NES/NSAPI problem (formerly no subject)

2000-07-18 Thread x
> That means nothing more to me that it does to you :) Try > ERR_error_string(ERR_get_error(), NULL) instead. The message after SSL_connect fails is: [error:::lib(0) :func(0) :reason(0)] I think that some basic initialization has not been successful under NES/NSAPI. tried seeding the PR

RE: Need help... Fatal error when running "nmake -f ms\ntdll.mak"

2000-07-18 Thread Harry Ng
Thanks Mark, I renamed the ML.EXE AND ML.ERR to ml.exe and ml.err and it's working fine. I am trying to setup Apache SSL and I am running into another problem. I tried to run the "fixpatch" or "patch -p1 < SSLpatch" by following the readme.ssl, but I can't run any patch files, since the system d

RE: Need help... Fatal error when running "nmake -f ms\ntdll.mak"

2000-07-18 Thread Harry Ng
Thanks, DR. Steve. I renamed the ML.EXE AND ML.ERR to ml.exe and ml.err and it's working fine. I am trying to setup Apache SSL and I am running into another problem. I tried to run the "fixpatch" or "patch -p1 < SSLpatch" by following the readme.ssl, but I can't run any patch files, since the s

Re: 'req' fails

2000-07-18 Thread Richard Levitte - VMS Whacker
From: Lewis McCarthy <[EMAIL PROTECTED]> lewis.mccarthy> Bill Rebey writes: lewis.mccarthy> > There is no '-rand' option for 'req' like there is for other stuff, lewis.mccarthy> lewis.mccarthy> Hmm, the man page at http://www.opentls.org/docs/apps/req.html lewis.mccarthy> documents a "-rand" op

Re: 'req' fails

2000-07-18 Thread Lewis McCarthy
Bill Rebey writes: > There is no '-rand' option for 'req' like there is for other stuff, Hmm, the man page at http://www.opentls.org/docs/apps/req.html documents a "-rand" option for "openssl req". -Lewis __ OpenSSL Project

Re: Signing AND encrypting a message with smime

2000-07-18 Thread Alexander Skwar
On Tue, Jul 18, 2000 at 10:26:24PM +0100, Dr Stephen Henson wrote: > That wont work, it will just encrypt with the way the smime command > currently works. It should really throw an error message. Thanks, figured that out myself :-) And yes, it really should throw an error message. > This is me

'req' fails

2000-07-18 Thread Bill Rebey
When executing the command openssl req -new -x509 -days 3650 -key CAPrivateKey.pem -out CACert.pem It fails complaining that the PRNG isn't seeded. There is no '-rand' option for 'req' like there is for other stuff, and I can't come up with a way to run two command simultaneously so th

Re: (no subject)

2000-07-18 Thread Arun Venkataraman
That means nothing more to me that it does to you :) Try ERR_error_string(ERR_get_error(), NULL) instead. Arun. "The online world is a cool place to visit, but you really don't want to live there." This message is for the named pe

(no subject)

2000-07-18 Thread Paul Faccenda
SSL_connect is returning 0 - the error code is 2, "system lib" > I believe that for SSL_connect() a return value of 0 also indicates an > error. In such a case, you should delve deeper and figure out the exact text > message of the error (as lutz suggested). You may see what you have been > lo

Re: caught SIGTERM, shutting down

2000-07-18 Thread Mads Toftum
On Tue, Jul 18, 2000 at 04:18:51PM -0500, Matthew Chapman wrote: > I have installed Apache 1.3.12 / mod_perl 1.22 / mod_ssl 2.6.5 > You should be asking this on the mod_ssl list instead. > Every time I start httpd via > > >/usr/local/apache/bin/apachectl startssl > > it gives the following err

NetBSD make test

2000-07-18 Thread Igor Pruchanskiy
Hello, i am having a really weird problem. I don't seem to be able to run make test. Any help would be greatly appreciated. First i ran $make test and go this Doing certs Segmentation fault - core dumped ICE-CA.pem does not conta

Re: Signing AND encrypting a message with smime

2000-07-18 Thread Dr Stephen Henson
Alexander Skwar wrote: > > > But how do I sign *AND* encrypt? I tried this: > > openssl smime -sign -signer client-cert.pem -encrypt -inkey client-cert.pem\ > -to [EMAIL PROTECTED] -from [EMAIL PROTECTED] -in InFile -out OutFile > That wont work, it will just encrypt with the way the smime c

caught SIGTERM, shutting down

2000-07-18 Thread Matthew Chapman
I have installed Apache 1.3.12 / mod_perl 1.22 / mod_ssl 2.6.5 Every time I start httpd via >/usr/local/apache/bin/apachectl startssl it gives the following error message in error.log [Tue Jul 18 15:11:43 2000] [notice] caught SIGTERM, shutting down [Tue Jul 18 15:11:54 2000] [notice] Apache/1

Re: Attached files

2000-07-18 Thread Michael Zedeler
Hi Richard, It sounds like something that can be done with the S/MIME functions in the library, since you're talking about attachments. Why not do a direct transfer with some SSL based protocol, such as https? Doing stuff with S/MIME makes things more complicated when comparing to something like

Re: Need help... Fatal error when running "nmake -f ms\ntdll.mak"

2000-07-18 Thread Dr Stephen Henson
Harry Ng wrote: > > Have anyone seen this error? I follow the install.w32 instructions and I was > trying to run the nmake command, but I get a fatal error. > > The name specified is not recognized as an > internal or external command, operable program or batch file. > NMAKE : fatal error U1077:

Re: pkcs7 to smime?

2000-07-18 Thread Dr Stephen Henson
Yuji Shinozaki wrote: > > I see there is a way to convert from an s/mime message to a pkcs7. Is > there a way to do the reverse? It seems the smime utility requires you to > do a signing when creating the s/mime message. But what I would like to > do is construct an smime message manually, usi

Attached files

2000-07-18 Thread Richard Dybowski
I am completely new to SSL so please forgive the naivety of my question. I wish to set up an encryption system by which a colleague can encode a database and send the corresponding ciphertext to me as an attached e-mail file. After decoding the attachment and analyzing the database, I will enc

IE5 Not Accepting Certificates

2000-07-18 Thread Hubbard, David
Hi all, I'm rather new to openssl so please forgive me if this is a basic question. I've got an apache server running 1.3.12 with mod_ssl 2.6.5 and openssl 0.9.5a. I've made myself a CA and signed my own server certificate, so I've got a ssl.key/server.key and an ssl.crt/server.crt. I've got

RE: Default SSL cipher string?

2000-07-18 Thread Brian Snyder
Sorry i should have mentioned, what about for sslv3, not tls? thanx, brian > -Original Message- > From: Rene G. Eberhard (keyon) [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 18, 2000 3:32 PM > To: [EMAIL PROTECTED] > Subject: RE: Default SSL cipher string? > > > > Does the de

RE: Need help... Fatal error when running "nmake -f ms\ntdll.mak"

2000-07-18 Thread mark schoneman
You need the M$ Macro Assembler in your path. I don't think it comes with the regular OS. You may need to go to the web and download it. Mark S. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Harry Ng Sent: Tuesday, July 18, 2000 1:34

RE: Default SSL cipher string?

2000-07-18 Thread Rene G. Eberhard (keyon)
> Does the defualt SSL cipher suite use RC5 or IDEA. I dont believe so, but > just wanted to confirm. TLS_RSA_WITH_IDEA_CBC_SHA. RC5 is not defined in TLS. Regards Rene -- Rene G. Eberhard <[EMAIL PROTECTED]> keyon Herrenberg 35, CH-8640 Rapperswil, Switzerland Phone +41 (0)55 220 71 63, Fax

Re: (no subject)

2000-07-18 Thread Arun Venkataraman
I believe that for SSL_connect() a return value of 0 also indicates an error. In such a case, you should delve deeper and figure out the exact text message of the error (as lutz suggested). You may see what you have been looking for. Arun. "The online world is a cool place to visit, but you real

SSL connection through proxy?

2000-07-18 Thread laurenz_brein
Is it possible to establish an SSL connection through a HTTP proxy with OpenSSL? If yes, how? Thanks, Laurenz Brein Telephon: ++43-1-21145/3256e-mail: [EMAIL PROTECTED] __ OpenSSL Project

Need some help/advice - OpenSSL + NT + PWS 4.0

2000-07-18 Thread Pavel Tzekov
Hello there, Is it possible to implement custom SSL secured connection using the above environment ? What I mean is to override the default SSL implementation of PWS 4.0 with somekind of OpenSSL based server / IIS filter so when I connect to port 443 the listening app to negotiate SSL connexion

Re: form signing and verification

2000-07-18 Thread Andrey Angelov
Vivek Dasgupta wrote: > I have netscape 4.72 with PKCS#11 CRYPTO MODULES > > I have also tested javascript method crypto.signText > at client side to sign form data. It displays communicator window to signing but >gives internal error after pressing OK. for me on Netscape 4.73 works OK. Check cl

form signing and verification

2000-07-18 Thread Vivek Dasgupta
Hi How to sign form data and verify at server? I have netscape 4.72 with PKCS#11 CRYPTO MODULES I have also tested javascript method crypto.signText at client side to sign form data. It displays communicator window to signing but gives internal error after pressing OK. On server side does ope

Re: compiler problems

2000-07-18 Thread Richard Levitte - VMS Whacker
From: Marco Friedrich <[EMAIL PROTECTED]> mf> ./config rsaref --prefix=/usr/local --openssldir=/usr/local/openssl mf> mf> When i start make the compiler exit with the following message. Without mf> the rsaref-option in the config-script the compiler runs without any mf> problems. Why the rsaref

compiler problems

2000-07-18 Thread Marco Friedrich
Hello! I'am a Newbie in openssl. I have problems with compile the last openssl-version. ./config rsaref --prefix=/usr/local --openssldir=/usr/local/openssl When i start make the compiler exit with the following message. Without the rsaref-option in the config-script the compiler runs without an

Re: Memory leak, again

2000-07-18 Thread Lutz Jaenicke
On Tue, Jul 18, 2000 at 12:09:24PM +0200, Berki Lukacs Tamas wrote: > I have just the same problem as Bill Rebey. I have an SSL server which > verifies client certificates by setting SSL_CTX_set_verify to > SSL_VERIFY_PEER|SSL_FAIL_IF_NO_PEER_CERT, and every time an SSL_accept > succeeds, there is

Re: PKCS12 unpack error

2000-07-18 Thread Pablo J. Royo
Hi I had the same problem, and I didn't find how to solve it except #undefining that M_XXX macros in my source file,then #defining it correctly.After using them in my file, you can letf then unchanged again if you like. I´d like to know if there is a better (and elegant) way to do it. Here it i

Memory leak, again

2000-07-18 Thread Berki Lukacs Tamas
Hi! I have just the same problem as Bill Rebey. I have an SSL server which verifies client certificates by setting SSL_CTX_set_verify to SSL_VERIFY_PEER|SSL_FAIL_IF_NO_PEER_CERT, and every time an SSL_accept succeeds, there is a memory leak of approximately 10k (!) I call OpenSSL functions in

PKCS12 unpack error

2000-07-18 Thread Angus Lee
Hi, VC6 reported that there're error with the following line: if (!(asafes = M_PKCS12_unpack_authsafes(p12))) return 0; The error was: error C2664: 'ASN1_seq_unpack' : cannot convert parameter 4 from 'void (struct pkcs7_st *)' to 'void (__cdecl *)(void)' None of the functions with this name in