RE: Problem with root cert on web page.

2000-08-13 Thread Benny Chandra
Ooops, sorry, I just didn't notice the option 'Open file from original location'. For more information on setup Client Certificate in IE you can view KB from microsoft, here is the URL: http://support.microsoft.com/support/kb/articles/Q218/4/45.ASP This page is for Certificate server and IIS4, but

personal certificate

2000-08-13 Thread Pinca George
Hello world, I got a verisign Class 1 personal 60 days tryal certificate instaled in Explorer. I can see it under 'Personal' certificates. It verifies ok. But still, when I want to authorize myself to a SSL web server which asks for client authorization, the certificate is not displayed in t

Re: SOCKS

2000-08-13 Thread Richard Levitte - VMS Whacker
From: "Scott Schenkein" <[EMAIL PROTECTED]> Are you talking about the s_client utility or the OpenSSL libraries? There's no direct proxy support at all in OpenSSL, but if you're using the OpenSSL libraries, you can add your own proxying filter as you see fit. schenksj> Sorry I didn't specify...

Re: Problem with root cert on web page.

2000-08-13 Thread Rodrigo Coronado
No my friend, I mean exactly the opposite thing. I don't know ASP at all, but I'd figure your code is well. At least it seems quite similar to my Perl code (which I posted a few days ago). Anyway, the server side is ok. Now when IE receives the file with the certificata, it asks "What do you wan

RE: Problem with root cert on web page.

2000-08-13 Thread Benny Chandra
So you mean save the file to disk then open in from explorer? Here is my code in ASP for sending the cert to IE: <% 'Finding root cert strScriptPath = Request.ServerVariables("PATH_TRANSLATED") strPathOnly = Left(strScriptPath, InStrRev(strScriptPath, "\")) strRoo

Re: Problem with root cert on web page.

2000-08-13 Thread Rodrigo Coronado
Hi Benny. It was an error. I have IE 5.0 of course. And I did it again just a few minutes ago from IE 4.0. After that dialog box try "opening the file from...bla bla". Rodrigo. Benny Chandra wrote: I think the latest version of IE is 5.5? How can you get IE 5.9, or it is not for PC?. I try

RE: Problem with root cert on web page.

2000-08-13 Thread Benny Chandra
I think the latest version of IE is 5.5? How can you get IE 5.9, or it is not for PC?. I try sending MIME header application//x-x509-ca-cert in IE 5.01 and it open save dialog box instead intalling those certificate. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTE

Re: SOCKS

2000-08-13 Thread Scott Schenkein
Sorry I didn't specify... I mean client communicaiton... - Original Message - From: "Scott Schenkein" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, August 13, 2000 11:07 PM Subject: SOCKS > Hello All, > > Is there a way to get openssl to communicate over sockets through a s

SOCKS

2000-08-13 Thread Scott Schenkein
Hello All, Is there a way to get openssl to communicate over sockets through a socks proxy server??? Please respond directly to me, as well as to the list. Scott Schenkein --- Owner, Virtual Imagery Design Group __

RE: help! problem with certificate!!

2000-08-13 Thread Benny Chandra
How about if in Verify box I see, Verification failed: Not certified for email? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Vlasta Joskova Sent: 12 Agustus 2000 20:53 To: [EMAIL PROTECTED] Subject: Re: help! problem with certificate!! Have you set you

Re: 128bit security

2000-08-13 Thread Andrew Hooper
Silly me, Yes that was the problem, my version of IE5 was the 40bit version :(. Got it sorted now, and it works to :) Regards Andrew - Original Message - From: Theodore Hope <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, August 14, 2000 6:41 AM Subject:

Re: A multi-thread BUG of Openssl?

2000-08-13 Thread Dr Stephen Henson
> Yanbing wrote: > > All thread should use ONE ssl ctx?!! You mean in one process only ONE > ssl_ctx can exist? Multiple SSL_CTX can exist in a process though some multithreaded applications have one SSL_CTX. They typically have SSL structures in each thread obtained from the single SSL_CTX. St

Re: decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread Dr Stephen Henson
Dr Stephen Henson wrote: > > > Interesting. Could you send me an example? I'll see if I can find out > what it is and (hopefully) add support to OpenSSL. > Scrub that request. If its just the base64 encoded opaque signing I've seen one of those before. I was thinking it might do something like

Re: decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread Dr Stephen Henson
ukoeppe wrote: > > From: Dr Stephen Henson <[EMAIL PROTECTED]> > > Well IE5 doesn't handle email so I presume you mean something like > > Outlook or Outlook express. > > Right > > > > > What do you mean by "undecipherable code"? > > > > Is it just binary gibberish or does it look like a base64

Re: decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread Dr Stephen Henson
ukoeppe wrote: > > > I've seen similar things with messages sent with outlook. I have a > > very quick look, and it seems like there's smoe extra embedding in a > > PKCS7 packet of some sort, and I didn't find a way to extract the > > message that was apparently in there with openssl, at least i

Re: decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread ukoeppe
From: Dr Stephen Henson <[EMAIL PROTECTED]> > Well IE5 doesn't handle email so I presume you mean something like > Outlook or Outlook express. Right > > What do you mean by "undecipherable code"? > > Is it just binary gibberish or does it look like a base64 encoded > messsage? You're right of c

Re: A multi-thread BUG of Openssl?

2000-08-13 Thread Yanbing
All thread should use ONE ssl ctx?!! You mean in one process only ONE ssl_ctx can exist? Gott, I have totally wrong understood. Is there any multi-thread example?   Many Thanks you for your help, steve. Without that I have no chance to know this trick.     Zhang

Re: decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread Dr Stephen Henson
ukoeppe wrote: > > Hi, I got a problem with ie5 which makes me a little nervous. I can encrypt > and sign messages and send them to someone with an IE5 (verisign key on the > other side), my own key and cert are homemade with openssl. No problem. > Well IE5 doesn't handle email so I presume you

Re: decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread ukoeppe
> I've seen similar things with messages sent with outlook. I have a > very quick look, and it seems like there's smoe extra embedding in a > PKCS7 packet of some sort, and I didn't find a way to extract the > message that was apparently in there with openssl, at least in the > couple of minutes

Re: decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread Richard Levitte - VMS Whacker
From: "ukoeppe" <[EMAIL PROTECTED]> ukoeppe> But if the other party answers with an encrypted and signed ukoeppe> message using IE5 and I decrypt the message with openssl I ukoeppe> just get some undecipherable code as output (no error ukoeppe> message). If the message in IE5 was only encrypted

decrypting signed and encrypted messages sent by ie5

2000-08-13 Thread ukoeppe
Hi, I got a problem with ie5 which makes me a little nervous. I can encrypt and sign messages and send them to someone with an IE5 (verisign key on the other side), my own key and cert are homemade with openssl. No problem. But if the other party answers with an encrypted and signed message using

Re: 128bit security

2000-08-13 Thread Theodore Hope
> I seem to only be getting 40bit, this is governed by the certificate and > not the > compiled version of openssl or apache that im using? > > I generated a test certificate from Thawte and installed it and > requested > a 128bit certificate but still only get 40bit connection, or am i > bark

Re: thawte data

2000-08-13 Thread Theodore Hope
Richard, > Out of curiosity, why would it be important to make sure the RSA key > is password-protected here: > > ssl> * Generate the RSA keys into a password-protected file, > ssl> using some file as random data seed. > ssl> Make sure you remember the "PEM pass phrase" used to > ssl> prot