Re: how to add x509v3 extension

Thank you for your rapid reply, I'm going to read the openssl.txt very well. (really to say, I could not understand that meaning well..I'm sorry.) When I made a self-certificate using following command, openssl req -x509 -newkey rsa:1024 -keyout selfkey.pem -out selfcert.pem I can find

random key problem

Hi I ran "openssl s_client -connect localhost:443 -state" to test my openssl installation on solaris, and here is the output I got from the box: unable to load 'random state' This means that the random number generator has not been seeded with much random data. Consider the RANDFILE environment

Re: how to add x509v3 extension

Kikuyo Nagamatsu wrote: > > Hi all, > I am a very beginner of OpenSSL. > > I want to add one of x509v3 extensions (AuthorityInfoAccess) > to a certificate, but I can't. > How can I know the way to add extensions? Is there some document? > > Or,if there is someone who did it, can you show me t

how to add x509v3 extension

Hi all, I am a very beginner of OpenSSL. I want to add one of x509v3 extensions (AuthorityInfoAccess) to a certificate, but I can't. How can I know the way to add extensions? Is there some document? Or,if there is someone who did it, can you show me the way? (I'm using 0.9.5a) Now I have two p

Open SSL on VxWorks based Pentium platform?

Has anyone ported the Open SSL libraries to be compiled for a Pentium processor running VxWorks with the gnu toolset? If so, would you share your build flags and "Configure" file modifications? Are there any issues that you ran into in getting the code to run on target? thanks for any info. _

Maybe this is a more intelligent question . .

Not so much session caching this time, but cache stats. Is there a way to reset these other than directly accessing the structure members - for instance when the cache is purged? I noticed they did not get reset when the cache gets purged using SSL_CTX_flush_sessions(ssl_ctx,0). I also did not f

Re: Yet another question about client side session caching . . .

Here I go responding to my own post again. Now I know why there were no answers. Seems I missed it the last time it was posted. I think I have it now. Thanks all. L Louis LeBlanc wrote: > > Ok, I have a general idea of how to manage my own client side caching. > > My client already maintain

Re: Crypt::SSLeay

On Fri, Dec 01, 2000 at 07:40:57AM -0600, [EMAIL PROTECTED] wrote: ... > libssl.a is in /usr/local/ssl/lib. The default library that I use is > /usr/local/ssl. The full results of the make are included below. I would > appreciate any and all commented regarding this problem. BTW. I'm trying to >

Re: *.o files

You shouldn't have *any* .o files. All files in the tar file are original source so your make should create them. If the make did not produce them, you may have a problem with your configuration. -Sean Walton Mohamed Aly wrote: > I just downloaded OpenSSL and was trying to compile it usemg M

*.o files

I just downloaded OpenSSL and was trying to compile it usemg MAKE. It seems that I should have *.o files ( like bn_asm.o) as I understand from the Makefile, however the tar file didn't have any .o files, Where can I find these files? Mohamed Aly Systems Analyst Pason Systems Corp. Calgary, Canada

Problem using domainComponent oid

Hej, When using an external oid file containing -- 0.9.2342.19200300.100.1.25 DC domainComponent -- Generating a csr gives the following correct subject: -- Subject: DC=DK, DC=BAELUM, OU=Servers, CN=Baelum CA Authority -- When generating a a self signed crt shows the oid in the subject an issue

error in during handshake

Hi, I've downloaded a source that interface openSSL from Java. The program itself works well under LINUX and Windows. Under windows i compiled the program and openssl as dll. And on LINUX i compiled it as shared objects. I did the same on Solaris, but when i tried to connect to https site, it th

Yet another question about client side session caching . . .

Ok, I have a general idea of how to manage my own client side caching. My client already maintains a record for each server it connects to, and can store either a copy of the session, or a pointer to that session back in the SSL_CTX session cache. Which is better? I am trying to preserve the ca

RE: Crypt::SSLeay

I posted this question previously and had only a single response. My hope is that someone else has seen this problem and might be so kind as to offer some suggestion for resolution. I'm trying to install the Crypt::SSLeay module and have a problem with the make in that I receive a failure indicati

How can I unsubscribe?

Thanks  

Re: ADD : read and write RSA keys

On Fri, Dec 01, 2000 at 09:05:23AM +0100, [EMAIL PROTECTED] wrote: > first when I export the public key with PEM_write_RSAPublicKey() or > PEM_write_PUBKEY() > it is impossible to read it in via PEM_read_bio_RSAPublickey(). I get the > error "EXPECTING PUBLIC KEY", why ?? If you write with PEM_wr

i2d_RSAPublicKey,d2i_RSAPublicKey

Hello. I have a problem with this situation: I have this code in function A: char keystr[1024]; ... RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); unsigned char *ptr; int derlen ptr=keystr; derlen=i2d_RSAPublicKey(rsa,&ptr); ptr=keystr; In a function B: unsigned char *ptr;

Re: Looking for an HTTPS client for NT C/C++

Hello , i'm using Win95,Vc++ I'm getting problem in compiling the RSA,SHA,HMac,DH algo . Is HMAC is necessary after compuding the digest from md5 . Have u compiled the openssl library successfully. If yes then which OS and Which compiler thanx & regards Deepak Vadim Fedukovich wrote: >

Re: Entrust certificates with Apache/openSSL

From: "Aurobindo (Robin) Sundaram (+1 512 331 3743)" <[EMAIL PROTECTED]> sundaram> We're having problems loading a custom certificate into an sundaram> Apache web-server. Has anyone seen these errors, and if so, sundaram> how do we fix them? It appears to be an Entrust/openSSL sundaram> issue, si

Entrust certificates with Apache/openSSL

Hi, We're having problems loading a custom certificate into an Apache web-server. Has anyone seen these errors, and if so, how do we fix them? It appears to be an Entrust/openSSL issue, since Verisign certs can be loaded. Apologies if this question is not on the list's charter. Thanks, Robin

Net::SSLeay EGD patch

Hello all, Attached is a patch that adds OpenSSL RAND_egd support to Net_SSLeay.pm-1.05. With this patch, Net_SSLeay built with OpenSSL 0.9.6 passes 'make test' on a system without /dev/urandom: SunOS 5.6 Generic_105181-06 sun4u sparc SUNW,Ultra-2. (However, it hasn't been tested in production.)

https not working with IE5.5 high encryption and Verisign

Hello anyone know why SSL not working on the server once i upgraded my browser to IE5.5 1- the server doesn't even seem like it is there at all with https: I don't get cert warning just get error page from browser dns no error log on system. 2- some people with IE5.5 can access the server some c

Lack of Documentation

I have followed the small ammount of documentation that came with OpenSSL and Apache-SSL but I still haven't a clue how to create a certificate - what is needed file wise and how to install them when I create them... I am getting this error message but don't even know where to start looking for a

padding errors with RSA :(

Hi, When I try to encrypt/decrypt with RSA I get errors, mainly padding errors. When I use RSA_PKCS1_PADDING i get unknown padding type when decrypting crypted text. When I use RSA_NO_PADDING i get an error that my *from is smaller then *to. I don't understand this error. isn't it OK to have a b

i2d_RSAPublicKey, d2i_RSAPubliKey.

Hello. I have a problem with this situation: I have this code in function A: char keystr[1024]; ... RSA *rsa=RSA_generate_key((int)1024,0x10001,NULL,NULL); unsigned char *ptr; int derlen ptr=keystr; derlen=i2d_RSAPublicKey(rsa,&ptr); ptr=keystr; In a function B: unsigned char *ptr;