Re: bad mac decode?

2000-12-13 Thread Dr S N Henson
Louis LeBlanc wrote: > > Dr S N Henson wrote: > > > > What command did you use to produce that message? Were you attempting to > > connect to a remote server, if its is on the internet its address would > > help. > > > > There are several possible causes of that message such as as connecting > >

Question about certificate extension.

2000-12-13 Thread James Xie
Hello, I'm very new to OpenSSL, just have my first Apache/mod_ssl server running with self signed server and client certificates. Still trying to read all the documents for OpenSSL. Here is my question: I want to include some binary data (1024 byte) in the client certificate for authenticatio

config error with pem.h

2000-12-13 Thread C. Jason Bruner
Please forgive me in advance if this is a boneheaded question, but I openly admit I'm a Unix newbie... When doing a ./config of the 0.9.6 build I get the following error making pem.h on my SCO OpenServer 5.0.5 system, regardless of which of the sco options I specify in ./Configure Here's the res

Re: bad mac decode?

2000-12-13 Thread Louis LeBlanc
Dr S N Henson wrote: > > What command did you use to produce that message? Were you attempting to > connect to a remote server, if its is on the internet its address would > help. > > There are several possible causes of that message such as as connecting > to a server with a broken SSL/TLS impl

Stunnel 3.9 released

2000-12-13 Thread Michal Trojnara
For your information: stunnel version 3.9 has been released. New features: * Updated temporary key generation: - stunnel is now honoring requested key-lengths correctly, - temporary key is changed every hour. * transfer() no longer hangs on some platforms. Special thanks to Peter Wageman

Re: Client Auth from IE

2000-12-13 Thread jkunz
On 13 Dec, Dale Peakall wrote: > The problem occurs when the web-server requests a client certificate: IE > pops up a dialog and asks which > certificate I'd like to use - the problem is no certificates are listed. Did you load the CA-Cert in to IE? See http://www.ultranet.com/~fhirsch/Papers/coo

Re: make test fails on IRIX

2000-12-13 Thread Kevin Walker
The sgi is an old Indigo 2, the OS is 6.5.9, and running cc -version says: MIPSpro Compilers: Version 7.30 >* Kevin Walker ([EMAIL PROTECTED]) [20001213 10:34] thus spake: > >[...] > >> OpenSSL self-test report: >> >> OpenSSL version: 0.9.6 >> Last ch

Re: How to export a private key in a PKCS#11 module ?

2000-12-13 Thread Dr S N Henson
Etienne Loupias wrote: > > Thanks a lot for this answer. Now I understand what was wrong. > > However, I think there is something wrong in the way Netscape passes the handle to > the DES3 key in the C_WrapKey function. Indeed, the handle is not a valid handle in > my token (i.e. no object ex

Re: make test fails on IRIX

2000-12-13 Thread Jean-Francois Malouin
* Kevin Walker ([EMAIL PROTECTED]) [20001213 10:34] thus spake: [...] > OpenSSL self-test report: > > OpenSSL version: 0.9.6 > Last change: In ssl23_get_client_hello, generate an error message wh... > Options: -mips3 > OS (uname): IRIX phil 6.5 07201607

Re: certificate issued by an official CA for openssl wanted

2000-12-13 Thread Goetz Babin-Ebell
Alexander 'Alfe' Fetke wrote: > Hi, Goetz Babin-Ebell, Hello Alexander, > On Wed, 13 Dec 2000, Goetz Babin-Ebell wrote: > > > Alexander 'Alfe' Fetke wrote: > > > > > I am not looking for a long-time service but just for a single act of > > > service: The CA shall have a close look at us to be s

Re: certificate issued by an official CA for openssl wanted

2000-12-13 Thread Alexander 'Alfe' Fetke
Hi, Oscar ... On Wed, 13 Dec 2000, Oscar Jacobsson wrote: > Alexander 'Alfe' Fetke wrote: > > I am not looking for a long-time service but just for a single act of > > service: The CA shall have a close look at us to be sure that we are who > > we claim to be and then issue a certificate which

Message status - undeliverable

2000-12-13 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: RShyamsundar Information about your message: Subject: Re: Client Auth from IE

Message status - undeliverable

2000-12-13 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: IMagesh Information about your message: Subject: Re: Client Auth from IE

Re: Client Auth from IE

2000-12-13 Thread george
It's a BUG in IE, try last version, it works - Original Message - From: Dale Peakall <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 13, 2000 5:36 PM Subject: Client Auth from IE > I've got a problem performing client auth from IE. > > I've created a CA cer

Client Auth from IE

2000-12-13 Thread Dale Peakall
I've got a problem performing client auth from IE. I've created a CA cert and used this to create two key-pairs: one for a web-server (nsCertType=server), the other for a client (nsCertType=client,email). I've installed the CA cert as a trusted root CA, setup IIS with the web-server certificate,

Re: certificate issued by an official CA for openssl wanted

2000-12-13 Thread Jean-Marc Desperrier
Alexander 'Alfe' Fetke wrote: > our customers > will run our application which will be both client and server. > the used protocols will be IIOP over SSL or plain IIOP (but then > of course without encryption, so this case is not of interest). > we are not planning to issue certificates by ourse

Re: Using OpenSSL on Win32?

2000-12-13 Thread Ng Pheng Siong
On Sun, Dec 10, 2000 at 11:09:04PM -0500, Tim Gustafson wrote: > I was wondering if anyone could point me in the direction of some OpenSSL > compiled DLLs for Win32? I am a Delphi programmer, and don't really know > enough C to compile them myself. Hi, I have a Win32 binary package comprising

Re: Client Certificate Verification

2000-12-13 Thread buitrago
[EMAIL PROTECTED] dijo: > I have tried moving the location of the web pages around, changing > ownership > on the directory, and im really pulling my hair out!!!, i need a > solution by > the end of today, i really hope someone knows why this is happening, i > have > also noticed something to do w

Re: certificate issued by an official CA for openssl wanted

2000-12-13 Thread Alexander 'Alfe' Fetke
Hi, Goetz Babin-Ebell, On Wed, 13 Dec 2000, Goetz Babin-Ebell wrote: > Alexander 'Alfe' Fetke wrote: > > > I am not looking for a long-time service but just for a single act of > > service: The CA shall have a close look at us to be sure that we are who > > we claim to be and then issue a cert

Re: rsaref/crypto in openssl

2000-12-13 Thread Richard Levitte - VMS Whacker
From: Geoff Thorpe <[EMAIL PROTECTED]> geoff> "virue"?? Perhaps you meant "virus"? But it's certainly not a geoff> terribly contagious one. :-) One can always wish... "virtue", as I'm sure you guessed :-). -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168

Re: rsaref/crypto in openssl

2000-12-13 Thread Geoff Thorpe
Hi there, On Wed, 13 Dec 2000, Richard Levitte - VMS Whacker wrote: > For user questions (like users of OpenSSL or application developpers > that use OpenSSL as a library), openssl-users is exactly right. For > talking about development of OpenSSL itself, openbssl-dev is often a > better channe

make test fails on IRIX

2000-12-13 Thread Kevin Walker
I downloaded OpenSSL-0.9.6 and tried to make it but the make test fails. I am only interested in using OpenSSH at present. Can anyone point me in the right direction for solving this problem? I got some precompiled binaries from SGI which worked but I can't get the compiled source to pass the tes

Re: client certificate!!!

2000-12-13 Thread Lutz Jaenicke
Moved to [EMAIL PROTECTED]! On Wed, Dec 13, 2000 at 03:15:04PM +, Filipe Contente wrote: > I'm a new member, and i don't understand how ssl certificates very well. > > i'm using this function to get the client certificate: > > And it returns NULL!! > > The s variable (SSL type), isn't NULL

Re: certificate issued by an official CA for openssl wanted

2000-12-13 Thread Oscar Jacobsson
Alexander 'Alfe' Fetke wrote: > I am not looking for a long-time service but just for a single act of > service: The CA shall have a close look at us to be sure that we are who > we claim to be and then issue a certificate which states that -- nothing > more :-} > > Is no commercial CA capable a

Re: certificate issued by an official CA for openssl wanted

2000-12-13 Thread Goetz Babin-Ebell
Alexander 'Alfe' Fetke wrote: Hello Alexander, > I am not looking for a long-time service but just for a single act of > service: The CA shall have a close look at us to be sure that we are who > we claim to be and then issue a certificate which states that -- nothing > more :-} Yes, commercial

Re: certificate issued by an official CA for openssl wanted

2000-12-13 Thread Alexander 'Alfe' Fetke
Hi, Oscar ... On Tue, 12 Dec 2000, Oscar Jacobsson wrote: > Alexander 'Alfe' Fetke wrote: > > does anybody have experience with this problem? Any hint (e.g. to a > > different commercial CA) would be appreciated :-) > [...] > I don't actually have any experience with this but I think that the

RE: Linker error

2000-12-13 Thread Kirill Vasiliev
Title: RE: Linker error See comments below > -Original Message- > From: Andrew W. Gray [mailto:[EMAIL PROTECTED]] > Sent: Saturday, December 09, 2000 11:00 PM > To: [EMAIL PROTECTED] > Subject: Re: Linker error > > > How exactly did you configure your source tree? > > I assume : >

Re: rsaref/crypto in openssl

2000-12-13 Thread Richard Levitte - VMS Whacker
From: Cliff Sarginson <[EMAIL PROTECTED]> csarginson> I recently posted a problem concerning the 64 bit HP port csarginson> of OpenSSL, but received no replies. I take it therefore csarginson> this is not the right list. I cannot compile HP 11.0 csarginson> OpenSSL in 64 bit mode, does anyone ha

No Subject

2000-12-13 Thread Amara Jouini
Hello, I try to create a Certificate Request, however i receive the following error. Can you please help me to solve this problem. % $OPENSSL_CONF/openssl req -x509 -newkey rsa:1024 -keyout key.pem -out req.pem Using configuration from /opt/oracle/product/ias/Apache/open_ssl/bin Generating a 1

Client Certificate Verification

2000-12-13 Thread Barrie Jarman
Hope someone can help me. I have been trying to add the feature to our clients sites so that a personal certificate MUST be provided from the client to access the site. The SSL is working fine, however, when i try to add the part for the client certificate, it appears to accept the certificate, bu

Re: How to export a private key in a PKCS#11 module ?

2000-12-13 Thread Etienne Loupias
Thanks a lot for this answer. Now I understand what was wrong. However, I think there is something wrong in the way Netscape passes the handle to the DES3 key in the C_WrapKey function. Indeed, the handle is not a valid handle in my token (i.e. no object exists with this handle for my module).

Re: Installation problem with mingw32 on NT4 SP4

2000-12-13 Thread qun-ying
I used to get this kind of error. Active perl seems not working quite well together with cygwin/mingw32. Try to get a perl version for cygwin. QUERAN LOIC wrote: > > --- Reçu de CMB.QUERALO 0298002339 13-12-00 10.29 > > I try to install OpenSSL 0.9.6 with gcc 2.95.2, m

Installation problem with mingw32 on NT4 SP4

2000-12-13 Thread QUERAN LOIC
--- Reçu de CMB.QUERALO 0298002339 13-12-00 10.29 I try to install OpenSSL 0.9.6 with gcc 2.95.2, make 3.76.1 and Active Perl 5.6.0 620 as indicated in install.w32. I obtain the followin error message : "gcc: .cryptocryptlib.c: No such file or directory" although make i

Oops, not the topic

2000-12-13 Thread Cliff Sarginson
Sorry, replying to my own post .. tut tut .. I inherited the topic by accident. Cliff Sarginson wrote: > Hello, > I recently posted a problem concerning the 64 bit HP port of OpenSSL, > but received no replies. I take it therefore this is not the right list. > I cannot compile HP 11.0 OpenSSL in