Open SSL install version 9.5.a

2000-08-03 Thread Sridhar Alluri
Hi,   I am trying to install openssl on a SCO box. The make went fine, however during make test, I am getting an error   "Failed! bc: 1 is unimplemented*** Error code -1 (bu21)*** Error code 1 (bu21)"     Could anybody shed some light on this error. Is is a fatal error?   Thanks in advance  

DSO problems on AIX - OpenSSL related?

2000-08-03 Thread Michael Hojnowski
Hi gang, I posted this on the mod_ssl forum, without a lot of success. I thought I'd try it here. It seems like this should be FAQ, but I can't find an answer. I've looked through the mail list archives. I'm running: AIX 4.3.2 AIX C compiler 3.6.4.0 Apache 1.3.1

Rainbow patches

2000-08-03 Thread Trevor Dimond
Anyone out there have the Rainbow patches available for patching OpenSSL to interoperate with the Rainbow CryptoSwift HSM card? If you do I would be much obliged if you could mail them to me. If you could document any known software/hardware dependencies that would also be much appreciated. Regar

RE: Newby Connection Questions

2000-08-03 Thread Benny Chandra
Actually there is no difference. Have you install the CA certificate correctly? Please refer to Microsoft KB for more complete info. I also have same problem when using Netscape, but with IE it works fine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [

Re: Stupid Question

2000-08-03 Thread Dr Stephen Henson
Konstantin Agouros wrote: > > Hi, > > since I am tired of wandering through the sources without directions: > Can someone tell me how I cat get just the CN of the subject of a certificate > in a verify-callback. (And no I don't want to use the X509_NAME_online and > the fiddle in that string unl

configure: error: Could not find working SSLeay / OpenSSL libraries

2000-08-03 Thread Sunil K. Vallamkonda
Hello, I am trying to install: openssh-2.1.1p4 For configure: I am giving --with-ssl-dir=PATH correctly, but configure script gives error: "configure: error: Could not find working SSLeay / OpenSSL libraries, please install " Any suggestions ? Thx. Sunil. __

Re: How server can get client certificate?

2000-08-03 Thread Peter Kim
I'm moving this to openssl-users mailing list. Does your server even ask for a client certificate? I mean... did you set the verify mode to SSL_VERIFY_PEER?  If you haven't done so, your server is not client-authenticated, which means it won't even ask for a client certificate.  The def

Simple nonblocking client produces SSL_R_UNINITIALIZED

2000-08-03 Thread David B
I'm trying to add nonblocking https client-side retrieval to my application. I'm getting an SSL_ERROR_SSL when I run it, after calling SSL_write() for the first time, when the handshake needs to occur. The error queue provides reason 276: SSL_R_UNINITIALIZED (see ssl_lib.c:733), because handsh

RE: Bugs and Crashes

2000-08-03 Thread Bill Rebey
Chris, Did you get my updated test code yesterday? Does it look like I've got all the programming errors out of the test code itself? __ OpenSSL Project http://www.openssl.org User Support Mailin

RE: Wie kann man aus einem Publik Key ein Certifikat machen.

2000-08-03 Thread Gabriel, Akos /ECF
> -Original Message- > From: Merton Campbell Crockett [mailto:[EMAIL PROTECTED]] > All he was asking was how to generate a certificate. And the short answer is RTFM. Regards, Akos __ OpenSSL Project

Re: Stupid Question

2000-08-03 Thread Douglas Wikström
hello. > since I am tired of wandering through the sources without directions: > Can someone tell me how I cat get just the CN of the subject of a certificate > in a verify-callback. (And no I don't want to use the X509_NAME_online and > the fiddle in that string unless it is the only option, whi

Re: Simple nonblocking client produces SSL_R_UNINITIALIZED

2000-08-03 Thread David B
Thanks for the attempt -- but it was a typo in the message -- my source code does properly use ||. Any other ideas? Thanks, David At 09:44 AM 8/3/00 -0700, you wrote: >Didn't look carefully enough, so I'm not sure if I hit anything useful, but >I found something that looks like a typo. > > > i

Re: Wie kann man aus einem Publik Key ein Certifikat machen.

2000-08-03 Thread Craig Shaver
Or run it through a translator like the one at http://translator.go.com/ -- :) Merton Campbell Crockett wrote: > > On Thu, 3 Aug 2000, Angelo Nardone wrote: > > > WHAT > > Not everyone speaks or writes English. Instead of rudely screaming, you > might have tried reading the message and p

Re: Simple nonblocking client produces SSL_R_UNINITIALIZED

2000-08-03 Thread Peter Kim
Didn't look carefully enough, so I'm not sure if I hit anything useful, but I found something that looks like a typo. > if ((!SSL_CTX_load_verify_locations(_contextPtr, _caFilePtr, _caFilePathPtr)) | > (!SSL_CTX_set_default_verify_paths(_contextPtr))) '|' should probably be '||'. -

RE: Wie kann man aus einem Publik Key ein Certifikat machen.

2000-08-03 Thread Merton Campbell Crockett
On Thu, 3 Aug 2000, Angelo Nardone wrote: > WHAT Not everyone speaks or writes English. Instead of rudely screaming, you might have tried reading the message and providing an answer. There are enough cognates in the text that you should have been able to read it without difficulty and wit

Testing on Windows

2000-08-03 Thread Bill Rebey
According to the test script 'test.bat', my Windows NT 4.0 code is broken. I have two Windows builds - one with MSVC, and the other with Borland C++. Both of these builds fail running 'randtest', 'dhtest', 'exptest', 'dsatest', and the tests that use 'openssl.exe' to do their work. I get zero in

RE: Wie kann man aus einem Publik Key ein Certifikat machen.

2000-08-03 Thread Angelo Nardone
WHAT -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Emre A. Binisik Sent: Thursday, August 03, 2000 12:44 PM To: [EMAIL PROTECTED] Subject: Wie kann man aus einem Publik Key ein Certifikat machen. Liebe Leute, ich versuche aus einen public key ein

Stupid Question

2000-08-03 Thread Konstantin Agouros
Hi, since I am tired of wandering through the sources without directions: Can someone tell me how I cat get just the CN of the subject of a certificate in a verify-callback. (And no I don't want to use the X509_NAME_online and the fiddle in that string unless it is the only option, which I don't

Re: How to generate a certificate out of a public key

2000-08-03 Thread Michael H. Warfield
On Thu, Aug 03, 2000 at 04:46:57PM +, Emre A. Binisik wrote: > I'm realy not informed about the openssl syntax. > Can somebody tell me how to generate > a certifikate out of a public key. If you look under "Contributed" on the OpenSSL web site you will find a package of scripts:

How to generate a certificate out of a public key

2000-08-03 Thread Emre A. Binisik
I'm realy not informed about the openssl syntax. Can somebody tell me how to generate a certifikate out of a public key. Best Regards Emre Binisik __ OpenSSL Project http://www.openssl.org User

Wie kann man aus einem Publik Key ein Certifikat machen.

2000-08-03 Thread Emre A. Binisik
Liebe Leute, ich versuche aus einen public key ein certifikat zu machen wie geht das?? Gruss Emre -- Dipl.-Math.KOBIL Systems GmbH Emre A. Binisik Weinsheimer Strasse 71 Software Engineer D-67547 Worms IT Security Germany

RE: Newby Connection Questions

2000-08-03 Thread JOSE . CARLOS
I already made the conversion from PEM to DER for the CA certificate and imported it in IE and Netscape. Using the same personal certificate (both browsers), when I connect to Apache it works, but when I try to connect it to IIS I do not see it in the list (but certificate is installed in th

How server can get client certificate?

2000-08-03 Thread techinfo
Hi:    Our client have get the server's certificate. But the server can't to get the client's certificate. (client have a correct certificate) Why? How to do? We need your help!       Best Regards!   TechInfo Group    

Re: Newby Connection Questions

2000-08-03 Thread Carlos Serrao
If they are personal certificates they shoud appear on the browser and not in the server. You have to take care, since certificates for IE are different from those of Netscape (the format is different I mean). NN accepts certificates in PEM format while IE deals with DER for instance. You have t

Newby Connection Questions

2000-08-03 Thread JOSE . CARLOS
Hi I have a CA based on OpenSSL that I use to generate personal certificates to connect to Apache will SSL and IIS (Internet Information Server). When I connect to Apache I have no problems. I installed the CA certificate in Apache and I can connect with the generated certificates. The prob

Mac OS X DR 4

2000-08-03 Thread Michael Tuexen
Dear opensslers, has someone compiled openssl compiled on MacOS X DR 4? Best regards Michael -- e-mail: [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List

R: Certs for OutlookExpress and IE

2000-08-03 Thread Stefano Bergamasco
Here's a piece of a script I use to generate pkcs12 files for usage with Netscape and MSIE; hope this can help: echo "Step 1: Key generation" $basedir/openssl req -new -nodes -keyout $certsdir/newreq.pem -out $certsdir/newreq.pem -config $baseCAdir/KEYpretest.cnf echo echo "Step 2: Public key ce

Ang: Re: Extracting public key

2000-08-03 Thread Atle Sandvold
Well, you got me there, it was dumpasn1 and not asn1parse. Sorry. Anyway, I tried the same at work today, and the dump gave me the desired result. I'm not sure what made it work, but I suspect it had something to with a base64 decoder at home. When I'm not using a decoder, it works great. Also

R: Certs for OutlookExpress and IE

2000-08-03 Thread Rosario Riccio
-Messaggio originale- Da: Peter Kim <[EMAIL PROTECTED]> A: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Data: mercoledì 2 agosto 2000 22.02 Oggetto: Fw: Certs for OutlookExpress and IE >So, to answer your question directly, you can use openssl to create a certificate >in PEM format, for exampl

[Perl] Callback in Net::SSLeay?

2000-08-03 Thread em
Hi, I am writing a client which would do https upload to a secure server using Net::SSLeay. However, I am not sure how to make sure I have connected to the authentic server (not a trojan one in the middle). I have looked in the callback.pl in the example directory but I don't think it is do