Re: Compiling on MacOS X Server/Rhapsody 5.6

Alexandre edit apps/Makefile so that the line for CFLAGS reads CFLAGS= -DMONOLITH $(INCLUDES) $(CFLAG) -DUSE_TOD Stuart > > I'm trying to compile 0.9.6 on MacOS X Server 1.2v3 + devel package. It > configures good (./config --prefix=/usr), but it complains a bit about > multi-threading. But

Compiling on MacOS X Server/Rhapsody 5.6

I'm trying to compile 0.9.6 on MacOS X Server 1.2v3 + devel package. It configures good (./config --prefix=/usr), but it complains a bit about multi-threading. But when making, in apps, when linking openssl itself, some symbols do not resolve: cc -o openssl -DMONOLITH -I../include -O3 -DB_ENDIAN

Windows CE and certificate authorities

Has anyone attempted to accept a new certificate authority (we run our own) into Windows CE? It appears that we can't and, consequently, Windows CE users can't access pages or SSL services we've signed. Any ideas? Thanks! Wyman Miles Senior Systems Administrator, Rice University, Texas. (71

mod_ssl... what next?

I have a basic question (or group of questions) that may seem a little silly. I have managed to build Apache with mod_ssl. Now what? I mean, I have attempted to follow some example httpd.conf files and create key and crt files with openssl, but what do I do to create a secured site so that I ca

Re: RSA_public_encrypt() problems.

Dr S N Henson wrote: > "Jason A. Aras" wrote: > >> I am working on a quick C hack to test out the use of the RSA encryption >> functions. When i make a call to RSA_public_encrypt() it sometimes >> fails (but does not return a -1) and sometimes works. >> > > What makes you think it fails?

re: Help with Win32

Title: BTW, I noticed that ssl.h was in the include\openssl directory (which wasn't picked up by the Makefile.PL script), so I modified the Makefile.PL script to force it to use openssl\ssl.h. It gets farther, but hates it anyway. Help! :( --Scott B

Re: overloaded functions..commenting out doesn't works!!

On Thu, Jan 04, 2001 at 11:24:07AM -0800, Fateh Kausar wrote: > System = SunOS > Release = 5.6 > KernelID = Generic_105181-19 > Machine = sun4u > Compiler = gcc for sparc-sun-solaris2.6 > > I have successfully installed OpenSSL and it is while compiling the code > where I am making use of the SSL

Re: RSA_public_encrypt() problems.

"Jason A. Aras" wrote: > > I am working on a quick C hack to test out the use of the RSA encryption > functions. When i make a call to RSA_public_encrypt() it sometimes > fails (but does not return a -1) and sometimes works. > What makes you think it fails? > When it fails it returns the leng

configuring openssl

Title: Blank Hai guys, I am working on LibWWW for sending Mail to OutLook Web Access Server.Basically I need help for How to configure openssl on IIS and How to generate certificates ,How to encrypt data on LibWWW software  

RE: overloaded functions..commenting out doesn't works!!

Hi!, The missing information are: System = SunOS Release = 5.6 KernelID = Generic_105181-19 Machine = sun4u Compiler = gcc for sparc-sun-solaris2.6 I have successfully installed OpenSSL and it is while compiling the code where I am making use of the SSL lib that I am getting problem. Lutz as do

Re: overloaded functions..commenting out doesn't works!!

* Lutz Jaenicke <[EMAIL PROTECTED]> [010104 12:59]: > On Thu, Jan 04, 2001 at 10:30:49AM -0800, Fateh Kausar wrote: > > I am so thankful to you.It finally worked, but could you please tell me why > > my code was building fine when I was not using OpenSSL. > > Thanks and regards. > > -Fateh > > >

Re: overloaded functions..commenting out doesn't works!!

On Thu, Jan 04, 2001 at 10:30:49AM -0800, Fateh Kausar wrote: > I am so thankful to you.It finally worked, but could you please tell me why > my code was building fine when I was not using OpenSSL. > Thanks and regards. > -Fateh > > P.S. But the problem with des.h stays for I am forcing the OpenS

RSA_public_encrypt() problems.

I am working on a quick C hack to test out the use of the RSA encryption functions. When i make a call to RSA_public_encrypt() it sometimes fails (but does not return a -1) and sometimes works. When it fails it returns the length of a string, but a strlen() on the 'to' variable is not equal

RE: overloaded functions..commenting out doesn't works!!

Hi! Lutz, I am so thankful to you.It finally worked, but could you please tell me why my code was building fine when I was not using OpenSSL. Thanks and regards. -Fateh P.S. But the problem with des.h stays for I am forcing the OpenSSL lib to use a different signature of the crypt function by def

Re: Mail server invalidates my sig

Ok. It works when there is no attachment. But it still does not display the trailer on signed email unless I view the source. Sorry for the off-topic content. "Patrick G. Moore" wrote: > > I am running Netscape 4.7 something. When > I get the mail back from the list the sig > is invalid. The

Netscape/IE SSL inconsistencies

I use both Netscape and IE browsers to attempt to create SSL connections to an Apache server w/ ModSSL. IE is able to connect without a problem, but Netscape returns the error "The security library has encountered an improperly formatted DER-encoded message." Note that the exact same SSL server c

Mail server invalidates my sig

I am running Netscape 4.7 something. When I get the mail back from the list the sig is invalid. The Bcc was valid. I think the only difference is the trailer that was put on by the mail server. This should not matter but with netscape it does. I have not yet tried it with openssl smime. BTW:

RE: mod_ssl / openssl for win32 trouble

Thanks for the response! I've got 2 Apache servers setup and I switch a router setting to direct traffic to one or the other. The first is a Solaris system, the second is Win32. Everything works fine when the Solaris system is being used, so that pretty much rules out a client-side problem. The

openssl smime question.

Hi In openssl smime -verify option, how will I retrieve the the whole mail back in a readable format. Will the -out give me the body of the message so that I can reconstruct the mail back. I would like to have the body of the message according to the specification. RFC-822, RFC-2045, and RFC-204

Re: mod_ssl / openssl for win32 trouble

I dont want to confuse you, so please disregard this if it sounds too extrange. I have seen similar problems when the proxy configuration wasnt correct because the ports were wrongly mapped.Also, when a router in the path between client and server had a broken router wich set the "DF" bit in TCP/I

Re: How do I create certificate requests from pubkey?

Hi, I had to use some legacy keys in my system. So I modified the request function with a new option to read the key from a file. For the private part of the key, I just put a bogus value. Of course the signature on the request was then invalid. I then modified the CA program with an option t

mod_ssl / openssl for win32 trouble

Hi List. Sorry for this not being specifically OpenSSL related.   I successfully installed SSL into my win32 Apache server (1.3.14 / 2.7.2 / 0.9.6) and it seemed to be working properly. However, some client connections are timing out. The problematic connections appear to have the following

Re: non-interactive use?

On 4 Jan, Thomas Ackermann wrote: > so i browsed through the manpages, tried the pipe suggested above, tried > other pipes but didn't get a success. > the openssl program requires that the password is entered and only after > that happened the piped things are > applied... > sounds weird, got to

Running openssl client

Hi all, I have compiled the openssl source code and now try to run the client with     openssl s_client -connect host.myserver.com:3444 But the connection doesn't complete ... Is there something special to do before running an ssl client (like getting  certificat, registeringt to the server or ..

SSL_connect: error in SSLv3 write client key exchange A

Hello! I tried to compile and link w3c-libwww-5.3.1 and openssl-0.9.6 together under the HP-UX 11 using gcc version 2.95.2 19991024 and I succeeded. After that I tried to run sample application wwwssl.c. To do so I used the MSIIS 4.0 and created for it a certificate using the MS Certificate Se

RE: Crypt::SSLeay

Title: RE: Crypt::SSLeay Hello Joshua, Thanks for the feedback.  I was able to run the "perl makefile.pl" command.  There were still some warnings like "Note (probably harmless): No library found for 'libssleay32.lib'."  The path to OpenSSL on my machine is d:/perl/OpenSSL Now, when I run n

SV: SV: Extracting Policy OID in X.509v3 extension

It doesn't return a POLICYINFO pointer. It returns a STACK_OF(POLICYINFO) pointer. Sorry. You're right, off course, so now it works just fine. I guess when you get more experienced with OpenSSL/extension it will be more obvious what type is returned from X509_get_ext_d2i(). Thanks a lot! K

help needed

Hi, I'm newbie using openssl. I installed it in my server linux 6.1 redhat (openssl-0.9.6) it installed successfully. Now what i should doing for using it? i don't see any running steps for it over it's docs. Someone who use it. plz help me. When i try to use my outlook over port 995 ( secure

Re: non-interactive use?

Thomas Ackermann wrote: > > Dr S N Henson wrote: > > > Thomas Ackermann wrote: > > > > > > searching for a possibility to sign certificates non-interactively for > > > use in a web-form.. > > > anyone any solutions for that ? > > > > The 'x509' utility can be used to sign certificates in a non i

Re: SV: Extracting Policy OID in X.509v3 extension

"Hellan,Kim KHE" wrote: > > > Thanks! > But this function doesn't seem to return the correct pointer. > I have the following code: > > int iCrit; > POLICYINFO* pinfo; > pinfo = (POLICYINFO*) X509_get_ext_d2i(pCert, NID_certificate_policies, > &iCrit, NULL); > > BIO* bioID = BIO_new( BIO_s_mem(

Certificate and SSL API

Hello, I m writing a web server and I need to add the SSL stack. So, I looked to the serv.cpp example and tried to modify it to my need. And if I m using the foo-cert.pem file given with the example, I can connect with a web browser (netscape) with no problem, the certificate is downloaded and th

Re: non-interactive use?

Dr S N Henson wrote: > Thomas Ackermann wrote: > > > > searching for a possibility to sign certificates non-interactively for > > use in a web-form.. > > anyone any solutions for that ? > > The 'x509' utility can be used to sign certificates in a non interactive > manner. > > You can also generat

SV: Extracting Policy OID in X.509v3 extension

"Hellan,Kim KHE" wrote: > > OpenSSL sees the X509v3 Certificate Policies extension as a "raw" extension, > but how do I extract "field" values (like PolicyIdentifier or UserNotice) > from such an extension? You do this the same as any other extension. Use X509_get_ext_d2i(), see the docs in doc

SSL

Dear Sirs,   Please explain how do you act when the same owner has different sites. Do we have to register every site or is it possible to use only once registered certificate for the same company?   Thanks in advance, Rikard Högberg

Re: Crypt::SSLeay

> [EMAIL PROTECTED] wrote: > > Hello: > > I am trying to install the Crypt::SSLeay module on my Win NT 4.0 sp 4 machine. I >compiled the OpenSSL module as the readme.txt instructed (this > compiled cleanly), and now I am trying run the command "Perl Makefile.pl" for the >Crypt::SSLeay module.

Re: Extracting Policy OID in X.509v3 extension

"Hellan,Kim KHE" wrote: > > I have a certificate with an X509v3 Certificate Policies extension. > That extension contains a PolicyIdentifier "field" from which I want to > extract the value. > > OpenSSL sees the X509v3 Certificate Policies extension as a "raw" extension, > but how do I extract "

Extracting Policy OID in X.509v3 extension

I have a certificate with an X509v3 Certificate Policies extension. That extension contains a PolicyIdentifier "field" from which I want to extract the value. OpenSSL sees the X509v3 Certificate Policies extension as a "raw" extension, but how do I extract "field" values (like PolicyIdentifier or

Re: How do I create certificate requests from pubkey?

unshine sun wrote: > hiI want to converting public key to certificate requests. How do it? You can't. You need the private key in order to create what is called a proof of possession. i.e. the system is conceived so that you can't just take the public key and create a certificate request with t

OpenSSL 0.9.6 with WIN16

Hi, I want do upgrade an 16-Bit Application using SSLeay 0.8.1 to OpenSSL 0.9.6. I have tried to build the 16-Bit OpenSSL Version but there are some compilation errors. My environment is discribed below: System:WinNT 4.0 SP5 Compiler: VC++ 1.52 The error occurs during compilation of t

Re: overloaded functions..commenting out doesn't works!!

On Wed, Jan 03, 2001 at 05:55:05PM -0800, Fateh Kausar wrote: > The des.h translation unit says > > #ifdef HEADER_DES_LOCL_H > char *crypt(const char *buf,const char *salt); > #else > char *crypt(); > #endif > > I tried forcing the OpenSSL library to use char *crypt(const char*, const > char*) b