How to use the EVP_CIPHER functions...

2000-11-13 Thread suram
Hi  everyone,   I have figured out how to perform the DES cryption using the DES functions.  But I want to know how to do the same using the EVP_CIPHER routines.  It is given in the documentation that "The EVP cipher routines are a high level interface to certain symmetric ciphers." Can any o

Re: Licencing issues

2000-11-13 Thread Ulf Moeller
On Tue, Nov 14, 2000, Ulf Moeller wrote: > OpenSSL is part of all major free operating systems and one or two commercial > ones. You can use it on those systems, thanks to a special clause in the > GPL. If you want to use it on any other systems, you'll have to change your > license. Sorry. I f

Re: Licencing issues

2000-11-13 Thread George Staikos
On Monday 13 November 2000 23:54, Ulf Moeller wrote: > > other people must be in this situation too, probably unknowingly. We > > have to resolve this, and if what we are doing is not allowed, it should > > probably be documented in the OpenSSL documentation. > > As far as the OpenSSL team is co

Re: Licencing issues

2000-11-13 Thread Ulf Moeller
On Mon, Nov 13, 2000, George Staikos wrote: > other people must be in this situation too, probably unknowingly. We have to > resolve this, and if what we are doing is not allowed, it should probably be > documented in the OpenSSL documentation. As far as the OpenSSL team is concerned, everybo

Re: Licencing issues

2000-11-13 Thread Michael T. Babcock
George Staikos wrote: > I see you cc:'d to me, but not to Ulf. Those were his words, not mine. No > problem though. Calling it obnoxious is not slandering. It's an opinion and > definitely a criticism. However, this is not the issue here so we can put > that to rest. I did a "Reply to all

Re: Licencing issues

2000-11-13 Thread George Staikos
[I am not speaking for the KDE team as a whole, but for myself as author of the C++ SSL wrapper and utility classes for KDE 2.0] On Monday 13 November 2000 20:22, Michael T. Babcock wrote: > Ulf Moeller wrote: > > On Mon, Nov 13, 2000, George Staikos wrote: > > > (I have emails here if you ne

Re: Licencing issues

2000-11-13 Thread Michael T. Babcock
Ulf Moeller wrote: > On Mon, Nov 13, 2000, George Staikos wrote: > > > (I have emails here if you need to see these) Anyhow, is there > > any chance of OpenSSL being released under GPL, or failing that, under a BSD > > style licence without the advertising clause? > > The original authors now

error in make test

2000-11-13 Thread Alexis Bilodeau
Hi, I'd want to know how to generate a non-dummy certificate? I need a secure section on my site, for administrative purpose. Do I have to contact a CA or can I generate a certificate myself? Thanks, -- Alexis Bilodeau --- eMagiK Technologies Tél. 819.371.9273 Fax 819.372.9866

Re: Licencing issues

2000-11-13 Thread George Staikos
On Monday 13 November 2000 18:35, Ulf Moeller wrote: > On Mon, Nov 13, 2000, George Staikos wrote: > > (I have emails here if you need to see these) Anyhow, is there > > any chance of OpenSSL being released under GPL, or failing that, under a > > BSD style licence without the advertising clause

Re: Licencing issues

2000-11-13 Thread Ulf Moeller
On Mon, Nov 13, 2000, George Staikos wrote: > (I have emails here if you need to see these) Anyhow, is there > any chance of OpenSSL being released under GPL, or failing that, under a BSD > style licence without the advertising clause? The original authors now work for a company that sells

Re: compiling openssl

2000-11-13 Thread Paul Allen
Richard Levitte - VMS Whacker wrote: > > eoliva> Hi, if I'm in Mexico, how do i compile openssl without RSAREF? > > Do the following, and it should work for you, I think: > >./config >make >make test >make install > > Basically, that's the really short version of what's written

Re: HTTP/HTTPS

2000-11-13 Thread Eric Rescorla
Carlos Vicente <[EMAIL PROTECTED]> writes: > Thanks again. > Another question: > Why woudn't a browser complain about a certificate with "*" as CN? > Aren't they supposed to compare the CN with the server's name? * is a wildcard. -Ekr -- [Eric Rescorla [EMAIL

Licencing issues

2000-11-13 Thread George Staikos
Hello, The KDE project as of version 2.0 now uses OpenSSL for the builtin webbrowser, and soon for pop3, ftp, smtp and maybe other services too. However, we have been receiving many complaints about using OpenSSL because apparently the FSF is telling everyone that it's illegal to use

Re: accessing certificate from memory

2000-11-13 Thread Stig Venaas
On Mon, Nov 13, 2000 at 10:49:29PM +, Dr S N Henson wrote: > Depends on what you mean by "in memory" if its PEM format in memory you > can use a memory BIO (see BIO_s_mem() manual page) if its in DER form > then you can use the d2i_X509() function directly (see FAQ for info). Ah, I see, BIO_s

Re: Crypt::SSLeay

2000-11-13 Thread Joshua Chamas
Tobias Manthey wrote: > > Hi Joshua, > > I sent you 2 kind of patches to enhance Crypt::SSLeay for Proxy and > Client-Cert Support. Could you give me a short update on this? I was thinking > about releasing the patch in the next couple of days announcing it on the LWP > and Open-SSL user list. L

Re: accessing certificate from memory

2000-11-13 Thread Dr S N Henson
Stig Venaas wrote: > > Hi > > I've figured how to read certificates from a file using > PEM_read_X509() but how can I access certificates already > in memory? I guess I could borrow code from the internals > of PEM_ASN1_read_bio(), but I'm hoping for a better way, > not depending on too many low

Re: OpenSSL 0.9.6 Install Problem

2000-11-13 Thread Glen Batchelor
Never mind.. I installed Perl 5.6 and had no problems installing the package. Ryengoth Glen Batchelor wrote: > I'm running Red Hat 5.1 and have run into a Perl install issue, I > think. Can anyone shed some > light on this? The src compiled and tested fine.. All the install > response

accessing certificate from memory

2000-11-13 Thread Stig Venaas
Hi I've figured how to read certificates from a file using PEM_read_X509() but how can I access certificates already in memory? I guess I could borrow code from the internals of PEM_ASN1_read_bio(), but I'm hoping for a better way, not depending on too many low level internals. Stig

SSL on OAS.

2000-11-13 Thread Ricardo Santos Quintero
Hi. I have a big problem setting up Oracle Application Server to use SSL. I have been able to setup a apache webserver with SSL. Of course I'm trying whith OpenSSL. I hope somebody could show me a way... I have Oracle Application Server 4.0.8 on AIX 4.3.3, it's running fine, but I w

mm ? openssl ? or modssl ? 101

2000-11-13 Thread Zandi Patrick S TSgt AFRL/IFOSS
After installing everything under the sun.. I test the ssl, with the following line, and this is what I get... anyone see this one before.. ?? Where to go next ?? \ ./httpd -dssl Ouch! ap_mm_create(1048576, "ssl/logs/httpd.mm.2752") failed Error: MM: mm:core: failed to ope

OpenSSL 0.9.6 Install Problem

2000-11-13 Thread Glen Batchelor
I'm running Red Hat 5.1 and have run into a Perl install issue, I think. Can anyone shed some light on this? The src compiled and tested fine.. All the install responses say "there's nothing to do" and then I get screen after screen of this: /Basename.pm line 175, near "/(.*[:\/])?(.*)/t" (M

Re: Crypt::SSLeay

2000-11-13 Thread Tobias Manthey
Hi Joshua, I sent you 2 kind of patches to enhance Crypt::SSLeay for Proxy and Client-Cert Support. Could you give me a short update on this? I was thinking about releasing the patch in the next couple of days announcing it on the LWP and Open-SSL user list. Let me now if this is not in your mind

Re: Expired Certificate in CRL

2000-11-13 Thread Massimiliano Pala
Michael Sierchio wrote: > > Tridib Saha wrote: > > > > Hi everybody, > > > > Could you please help me? > > My problem is following: > > > > 1. I am using OpesSSL to generate certificate and CRL. > >All revoked certificates will appear in CRL. > > 2. After the validity period of the revoked ce

RE: Simple Working Client/Server?

2000-11-13 Thread Wade L. Scholine
My guess is that you have a bad client cert. -Original Message- From: Matt Wright [mailto:[EMAIL PROTECTED]] Sent: Friday, November 10, 2000 1:43 PM To: [EMAIL PROTECTED] Subject: Simple Working Client/Server? As a complete novice to SSL, I was hoping someone could send me a minimal wor

Re: HTTP/HTTPS

2000-11-13 Thread Carlos Vicente
Thanks again. Another question: Why woudn't a browser complain about a certificate with "*" as CN? Aren't they supposed to compare the CN with the server's name? Eric Rescorla wrote: >There are two main approaches: >1. Use the CONNECT method, as you suggest. You tell the browser that >it is to