RE: SSL_peek? Need an efficient readline.

2000-12-22 Thread David Schwartz
> Hey, all. > I am running into a problem with reading from a connection until a > newline is encountered. > I am unable to get a clear idea just what SSL_peek() is intended to do, > which is probably the cause of my problem. Just read it all into a buffer. If you got more than you wante

Re: Build fails on Solaris 5.6

2000-12-22 Thread Mike
I should have been less obtuse. I would guess your bash shell path doesn't include the current directory while the sh one does. A simple test would be to edit the crypto command to be ./crypto or make sure your path includes the current directory. Mike Fred Leeflang wrote: > > Mike wrote: > > >

SSL_peek? Need an efficient readline.

2000-12-22 Thread Louis LeBlanc
Hey, all. I am running into a problem with reading from a connection until a newline is encountered. I am unable to get a clear idea just what SSL_peek() is intended to do, which is probably the cause of my problem. I need to read from a socket, up to n bytes or until the first instance of '\n'.

Message status - undeliverable

2000-12-22 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: DWILBUR Information about your message: Subject: Re: FIPS 140-1 compliant?

Re: FIPS 140-1 compliant?

2000-12-22 Thread Robert B. Easter
On Thursday 21 December 2000 21:52, Scott Goodwin wrote: > Yes. FIPS 140-1 is a requirement for government servers running SSL, which > essentially means all government non-public web servers (FIPS 140-1 > actually covers most cases where you're encrypting info in government > systems). > > FIPS 1

Re: Dumb question- Sorry

2000-12-22 Thread Robert B. Easter
On Friday 22 December 2000 01:16, Michael Conley wrote: > I am very new to SSL. I have set up my Apache web server on Red Hat Linux > 7. I have installed OpenSSL/mod_ssl. I can now attach to the web server > using either http or https. > > My question is how do I control which files can be acce

Re: Compiling OpenSSL on Win98

2000-12-22 Thread Dr S N Henson
> Bear Claw Of The Canyon wrote: > > I am attempting to setup SSL on Win98 using Apache Web. When ever I > attempt to compile using VC++ 6.0, I get declaration errors, > undeclared variables, and function declaration errors also are causing > me major problems. > > Is there an easy way to rep

Re: https packet diagram

2000-12-22 Thread Eric Rescorla
"Varga, Jack" <[EMAIL PROTECTED]> writes: > Along the lines of a Stephens TCP packet header illustration, > is there something similar to describe an https (or http for that > matter) packet header? The first thing to realize is that HTTPS means "HTTP over SSL". Ordinarily, HTTP traffic is carrie

RE: sample code.

2000-12-22 Thread Mahesh Anantharaman
Hi I added this line and it works. OpenSSL_add_all_algorithms(); thanks mahesh -Original Message- From: Mahesh Anantharaman [mailto:[EMAIL PROTECTED]] Sent: Friday, December 22, 2000 12:18 PM To: '[EMAIL PROTECTED]' Subject: RE: sample code. Hi I am not able to load the private key th

Re: https packet diagram

2000-12-22 Thread Mads Toftum
Check http://www.modssl.org/docs/2.7/ssl_intro.html and http://www.modssl.org/docs/apachecon2000/slide-006-l.html vh Mads Toftum -- `Darn it, who spiked my coffee with water?!' - lwall __ OpenSSL Project

Re: Build fails on Solaris 5.6

2000-12-22 Thread Fred Leeflang
Mike wrote: > > It is trying to run the command "crypto" which it cannot find in your > current path. > > Mike That would be too obvious :) No, I actually inspected the makefiles for as far as I understood them, and in the generated Makefile.ssl it tries to: all: Makefile.ssl @need_shl

Re: Build fails on Solaris 5.6

2000-12-22 Thread Mike
It is trying to run the command "crypto" which it cannot find in your current path. Mike Fred Leeflang wrote: > > I try to compile openssl-0.9.6 on Solaris 5.6 and I get an error > message when I run ./config: > > [fleeflng@mink1 openssl-0.9.6]$ ./config > Operating system: sun4u-whatever-sola

Re: sample code.

2000-12-22 Thread Dr S N Henson
Stephane Bortzmeyer wrote: > > On Thursday 21 December 2000, at 19 h 22, the keyboard of Mahesh Anantharaman > <[EMAIL PROTECTED]> wrote: > > > Can any body send me a sample code that does "openssl smime decrypt > > function". > > OpenSSL can do S/MIME? I wasn't aware of that. And I cannot find

Build fails on Solaris 5.6

2000-12-22 Thread Fred Leeflang
I try to compile openssl-0.9.6 on Solaris 5.6 and I get an error message when I run ./config: [fleeflng@mink1 openssl-0.9.6]$ ./config Operating system: sun4u-whatever-solaris2 Configuring for solaris-sparcv9-gcc IsWindows=0 CC=gcc CFLAG =-fPIC -DTHREADS -D_REENTRANT -DDSO_DL

Configure irix-mips3-cc question?

2000-12-22 Thread Bruce W. Forsberg
For openssl-0.9.6 the irix-mips3-cc option does not produce mips3 code. On an Origin IRIX 6.4 machine with the SGI compilers it produces mips4 code. There is no -mips3 specified so it defaults to mips4. Is this is what is intended with this rule? We like to build our application with -n32 -mips3

Server Gated Crypto (SGC) and IE clients

2000-12-22 Thread mj . stevenson
Hello, I've read previous posts on Server Gated Crypto an have tried the suggestions in them, however I cannot get it to work with IE 5.01-5.5 on NT4sp5 (56bit and 128bit). It works fine with Nescape browsers (as everyone finds). I've apache-1.3.14, the lastest modssl, openssl on Solaris 5.6 with

SSL /SSH configuration questions

2000-12-22 Thread bernard . straehl
G'day everybody I'm just a newbie in the whole SSL/SSH environment. I already installed OpenSSL 0.9.6 and OpenSSH 015 on AlphaServer DS20 running OpenVMS 7.2-1. my big question marks are: Q: how do I generate a public key to exchange it with my partner? Q: how do I use and where do I store a p

Re: Kurt Seifred's article on securityportal

2000-12-22 Thread Michael T. Babcock
Ulf Moeller wrote: > On Wed, Dec 20, 2000, Gary Feldman wrote: > > > Let's be fair. As your example really points out, the problem in this > > specific case (your example, not necessarily the "Accept this invalid > > certificate case") is with the developers, not the users. > > Which browser wou

RE: Converting IIS4 to SSL NET format

2000-12-22 Thread Wallace, William
This works for me: 1. Export a backup file of the Certificate from the Key-Manager. 2. Find this string in the binary file : "private-key" 3. Trace back until You find this Hex value : "30 82" 4. Write from that position to a new file (tmp.bin). Make sure you include the 30 82 bytes. 5. With O

Re: Urgent: Trusting Self Signed Certificate

2000-12-22 Thread Michael Ströder
Deepak wrote: > > I have a piece of Java (JSSE) code BTW: news:comp.lang.java.security is a more appropriate forum for these kind of questions... Ciao, Michael. __ OpenSSL Project http://www.ope

Re: Urgent: Trusting Self Signed Certificate

2000-12-22 Thread Michael Ströder
Deepak wrote: > > I have created a self signed server certificate on a local machine using > OpenSSL. I want to connect to this machine using the same code but it gives > an error "javax.net.ssl.SSLException: untrusted server cert chain". I want > the code to trust this certificate. You have to

Re: How to add challenge-password attributes..

2000-12-22 Thread Dr S N Henson
chandu wrote: > > HI everybody, > > I have a question regarding adding challenge-password attribute to a X509 > certificate request. I guess I can do this by calling the function > X509_ATTRIBUTE_create(int nid, int atrtype, void *value); ( is that right). > If so can anyone please explain me w

Re: cannot handle CRL Distribution points

2000-12-22 Thread Dr S N Henson
Marco Donati wrote: > > i cannot handle the CRL Distribution Points with the following code: > [various examples omitted] > > Where's the mistake? > Is there any FAQ or documentation on these functions? > You can try and do what this code is attempting: manually decoding the extension value.

Urgent: Trusting Self Signed Certificate

2000-12-22 Thread Deepak
Hi, I have a piece of Java (JSSE) code that securely connects to a server (https). When I connect to Verisign, Sun or thawte.com the code gets their index page because they have certificates that are signed by trusted CAs. I have created a self signed server certificate on a local machine using

Bug in PEM_X509_INFO_read_bio() ??

2000-12-22 Thread Hellan,Kim KHE
Hi I'm having a strange problem with PEM_X509_INFO_read_bio(). I using the some code in apps.c ( load_certs() ) to load a list of certificates. At some points in load_certs() there is the line: allcerts = PEM_X509_INFO_read_bio(bioCerts, NULL, NULL, NULL); Until recently this has all worked ju

Re: sample code.

2000-12-22 Thread Stephane Bortzmeyer
On Thursday 21 December 2000, at 19 h 22, the keyboard of Mahesh Anantharaman <[EMAIL PROTECTED]> wrote: > Can any body send me a sample code that does "openssl smime decrypt > function". OpenSSL can do S/MIME? I wasn't aware of that. And I cannot find documentation.

RE: Converting IIS4 to SSL NET format

2000-12-22 Thread Reiner Buehl
Can you export the key pair in any way? Best Regards, Reiner. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Brett Glennon > Sent: Thursday, December 21, 2000 22:10 > To: [EMAIL PROTECTED] > Subject: Converting IIS4 to SSL NET format > > > > i

RE: Dumb question- Sorry

2000-12-22 Thread Thomas Bätzler
Hi, > Michael Conley [SMTP:[EMAIL PROTECTED]] asked: [...] > My question is how do I control which files can be accessed via http and > which can only be accessed by https? [...] That's rather an Apache or mod_ssl than an OpenSSL question. Basically, you might want to consider to create a virtu