape and ie use)? Any suggestions for a good
>schema (or an open source implementation :) for storing and matching against
>the set once I have it?
mod_ssl comes with a ca-bund
Any suggestions for getting a reasonable set of generally trusted root
certificates (such as netscape and ie use)? Any suggestions for a good
schema (or an open source implementation :) for storing and matching against
the set once I have it?
Thanks!
-a
--
Amos Blackman
Platform Development
Tell
>From [EMAIL PROTECTED]
His address alone ist interesting: it is German and means:
[EMAIL PROTECTED]
I recoomend to just /dev/null him
Sorry.
__
OpenSSL Project http://www.openssl.org
User Sup
Sampo said in the README file of his Perl Module
Net_SSLeay that HP-UX will give some problems when installing.
I've got them when install a Perl Module
"Net_SSLeay 1.05" on HP_UX 11.0.
My OpenSSL is 0.9.3a. If I built OpenSSL with gcc
2.95.2, I got an error as attached "report.gcc" fi
Hi ,
I want make Clientcert.s with a batch scripts.
What i had done :
openssl ca -policy policy_anything -keyfile ../certs/private.pem -cert
../certs/new.cert.cert -in ./infile -out ./clientcert.pem -batch
My infile look like :
commonName = ClientCertificate
emailAddress = [EMAIL PROTECTED]
Hello.
I'm trying to validate a X509 certificate using the code below. I tried
several certificates, some generated by openssl and some generated by other
CAs. In all cases I receive the same error (erro code # 7, which is defined
as X509_V_ERR_CERT_SIGNATURE_FAILURE).
I know the cer
Dear sir,
This is Saroj. could you do little favour to me to clarify the fallowing
confusions.
case 1:
. Presently Our product is accessing the http
sites. I wanted it to also access https sites.I tried to install JSSE(JAVA
SECURE SOCKET EXTENSION). But I have to install the d
On Thu, Jul 06, 2000 at 02:38:42PM -0400, Gotfried, Colette wrote:
>
> I think I need some basic help.
> If there is somebody out there who knows the answers to the following simple
> questions, could he take the time to make my life much easier.
>
> 1- What is PKCS? Does it define the kind of k
From: "Gotfried, Colette" <[EMAIL PROTECTED]>
ColetteG> 1- What is PKCS? Does it define the kind of key, the kind of
ColetteG> certificate or the kind of encoding of the certificate file?
It's a set of cryptography standards defined by RSA (primerly). PKCS
stands for Public-Key Cryptography Sta
http://www.rsasecurity.com/rsalabs/faq/ might be a good start.
Mark S
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Gotfried, Colette
Sent: Thursday, July 06, 2000 1:39 PM
To: '[EMAIL PROTECTED]'
Subject: Call
I think I need some basic help.
If there is somebody out there who knows the answers to the following simple
questions, could he take the time to make my life much easier.
1- What is PKCS? Does it define the kind of key, the kind of certificate or
the kind of encoding of the certificate file?
2-
As you can see from my questions I'm a novice in using SSL.
1) I extracted the subject_name from X509 PKC with
X509_get_subject_name.
I would like to know how can I obtain the way in which the Distinguished
Name , has been encoded. I mean rfc 2459 defines X.500 directoryName as
a Sequence of Attr
Hello,
Maybe it is a silly question but today I have read in the mails the
discussion about the signature key and the encryption key for the data
exchange I supose. So I have asked myself some questions that I don't understand
very well, could someone help me?
1. It has been said that openssl use
Dear All,
I am currently trying to port SSL to an embedded environment
running a home grown O/S on a StrongARM processor.
I've got as far as making the code compile with suitable use
of #ifdef's and being able to run it. I'm trying to get an HTTP
client to connect to a secure web server.
In o
Hi,
I don't understand your verify callback, I have used it and when my
program worked, with your verify_callback not. Can you explain to me how
works or why you use it?
thanks
Shrikrishna Karandikar wrote:
Hi,
I have been following the email exchanges regarding client certificate
verificatio
> -Original Message-
> From: Marco Donati [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, July 06, 2000 12:48 PM
> To: [EMAIL PROTECTED]
> Subject: RE: OpenSSL and Cross compilers
>
>
> > Does anybody has ever tried to build OpenSSL with a cross
> > > compiler to use it
> > > on an embedded
Dr Stephen Henson wrote:
>
>
> or if by putting !EXPORT56 on the end of an already existing cipher
> list. The bug is mentioned at:
>
> http://www.microsoft.com/windows/ie/security/schannel.asp
>
Oops, thats not the right URL describing that problem, this is:
http://support.microsoft.com/sup
Levy itai wrote:
>
> Hi Guys,
>
> I send this mail to the dev mailing list also because it seems that there is
> a bug in the OpenSSL key exchange mechanism.
> Anyway, I've been debugging this problem for the past 2 weeks without any
> success and need urgent help.
>
It is not a bug in OpenSSL
> Does anybody has ever tried to build OpenSSL with a cross
> > compiler to use it
> > on an embedded system?
> We're doing just that, using our own cross-development tool
> (SoftWorks) to
> use OpenSSL on our object-oriented real-time executive
> (SoftKernel). This
> work is currently progressin
I used openssl to developp
- a certificate server
- a framework to developp TLS client and server apps
- an S/MIME Exchange client extension (to plug in Outlook,..)
All of them make a great use of
- PKCS#1,PKCS#5
- PKCS#7 and PKCS#10
- PKCS#12
From: "Gotfried, Colette" <[EMAIL PROTECTED]>
ColetteG> I heard it is because Verisign stopped using PEM format, and
ColetteG> is now using PKCS. Does openSSL support PKCS?
This is a mix of oranges and apples. PEM is just a file format, while
PKCS is generally a description of algorithms, file
Thanks everyone for the information.
Ollie
-Original Message-
From: Eric Rescorla [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 05, 2000 10:38 PM
To: [EMAIL PROTECTED]
Subject: Re: PKCS7_encrypt with a DSA certificate?
Eric Murray <[EMAIL PROTECTED]> writes:
> > 1. PKCS#7 requires R
On Wed, Jul 05, 2000 at 12:50:20PM -0400, Gotfried, Colette wrote:
> Hello,
>
> I am new in that domain. The product I am working on uses openSSL. For some
> reason, we cannot support Verisign certificates.
> I heard it is because Verisign stopped using PEM format, and is now using
> PKCS. Does o
From: Gubler Bruno <[EMAIL PROTECTED]>
bruno.gubler> When i do "make certificate TYPE=custom" i will get at
bruno.gubler> STEP 6 a Error:
bruno.gubler>
bruno.gubler> error 7 at 0 depth lookup:certificate signature failure
bruno.gubler>
bruno.gubler> Question:
bruno.gubler> Is this a real Probl
Hi Guys,
I send this mail to the dev mailing list also because it seems that there is
a bug in the OpenSSL key exchange mechanism.
Anyway, I've been debugging this problem for the past 2 weeks without any
success and need urgent help.
My configuration is :
Server based on OpenSSL version 0.9.5
Hallo
When i do "make certificate TYPE=custom" i will get at STEP 6 a Error:
error 7 at 0 depth lookup:certificate signature failure
Question:
Is this a real Problem, or can i ignore it?
Attached you will see a File where You can see what i have done
Thanks in advance
Bruno
bash-2.03# make
27 matches
Mail list logo
