Re: certificate chaos...

2000-10-27 Thread Dr S N Henson
Michael Dingler wrote: > > > You need to do... > > > > openssl pkcs12 -in xxx.p12 -clcerts -out xxx.pem > > > > to only extract client certificates and possibly > > > > openssl pkcs12 -in xxx.p12 -cacerts -nokeys -out cas.pem > > > > to extract CA certificates. > > Oh thanks, that did it. With j

IIS client authentication?

2000-10-27 Thread Steve Wang
Hi, all, One question for a case where strong CLIENT authentication is needed: we use open ssl on client side and use Microsoft IIS on the server side. How will the Microsoft IIS check the validity of the client certificate? Will it need to validate the whole certificate chain? Is it configurab

cannot open -lcrypto: No such file or directory

2000-10-27 Thread sun
hello!   I had installed openssl-0.9.6 and freeswan-1.5 . The Makefile of pluto like this:   OPENSSLROOT=/usr/libOPENSSLINCLS=OPENSSLLIBS= -lcryptoOPENSSLDEFS=-DOPENSSL   When I am compiling the freeswan-1.5   the error like this:   gcc -o pluto  connections.o constants.o cooki

Re: How to let gcc know the path of the OpenSSL include file

2000-10-27 Thread Jim Grimmett
From: "Wei Qu" <[EMAIL PROTECTED]> > > Hi, all: > > I am just start learning OpenSSL and I have just > download the OpenSSL and installed it on a > Linux(Redhat 6.0) box. The openssl is installed in the > default directory (/usr/local/ssl). > > But it seems that the compiler can not find the >

Openssl0.9.4/Net::SSLeay1.05/NT4 and test-errors

2000-10-27 Thread to
I have got two errors during test in Net::SSLeay 1.05. One: is error 21 in handshake RSA with www.rsa.com and two: is a message about that the there have been no seed provided to the randomizer. I guess im trying to place this question to someone more experienced... Everything else is realy work