Re: Cert passphrase

2000-07-28 Thread Lewis McCarthy
Hi Richard, > It still generates the proper certificates, but, when processing the > "openssl req" line, it immediately prompts me for a pass phrase. How > can I set up my openssl.cnf file in such a way as to avoid it asking for > the pass phrase? [...] > I'm not an active member of the list, bu

Re: The rsaref library

2000-07-28 Thread Vin McLellan
> Remo Inverardi <[EMAIL PROTECTED]> queried the List: > > > > After reading about the rsaref library, several questions came to > > mind: > > > > a) Is the rsaref library the same as Bsafe? Or is it a part of > >Bsafe? No and No. RSAref has never even shared a common code b

Cert passphrase

2000-07-28 Thread Richard West
I've done this before, but for the life of me I can't remember the right options in the openssl.cnf file.. And, unfortuntely, when I upgaded to openssl 0.9.5a a while back, it over wrote my openssl.cnf file.. of course, I didn't discover this until today. :( I used to generate my certificates vi

Re: openssl for windows

2000-07-28 Thread Mike_Bryeans
In Article <001501bff8b1$04439120$4c3e36d5@pac> "ukoeppe" <[EMAIL PROTECTED]> writes: > - Original Message - > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, July 28, 2000 6:50 PM > Subject: openssl for windows > > > > Anybody know where I can get openssl already co

Optimizing sample server

2000-07-28 Thread Bhavin Shah
Hi, I'm trying to optimize a sample server I've got going in C++ on linux using OpenSSL 0.9.5a, but am having no luck. For one thing, the executable increased by a factor of more than 10. Even with the optimize flag in compilation. Is this normal? Here's the basic structure of my server: SSL_

Re: openssl for windows

2000-07-28 Thread ukoeppe
- Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, July 28, 2000 6:50 PM Subject: openssl for windows > Anybody know where I can get openssl already compiled for WIndows? I don't > have perl installed, have no interest in having it installed, so I can't

Re: Configuring Apache with SSL

2000-07-28 Thread Craig Shaver
Hi, I think you need to read the documentation and see where you configure the gcache. It needs a connection and that is usually specified in the httpd.conf. You are obviously using Ben's apache-ssl patch kit and not mod_ssl. I ran into the same problem in the past. BTW I just brought up a new a

openssl for windows

2000-07-28 Thread Mike_Bryeans
Anybody know where I can get openssl already compiled for WIndows? I don't have perl installed, have no interest in having it installed, so I can't compile the source for Windows. --- WebBBS Pro v1.19 : Genesis ( http://www.webbbs.org/ ) __

Re: Using Memory BIO

2000-07-28 Thread Amit Chopra
> No, the record payload can be smaller than 16 KB and the record won't > be padded (except as far as necessary for the cipher). But each > record has a record header, and if you use smaller records, then a > larger percentage of network traffic will be record headers. A, my naivete shows. B

Re: SSL3_GET_RECORD:bad mac decode

2000-07-28 Thread Bodo Moeller
On Thu, Jul 27, 2000 at 02:43:45PM +0200, Konstantin Agouros wrote: > I am writing a client-site application using OSSL 0.9.5a. > It works for most websites but https://homebanking2.sskm.de/banking.html > There I get a SSL3_GET_RECORD:bad mac decode That site uses a buggy server -- it does not s

Re: Using Memory BIO

2000-07-28 Thread Bodo Moeller
On Fri, Jul 28, 2000 at 12:04:06PM +0530, Amit Chopra wrote: >> SSL_write will send the data passed to it in a single record unless >> unless the request is too large for one record. So for efficiency, >> avoid repeated calls to SSL_write with small (less than 16 KB) >> payloads if you can; if y

Re: RC5 question

2000-07-28 Thread Ulf Moeller
On Fri, Jul 28, 2000, Jeff Hamilton wrote: > Does anyone have an idea as to what release of Openssl first contained RC5? It is in all versions of OpenSSL, and in some releases of SSLeay. __ OpenSSL Project

RC5 question

2000-07-28 Thread Jeff Hamilton
Does anyone have an idea as to what release of Openssl first contained RC5? Thanks, -Jeff Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

Re: Specifying seprate Document roots for SSL VirtualHosts

2000-07-28 Thread Tom Nichols
They work just fine, and I've been running them for months. The ONLY thing that does not resolve correctly are the certificates, and I have a few ideas as to how to correct that without any changes to the apache-ssl or openssl code..Be patient. "Leland V. Lammert" wrote: > Tom, > > The virtual

Configuring Apache with SSL

2000-07-28 Thread sergio
Hi, I'm installing Apache with openssl-9.0.5a and after many hours trying to make it work, I can't see the certificate. Netscape says there is an error in the TCP connection, and in the error_log appear these lines: Failed to connect to socket: /usr/local/apache/logs/gcache_port connect: Conexio

Re: How to use openssl for key and cert management?

2000-07-28 Thread Lutz Jaenicke
On Fri, Jul 28, 2000 at 08:52:44AM +0200, Gerd Schering wrote: > are there tools that come with OpenSSL, suitable to achieve a rudimentary form > of key and certificate management? OpenSSL comes with the "CA.pl" script that allows for some basic functionality of a "demoCA". If you want more, ther