handling non-block sockets for win32

2000-11-30 Thread Jeff Clausius
i am hoping win32 developers can lend out a hand. i cannot determine how to handle SSL_read and SSL_write using WSAAsyncSelect. for example: if i create a socket, and register it with WSAAsyncSelect for FD_READ and FD_WRITE, i can generate a windows' message map like the following: [in this n

RE: Crypt::SSLeay Problem

2000-11-30 Thread Ron . W . Flolid
Thanks for the response on the make problem. Yes, I had checked before sending my question and confrimed after I received your note that libssl.a is in /usr/local/ssl/lib. Size of the module is 293336 with chg. date of Nov. 30.

freeing memory

2000-11-30 Thread Colin Chalmers
Hi,   I'm always one for forgetting to give things back that I've used, like memory in my programs :-(   I'm beginning to get to grips with openssl but before I proceed I would like a few pointers on freeing memory within openssl.   If I consider the program below there are a few things I ne

Re: Checking SSL3 compliance

2000-11-30 Thread Lutz Jaenicke
On Thu, Nov 30, 2000 at 11:02:44AM -0800, Hegde, Ramdas wrote: > Is there some utility out there which verifies if your application is > following the SSL3 specification in terms of Ciphers/Handshakes etc? The > intent is to verify that two applications are actually talking SSL3 without > digging

Re: Looking for an HTTPS client for NT C/C++

2000-11-30 Thread Geoff Thorpe
Paul, Thanks for your sage words. :-) Cheers, Geoff On Wed, 29 Nov 2000, Paul Allen wrote: > I'm starting to get really tired of this useless discussion. > > I cannot imagine that it is the intent of the GPL to deny software > authors acknowledgement for their work. It is simply not conceiva

Checking SSL3 compliance

2000-11-30 Thread Hegde, Ramdas
Hi Is there some utility out there which verifies if your application is following the SSL3 specification in terms of Ciphers/Handshakes etc? The intent is to verify that two applications are actually talking SSL3 without digging into the application code. Thanks ramdas

RE: Crypt::SSLeay Problem

2000-11-30 Thread Hegde, Ramdas
Check and see if the file libssl.a is in the /usr/local/ssl/lib directory because it looks from your error message that it is missing that file. Ramdas -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 30, 2000 10:28 AM To: [EMAIL PROTECTED] S

Crypt::SSLeay Problem

2000-11-30 Thread Ron . W . Flolid
I'm having difficulty instally the SSLeay moule. Make fails as it treis to resolve lssl. Text appears below: Results of the make: Checking if your kit is complete... Looks good Note (probably harmless): No library found for -lgcc Note (probably harmless): No library found for -lRSAglue Note (prob

Re: openssl 0.9.6

2000-11-30 Thread Lutz Jaenicke
On Thu, Nov 30, 2000 at 11:16:19AM -0500, Zandi Patrick S TSgt AFRL/IFOSS wrote: > Louis, Thanks for the site.. > As I am not a Programmer (per say) > the 00README is Vague to me.. > I did a make and all seems fine.. > But instructions through me off after that.. > Are there better instructions s

Re: OpenSSL connection problem

2000-11-30 Thread Lutz Jaenicke
On Thu, Nov 30, 2000 at 01:43:16PM +0100, Wolfgang Marczy wrote: > I have some problems establishing a SSL connection. I am writing on an SMTP server, >which > should accept SSL connections. > I am sending mails with Netscape 4.7 (and Microsoft Outlook) over SSL, but the >connection > fails, bec

Re: d2i_RSAPublicKey

2000-11-30 Thread Steve Wirth
Rafa Marín López wrote: > Hello. Hi. > > RSA * d2i_RSAPublicKey(RSA **a, unsigned char **pp, long length); > > What does length param mean? length is the length of the *pp data, that means it is the number of bytes that you want to convert from DER to internal form, starting at location *pp.

d2i_RSAPublicKey

2000-11-30 Thread Rafa Marín López
Hello. RSA * d2i_RSAPublicKey(RSA **a, unsigned char **pp, long length); What does length param mean? Thank you. __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Solaris64 compile.

2000-11-30 Thread Bodo Moeller
On Tue, Nov 28, 2000 at 09:13:43AM -0800, Bill Browning wrote: > Has anyone done a Solaris64 compile with openssl 0.9.6 ? I have tried to do > so (commands & errors listed below) but am at a bit of a loss as to why this > compile type works with the 0.9.5a tar file and not with the 0.9.6 tar file

Re: i2d_RSAPublicKey

2000-11-30 Thread Goetz Babin-Ebell
Rafa Marín López wrote: > Hello, all. Hello, > I have executed this instruction: > > char keystr[1024]; > > RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); > > i2d_RSAPublicKey(rsa,&(keystr)); &keystr is a I/O parameter, pointing past the DER coded key. You must use something like:

Re: i2d_RSAPublicKey

2000-11-30 Thread Dr S N Henson
Rafa Marín López wrote: > > Hello, all. > > I have executed this instruction: > > char keystr[1024]; > > RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); > > i2d_RSAPublicKey(rsa,&(keystr)); > > But resultant keystr is zeroed. Why? > > I have verified the RSA key pair and they are co

i2d_RSAPublicKey

2000-11-30 Thread Rafa Marín López
Hello, all. I have executed this instruction: char keystr[1024]; RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); i2d_RSAPublicKey(rsa,&(keystr)); But resultant keystr is zeroed. Why? I have verified the RSA key pair and they are correct.

RE: openssl 0.9.6

2000-11-30 Thread Zandi Patrick S TSgt AFRL/IFOSS
Louis, Thanks for the site.. As I am not a Programmer (per say) the 00README is Vague to me.. I did a make and all seems fine.. But instructions through me off after that.. Are there better instructions somewhere else.. or does someone already have some DOTHIS 1-5 instructions. Pat -Origina

[Announce] M2Crypto 0.05

2000-11-30 Thread Ng Pheng Siong
Hello, I am pleased to announce that M2Crypto 0.05 is now available: http://www.post1.com/home/ngps/m2 M2Crypto is a Python interface to OpenSSL's crypto, SSL and S/MIME functionality. What's in: - Compatible with both Python 2.0 and Python 1.5.2. - PyUnit unit tests; currently 40 tes

Question about SSL detection

2000-11-30 Thread Vendetti, Jeff (Cahners)
Hi, All Is there a way in Perl or CGI to determine whether the browser is capable of using SSL, and, also, if the browser might have turned off the SSL option. I'm trying to send someone to either a secure or non-secure part of our site automatically. Any help appreciated. Jeff Vendetti __

Re: RSA read and write to and from file

2000-11-30 Thread Jim Grimmett
From: "A. Konigsdorfer" <[EMAIL PROTECTED]> > > Would it be possible to use the i2d_RSAPublicKey(...) code the RSA > public key to DER and write the result out to a binary file? > > After that, d2i_RSAPrivateKey(...) could be used to restore the RSA > structure. I have never done that. I'm doin

How do I get the parent cert of the ssl peer?

2000-11-30 Thread Mats Nilsson
Hi list! I'm currently implementing support for CRLs in our system. The CRLs are signed by the same CA that issued the certificate of the peer. Therefore, to verify the CRL, I need to find the certificate of the parent of the peer that I'm communicating with. During an SSL session, I can use

RE: RSA read and write to and from file

2000-11-30 Thread A. Konigsdorfer
Title: RE: RSA read and write to and from file   > If you have a private key in an RSA structure and just want > to write out > the public components then you can use > PEM_write_RSAPublicKey() and read > it in with PEM_read_RSAPublicKey(). The key read back will then just > contain the RSA

Re: RSA read and write to and from file

2000-11-30 Thread Dr S N Henson
[EMAIL PROTECTED] wrote: > > Hi, > > I am having a problem with the RSA functions of the openssl package. > I want to generate an RSA key pair. Write them to disk and use them later > (this all in linux/AIX) > I managed to generate a keypair. But then the problem starts. I cant find > any func

Re: Porblem installing PKCS#7 (user cert + CA cert) into Netscape 4.7

2000-11-30 Thread Dr S N Henson
Ma'rt Laak wrote: > > Hello! > > Preface: > I can successfully create and install client certificate into > netscape from SPKAC request: > openssl ca -config X -spkac X -out client.crt -days X > and sending it back to browaser with header: > Content-Type: application/x-x509-user-cert > >

RSA read and write to and from file

2000-11-30 Thread nl89071
Hi, I am having a problem with the RSA functions of the openssl package. I want to generate an RSA key pair. Write them to disk and use them later (this all in linux/AIX) I managed to generate a keypair. But then the problem starts. I can´t find any functions to write the whole key (not just pr

OpenSSL connection problem

2000-11-30 Thread Wolfgang Marczy
Hi everybody, I have some problems establishing a SSL connection. I am writing on an SMTP server, which should accept SSL connections. I am sending mails with Netscape 4.7 (and Microsoft Outlook) over SSL, but the connection fails, because no common enrcyption method was found: "error: 1408A0C

please check my x509v3 extensions

2000-11-30 Thread Daniel Hirscher
Hi, I want to create a mini CA. My "user" certs should be used for S/MIME and SSL Client Authentication. The certificates should be useable with Netscape and Outlook. I've created the certs, but I have some problems with it. The automatic certificate type detection of windows always selects su

Re: error 80092004 in IE 5.5

2000-11-30 Thread Sorot Panichprecha
Hi, For me after installing the High encryption patch it work fine. MSIE and also Netscape (before 4.73) already support CA Certificate with 1024 bits without installing any patch. You should check it out again. Regards, Sorot Daniel Hirscher wrote: > Hi, > > I have installed every available pa

Re: cipher ID values

2000-11-30 Thread Holger Reif
There is no such list by intention. The authors of the spec didn't wanted to allow anybody to sample their own combination of different mechanisms which might be weak in the sum. So the decision was taken to define cipherSUITES. For your own purposes you might want to use values from the number s

Re: error 80092004 in IE 5.5

2000-11-30 Thread Daniel Hirscher
Hi, I have installed every available patch to Windows and IE. I can import my CA certificates without problems, they are high keylength (1024). The user certificates are in pkcs7 format and fail every time with error 80092004. I tried to set all the IE internet security options to low, but no su