generating a certificate chain in pkcs7 format using OpenSSL?

2000-09-18 Thread Kimberly Palko
Does anyone know how to generate a certificate chain in pkcs7 form using OpenSSL? thanks, Kim __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED

converting raw signature to PKCS#7 format

2000-09-18 Thread Vivek Dasgupta
Hi I have a library which signs data on a smart card and returns 128 bytes signature. Now the problem is how to convert it into PKCS#7 so that it can be verified by a PKCS#7 compliant verify tool. Is there any utility which can convert raw signature to a PKCS#7 object. The platform on which

Make Ends Meet

2000-09-18 Thread scott112
Subject: Invest $25 to get $500,000 in every 4 to 5 months!! Dear Friend: AS SEEN ON NATIONAL TV : ''Making over half million dollars every 4 to 5 months from your home for an investment of only $25 U.S. Dollars expense one time'' THANX TO THE CO

Re: Verify signature of a multipart message

2000-09-18 Thread Dr S N Henson
Angus Lee wrote: > > >= Original Message From [EMAIL PROTECTED] = > >Ugh. I checked OpenSSL (Netscape?) 4.73 too and it does the same. The cause > is that > >Netscape isn't properly excluding the content. It is including a zero > >length content. This is a recent addition to Netscape and

openSSL library help

2000-09-18 Thread Putz Doug
Help, It seems to me after looking throught the openSSL library code and most of the examples provided(and the email archives), that most of the support in this library is geared towards the server side of the SSL mechanism. What I need help in, seems to me to be a very simple yet common task.

Re: MVS ports

2000-09-18 Thread Gregory Nicholls
Hiya, What version of OS/390 are you talking about ??? I'm about to start a port of OpenSSL to OS/390 V2R8 that will run under MVS. If you want the Unix subsystem, it's already available (I think). G. Simone Ventola wrote: > Hello, > I'm looking for a standard and free cryptographi

RE: Verify signature of a multipart message

2000-09-18 Thread Angus Lee
>= Original Message From [EMAIL PROTECTED] = >Ugh. I checked OpenSSL (Netscape?) 4.73 too and it does the same. The cause is that >Netscape isn't properly excluding the content. It is including a zero >length content. This is a recent addition to Netscape and is a bug. >I'll see if I can

Re: Problem compiling openssl engine beta2 on NT

2000-09-18 Thread Jeffrey Altman
Try replacing LMSTR with LPWSTR in crypto/rand/rand_win.c > I tried to compile on a Win32 platforom openssl engine beta2, and the > OpenSSL beta2, and I recieve in both case this error: > > cl /Fotmp32dll\rand_win.obj -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 /Ob2 > /Gs0 /GF /Gy /nologo -DWI

Re: MVS ports

2000-09-18 Thread Douglas Wikström
Please turn off your reciept requesting "feature" of your mail client. /Douglas Simone Ventola wrote: > > Hello, > I'm looking for a standard and free cryptographic library (like > SSLeay, and OpenSSL of course) which can be easily compiled and linked > to applications on IBM MVS - OS/390 machi

MVS ports

2000-09-18 Thread Simone Ventola
Hello, I'm looking for a standard and free cryptographic library (like SSLeay, and OpenSSL of course) which can be easily compiled and linked to applications on IBM MVS - OS/390 machines. Please, help me! (^_^) Thanks in advance, see you soon, Simone --

RE: Apps over SSL

2000-09-18 Thread Mark H. Wood
On Fri, 15 Sep 2000, Soul Fire wrote: > Thanks for the direction. I know that openssh would replace the need for > telnet right off the bat but does it allow for other apps to ride over > the encrypted stream as well? OpenSSH automagically sets up a tunnel for the X Window protocol, and I've also

Error code 0D067007

2000-09-18 Thread Stephen Clark
Hi I'm new to openssl having just implemented Apache 1.3.9 and openssl 0.9.4. Everything was fine until I installed the certificate from Verisign (via BT Trustwise). We are now getting the following errors: [Mon Sep 18 13:21:02 2000] [error] mod_ssl: SSL handshake failed (OpenSSL library error

Re: OpenSSL version 0.9.6 Beta 2 (problems with Win 98)

2000-09-18 Thread ukoeppe
- Original Message - From: Jeffrey Altman <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, September 18, 2000 1:08 PM Subject: Re: OpenSSL version 0.9.6 Beta 2 (problems with Win 98) > Initialize the function pointers acquire, gen, release, netstatget, >

Problem compiling openssl engine beta2 on NT

2000-09-18 Thread Eric Korsia
I tried to compile on a Win32 platforom openssl engine beta2, and the OpenSSL beta2, and I recieve in both case this error: cl /Fotmp32dll\rand_win.obj -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DWIN32 -DWIN3 2_LEAN_AND_MEAN -DL_ENDIAN /Fdout32dll /GD -D_WINDLL -D_DLL

Re: Verify signature of a multipart message

2000-09-18 Thread Dr S N Henson
Angus Lee wrote: > > > b4dec.txt is the original signed and encrypted message, while afterdec.txt is > what I got after decryption. cityuca.pem is the CA certificate of the signer. > OK. I've included a work around to the dev version of OpenSSL. It will be in OpenSSL 0.9.6. If you want to fix

Re: Problem: Adding certificate and private key to IIS 5.0

2000-09-18 Thread Thomas Christmann
>Hi, >AFAIK, if you have generated the private key and CSR using IIS 4.0 supplied tool, >then the certificate and >private key will be in NET format. For details of extracting the key from IIS backup >file and converting to PEM >format look for the messages with subject "Using openssl to ge

Re: Verify signature of a multipart message

2000-09-18 Thread Dr S N Henson
Angus Lee wrote: > > >= Original Message From [EMAIL PROTECTED] = > > > I could use OpenSSL to decrypt this signed and encrypted message. Then > when I > > > verify the digital signature, OpenSSL told me that 'content and data > present'. > > > Is there anything wrong with my code? > > Ca

Re: Does anybody launches ssl aware apache under WIN32 correctly?

2000-09-18 Thread ApacheSSL
> Your log suggests that the terminal(the application window) is waiting > for a passphrase to decrypt the private key. > Enter there the passphrase that you entered when you generated the > certifcate request/private key. > Amit. First thank you for your answer, Amit The Apache log confused m

Re: OpenSSL version 0.9.6 Beta 2 (problems with Win 98)

2000-09-18 Thread Jeffrey Altman
Initialize the function pointers acquire, gen, release, netstatget, netfree to 0. > > Error-detail on desktop > - > OPENSSL verursachte einen Fehler durch eine ungültige Seite > in Modul bei :0095a5d5. > Register: > EAX=0072f166 CS=017f EIP=0095a5d5 EFLGS=00010216 > EBX=0095a5d0 SS=0187

Re: Does anybody launches ssl aware apache under WIN32 correctly?

2000-09-18 Thread Amit Chopra
> [18/Sep/2000 14:03:55 00864] [info] Init: Loading certificate & private key of >SSL-aware server tjww.adaptview.com:443 > [18/Sep/2000 14:03:55 00864] [info] Init: Requesting pass phrase via builtin >terminal dialog Your log suggests that the terminal(the application window) is waiting for

Re: Problem: Adding certificate and private key to IIS 5.0

2000-09-18 Thread Mandar Behere
Hi, AFAIK, if you have generated the private key and CSR using IIS 4.0 supplied tool, then the certificate and private key will be in NET format. For details of extracting the key from IIS backup file and converting to PEM format look for the messages with subject "Using openssl to generate

OpenSSL version 0.9.6 Beta 2 (problems with Win 98)

2000-09-18 Thread ukoeppe
I got a little bit of problem with the new beta 2 under Windows 98. The following line causes a program error: openssl req -x509 -newkey rsa:512 -keyout key.pem -out cer.pem I compiled it with Borland 5.5, since I don't have an assembler I turned off the "readtimer" function in rand_win.c . (Wh

Re: Problem: Adding certificate and private key to IIS 5.0

2000-09-18 Thread Thomas Christmann
First, thank you for your answer. You wrote: >Both, the key and certificate _SHOULD_ be in PEM format >refer to http://www.openssl.org/docs/apps/pkcs12.html# for details. Oh right, sorry, I didn't see it, but it says so on the site. Now, how can I "encode" the files to the .pem format? Is .pem

openssh dsa_verify still fails with openssl-0.9.6-beta2

2000-09-18 Thread Graham Murray
The dsa_verify failure for server_host_key which was seen in beta1 is still present in beta2. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED]