Self-signed root certificate

Hello, On a server that I support there are three SSL certificate related files. One of them I'm trying to understand the need for and how it relates to self signed CA's that I generate for testing using Openssl. The three files have explanations for them in the documentation as follows: ca.pem

Re: Serious Bug in ssl3_get_record

Bodo Moeller wrote: > On Thu, Sep 14, 2000 at 10:52:29AM +0800, Fung wrote: > >>> Have you tried using the SSLv23_method() instead of the SSLv3_method()? > >> But I know SSLv23_method has bugs at this version 0.9.5a. > > Can you elaborate? I think what he meant is that in some cases SSLv23_metho

Re: SSLv2_method and SSLv23_method

On Fri, Sep 15, 2000 at 09:22:24AM +0800, Michael Lee wrote: > Bodo Moeller wrote: >> Note that SSLv2_method will fail for some servers because they >> no longer support SSL 2.0 (and stopping to support it is a good >> thing because of its deficiencies). I suggest using >> SSLv23_method without

Re: SSLv2_method and SSLv23_method

Bodo Moeller wrote: > Note that SSLv2_method will fail for some servers because they > no longer support SSL 2.0 (and stopping to support it is a good > thing because of its deficiencies). I suggest using > SSLv23_method without SSL_OP_NO_TLSv1 in a first connection attempt; > if this fails, try

Re: content and data present

Sean Walker wrote: > > I'm working with some data generated by a program that I have no control > over. I am trying to verify a pkcs7 signature generated by it. Could someone > take a look at the data I have and tell me what utilities I should use to > accomplish this? I've never had to deal with

SSL23_Get_Server_Hello - Unknown protocol

Hi! I'm having an interesting problem porting some code from an NT box to Solaris. I get the following error while trying to connect my client to the server: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol Func: SSL23_GET_SERVER_HELLO lib: SSL routines Reason: unknown

content and data present

I'm working with some data generated by a program that I have no control over. I am trying to verify a pkcs7 signature generated by it. Could someone take a look at the data I have and tell me what utilities I should use to accomplish this? I've never had to deal with this type of data before. The

Re: make test failed on IA-64 machine

I'm not sure what help this might be, but I had similar results using the "gcc" compiler on 32 bit hpux. I needed to remove the compiler optimization flag to get it to pass the bn test suite. Al Borr - Original Message - From: Norman Nie <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Se

make test failed on IA-64 machine

Hi there, I was compiling a 64-bit OpenSSL(0.9.5a) with BSAFE Crypto-C on a IA-64 machine running HPUX. I used a patch file supplied by Mark Bixby that enables OpenSSL to call BSAFE Crypto-C funtions. The compilation went on fine, no errors. But when I do a make test, it failed on the BN_mod_m

Re: Import Export Restrictions

> If I am using SSL 128 Bit Encryption considered "retail" encryption by the > federal government? > We desire to use it in an application where encrypted data is transported > from a ASP in the USA to Mexico and back, however we are unsure of the legal > implications can you please help or send

Import Export Restrictions

If I am using SSL 128 Bit Encryption considered "retail" encryption by the federal government? We desire to use it in an application where encrypted data is transported from a ASP in the USA to Mexico and back, however we are unsure of the legal implications can you please help or send us to some

Using block device

Hi I've installed OpenSSL, and I want to use "/dev/random" device as source of unpredictable data. But "/dev/random" is a blocking device source. Can I configure OpenSSL to work with a blocking device source ? I'm using : OpenSSL 0.9.5 Solaris SunOS 5.8 Thanks for all.

Re: Memory leak in SSL_CTX_new / SSL_CTX_free thru a call to CRYPTO_get_ex_new_index()

From: "Martin Skinner" <[EMAIL PROTECTED]> N8Schwaermer> Thank you for the informative answer. YW N8Schwaermer> Since MS VC++ and boundschecker notices these leaks, it N8Schwaermer> would be nice to have a "cleanup" routine which could be N8Schwaermer> called at the end of the app. I've been t

Re: Memory leak in SSL_CTX_new / SSL_CTX_free thru a call to CRYPTO_get_ex_new_index()

Thank you for the informative answer. Since MS VC++ and boundschecker notices these leaks, it would be nice to have a "cleanup" routine which could be called at the end of the app. - Martin - Original Message - From: "Richard Levitte - VMS Whacker" <[EMAIL PROTECTED]> To: <[EMAIL PROTEC

Re: Stunnel not flushing data (fix ???)

> "Ben" == Ben Laurie <[EMAIL PROTECTED]> writes: Ben> [EMAIL PROTECTED] wrote: >> > See my state_machine demo for a main loop that should work... if >> > it doesn't, I'd like to know about it... >> >> Which is where? Couldn't find it in OpenSSL-0.9.5a. Ben> Its in the snapshots, and in 0.9.

Re: Another confusing compile-time error

From: "Watson, Scott E" <[EMAIL PROTECTED]> scott.watson> > make install scott.watson> scott.watson> I get the following results: [...] scott.watson> making all in tools... scott.watson> Cannot create directory /usr/local/ssl: Permission denied scott.watson> *** Error code 13 scott.watson> make:

Re: openssh 2.2.0p1 fails with openssl 0.9.6-beta1

From: Lutz Jaenicke <[EMAIL PROTECTED]> Lutz.Jaenicke> I did some more experiments and also saw the problems. Lutz.Jaenicke> Lutz.Jaenicke> They occur when using a 0.9.6-beta client to connect to Lutz.Jaenicke> 0.9.5a and 0.9.6-beta servers. Lutz.Jaenicke> They also occur when using a 0.9.5a cli