IE complains about self-signed certs

2000-12-06 Thread Link -
i wonder if it's possible to tell Internet Explorer to trust self-signed certs(aka test certs).. Netscape Navigator/Communicator 3 or above lets me to do this (trust cert for session/until cert expires) but IE seems complain everytime (issuer of cert unknown - cant establish secure connection)

Re: Problem with SSL_accept after change certificate from 40-bit to 128-bit

2000-12-06 Thread eric
gang zhong wrote: > > Hi, > > I have a small program silimar to FTP running on Solaris 2.6 and Windows NT. > IT was working fine > until I replaced my 40-bit Verisign certificate with 128-bit global secure > ID. I got the following error > message: > [Server] > SSL_accept failed: error:14094412:

Problem with SSL_accept after change certificate from 40-bit to 128-bit

2000-12-06 Thread gang zhong
Hi, I have a small program silimar to FTP running on Solaris 2.6 and Windows NT. IT was working fine until I replaced my 40-bit Verisign certificate with 128-bit global secure ID. I got the following error message: [Server] SSL_accept failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 a

No Subject

2000-12-06 Thread gang zhong
Hi, I have a small program silimar to FTP running on Solaris 2.6 and Windows NT. IT was working fine until I replaced my 40-bit Verisign certificate with 128-bit global secure ID. I got the following error message: [Server] SSL_accept failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 a

ANNOUNCE: Crypt::SSLeay v.18

2000-12-06 Thread Joshua Chamas
Hey, The latest perl-LWP-SSL supporting Crypt::SSLeay is in your local CPAN or at: http://download.sourceforge.net/mirrors/CPAN/modules/by-module/Crypt ftp://ftp.duke.edu/pub/perl/modules/by-module/Crypt This perl module provides support for the https protocol under LWP, so that a LWP::User

certificates

2000-12-06 Thread outlaw
I'm using openssl x509 to generates certificates for testing in outlook express. None of my pem or der files seem to be in the right format.. Those of you having done this, how did you create the certs? thankx __ OpenSSL Projec

Re: cipher suite issue?

2000-12-06 Thread Eric Rescorla
Jeffrey Ricks <[EMAIL PROTECTED]> writes: > If I run (note that I'm using the same certs/keys as above): > > openssl s_client -connect voodoo:443 -cert /tmp/s_client2.crt -key > /tmp/s_client2.key -CAfile /tmp/s_clientCA.crt -tls1 -cipher > DES-CBC3-SHA -state > > with client authentication off

Problem with cons smime

2000-12-06 Thread Côme Chaput
I run Solaris 2.6 with Sun WorkShop Compiler C 4.2 & Sun WorkShop Compiler C++ 4.2I  find [Côme Chaput] that the compiler wasn't reconize the flags fpic so I change it to Kpic but I still receive the log of error below maybe someone have already this.    Do you have any ideas?       # cons

Re: Re: cipher suite issue?

2000-12-06 Thread Lutz Jaenicke
On Wed, Dec 06, 2000 at 01:13:32PM -0800, Jeffrey Ricks wrote: > openssl s_client -connect voodoo:443 -cert /tmp/s_client2.crt -key > /tmp/s_client2.key -CAfile /tmp/s_clientCA.crt -tls1 -cipher > DES-CBC3-SHA -state > with client authentication off at the server, it works fine. If I turn > cli

Re: Programmers reference for Openssl APIs

2000-12-06 Thread Lutz Jaenicke
On Wed, Dec 06, 2000 at 12:36:47PM -0800, Hegde, Ramdas wrote: > Thanks for the site. But I am looking for something more detailed for each > SSL API. > Something for a SSL beginner looking at what are the APIs to do SSL3. Any > references would be appreciated. There is no "User's Guide" as of no

Re: Re: cipher suite issue?

2000-12-06 Thread Jeffrey Ricks
Lutz, I grabbed ssldump and captured some output. Unfortunately, it doesn't look like it has uncovered any secrets. This is where I am now: If I run: openssl s_client -connect voodoo:443 -cert /tmp/s_client2.crt -key /tmp/s_client2.key -CAfile /tmp/s_clientCA.crt -tls1 -cipher EDH-RSA-DES-CBC

RE: Programmers reference for Openssl APIs

2000-12-06 Thread Hegde, Ramdas
Thanks for the site. But I am looking for something more detailed for each SSL API. Something for a SSL beginner looking at what are the APIs to do SSL3. Any references would be appreciated. Thanks -Original Message- From: Mohamed Aly [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December

RE: Experiencing error when installing a Verisign certificate!

2000-12-06 Thread Wilt, Paul
Jean-Marc: I hate to be totally stupid but what is the CRL and where are the CA PEM files supposed to be located? What does the directory where those PEM files are located supposed to look like? Sorry for all the bone- headed questions but I have not been able to trace this down! Thanks Paul E

Re: Experiencing error when installing a Verisign certificate!

2000-12-06 Thread Jean-Marc Desperrier
"Wilt, Paul" wrote: > [04/Dec/2000 12:09:21 5411938] [info] Init: Initializing OpenSSL library > [04/Dec/2000 12:09:21 5411938] [info] Init: Loading certificate & private > key of SSL-aware server storefront.xanedu.com:8443 There apache loads your server and private key. It work ok : No error.

RE: Programmers reference for Openssl APIs

2000-12-06 Thread Mohamed Aly
Try http://www.columbia.edu/~ariel/ssleay/ -Original Message- From: Hegde, Ramdas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 06, 2000 11:12 AM To: '[EMAIL PROTECTED]' Subject: Programmers reference for Openssl APIs Hello In the OPENSSL website there is a link to an OPENSSL Pr

RE: Experiencing error when installing a Verisign certificate!

2000-12-06 Thread Wilt, Paul
Tom Biggs wrote: = >I'm not an expert on this, but the first thing I'd try, if I got >a "bad end line" error message, would be to check the >file and see what the line terminators were. It sounds >like it either is expecting a newlin

Programmers reference for Openssl APIs

2000-12-06 Thread Hegde, Ramdas
Hello In the OPENSSL website there is a link to an OPENSSL Programmer's Reference at ~http://www.psy.uq.oz.au/~ftp/Crypto/ssl.html which is not reachable. Does anyone know of a document/website where I can find a more detailed explaination of the Openssl APIs something like a programming manual?

RE: Experiencing error when installing a Verisign certificate!

2000-12-06 Thread Jeff Cornett
It is possible that a Verisign certificate is not compatible with OpenSSL. Perhaps someone else can confirm or deny this. I have been experimenting with OpenSSL and a product from Rick Kaseguma called SSLWrap. In Rick's documentation (http://www.rickk.com/sslwrap/index205.htm) he says: "Verisign

Wrapping RSA private key for Netscape

2000-12-06 Thread Etienne Loupias
Hi, I am working on a PKCS#11 module for Netscape (Communicator 4.x). To export a certificate in a PKCS#12 file, Netscape call the C_wrapKey fonction of my PKCS#11 module and ask for the RSA private key, wrapped with the mechanism CKM_DES3_CBC_PAD . I use openssl to create a PKCS#8 from the

Re: Experiencing error when installing a Verisign certificate!

2000-12-06 Thread Tom Biggs
At 11:35 AM 12/6/00 -0500, Wilt, Paul wrote: >We recently needed to update our Verisign certificate for our secure site. >We are switching from Netscape to Apache mod_ssl/OpenSSL. >We are attempting to install the Verisign certificate that we received >... >[04/Dec/2000 12:09:24 5523600] [error] O

Fw: cons: errors constructing smime

2000-12-06 Thread Richard Levitte - VMS Whacker
Anyone? Hi Richard, Can you help me further? How can I recompile the libsmime.a file? Thanks for your help. Côme Chaput, ing. Spécialiste ICP VPN Tech inc. Téléphone : (450) 677-8955 Fax. : (450) 677-8381 Courriel : [EMAIL PROTECTED] URL : http://www.VPNtech.Com -Original Message-