Re: Compiling OpenSSH w/OpenSSL & KerberosIV

2001-02-07 Thread Richard Levitte - VMS Whacker
From: "Kenneth R. Robinette" <[EMAIL PROTECTED]> That was a serious case of not reading the subject line, wouldn't you say, Ken? Matt, could you show us a log of your attempt to compile OpenSSH, so we may see what's actually giong wrong? support> How are you getting the Kerberos headers in the

MSIE-5 can't connect to a secured server, but Netscape-4.x can

2001-02-07 Thread maxi_hui
Hello, I am indeed using Apache 1.3.12 with openssl 0.9.6. Here summarize what I did after the compilation of Apache with openssl : (1) Generate CA' certificate : # CA.pl -newca Making CA certificate ... Using configuration from /usr/local/openssl/openssl.cnf Generating a 1024 bit RSA private k

Re: Adding root ca to Communicator

2001-02-07 Thread dm
Steve, > You need to send the certificate as MIME type > application/x-x509-ca-cert > see: How do you convert the certificate (PEM format) to this format? > > http://home.netscape.com/eng/security/comm4-cert-download.html Thanks, Mohan --- Dr S N Henson <[EMAIL PROTECTED]> wrote: > dm wrote

RE: Unable to extract the downloaded tar

2001-02-07 Thread Daniel Cunningham
Hi Sumanta: No, John is right. WinZip 8.0 will not handle it. It's too darn "smart". (Darn falutin' software!!! ) For a Win32 platform, you should use WinZip 7.0. Step #2 (be forewarned, you're going to groan!!!) You're simply missing the "z" flag in your tar command, e.g.: mkdir ~/tmp

client authentication

2001-02-07 Thread dm
Hi, I am working on doing client authentication. I could successfully import the certificate in the browser and could authenticate the client. My question is: How does the browser get the private key? Shouldn't it be needing that for authentication? Isn't that there is some challenge thrown b

Error code 1 during "make test"

2001-02-07 Thread Nelson Henry Eric
Got the following error during "make test." Does that mean I should not install openssl until the issue is solved? The build itself seemed to finish without any errors or warnings. -- begin error message -- ./randtest assertion "md_c[1] == md_count[1]" failed: file "md_rand.c",

RE: Compiling problems on Windows NT

2001-02-07 Thread Ian Cain
To Whom Ever Cares, I just finished compiling openssl 0.9.6 on win2k server and NT 4.0 server No problems. Used ml.exe assembler and Visual Studio 6.0 Heres what I did: 1a) downloaded openssl-0.9.6.tar.gz. Double clicked the file and used winzip 7.0 to extract the file in the c:\openssl-0.9.6

Re: Adding root ca to Communicator

2001-02-07 Thread Dr S N Henson
dm wrote: > > Hi, >Is it possible to add a Root CA certificate to > Netscape Communicator browser? > I am the root ca in this case and what I want is that > Communicator should validate the server cert issued by > me (without any warnings it should validate through > the root CA cert). How ca

Re: Cipher suite

2001-02-07 Thread Dr S N Henson
Patrick Li wrote: > > Hi, > > I am trying to match the cipher suite supported by OpenSSL (listed out by > the command openssl ciphers -tlsv1) to the cipher suite specified in the TLS > Protocol version 1 IETF RFC 2246. But they seemed to be using different > naming conventions. The cipher sui

Re: Compiling OpenSSH w/OpenSSL & KerberosIV

2001-02-07 Thread Kenneth R. Robinette
From: [EMAIL PROTECTED] Date sent: Wed, 7 Feb 2001 19:58:24 -0500 (EST) To: <[EMAIL PROTECTED]> Copies to: <[EMAIL PROTECTED]> Subject:Compiling OpenSSH w/OpenSSL & KerberosIV Send reply to: [EMAIL PROTECTED]

Problem becoming a CA/signing my own Cert's

2001-02-07 Thread Steve Williams
Hi, I am trying to get sendmail STARTTLS working, and have gotten to the point where I need a certificate. This is completely new to me, and I have followed three different sets of directions, and always come up with the same error message when I finally go to sign my own certificate. ( I am j

RE: Direct read of RSA public key

2001-02-07 Thread Reddie, Steven
An RSA private key, in addition to containing the private key components, contains the components of the associated RSA public key. A public key consists of the following components: n, e A private key consists of the following components: n, e, d, p, q, dmpq, dmq1, iqmp So, when

Compiling OpenSSH w/OpenSSL & KerberosIV

2001-02-07 Thread gcc
OpenSSL Folks (sorry about crosspost), It seems that the des.h header in OpenSSL is incompatible with my MIT kerberos des.h, at least on Linux. I'm seeing various conflicting types (bit_64, des_key_sched, &c). I'm using a VALinux/Redhat 7 system with KerbIV and KerbV libraries installed, using

Cipher suite

2001-02-07 Thread Patrick Li
Hi, I am trying to match the cipher suite supported by OpenSSL (listed out by the command openssl ciphers -tlsv1) to the cipher suite specified in the TLS Protocol version 1 IETF RFC 2246. But they seemed to be using different naming conventions. The cipher suite name used in OpenSSL is not fo

Adding root ca to Communicator

2001-02-07 Thread dm
Hi, Is it possible to add a Root CA certificate to Netscape Communicator browser? I am the root ca in this case and what I want is that Communicator should validate the server cert issued by me (without any warnings it should validate through the root CA cert). How can I do it? I could manage

Re: Compiling problems on Windows NT

2001-02-07 Thread Dr S N Henson
Mark Swarbrick wrote: > > Lots of luck to you - I tried to get it to compile on NT - spent weeks on > it. Couldn't get it to work and couldn't find anyone with an answer. I > finally gave up and compiled it on Linux and it works perfect on that > platform. > That's strange. I can only find one

Re: Compiling problems on Windows NT

2001-02-07 Thread Mark Swarbrick
Lots of luck to you - I tried to get it to compile on NT - spent weeks on it. Couldn't get it to work and couldn't find anyone with an answer. I finally gave up and compiled it on Linux and it works perfect on that platform. Julie Ruiz wrote: > Please could someone help me with the problem when

RE: Unable to extract the downloaded tar

2001-02-07 Thread Dutta, Sumanta
Yes, this exactly what happened. I renamed the filename, and tried with WinZip, and it worked. Anyway I was using GNU tar, but there also the name was the problem. Thanks, Sumanta. > -Original Message- > From: Hudson, Henrik H. [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, February 07, 200

RE: Unable to extract the downloaded tar

2001-02-07 Thread Hudson, Henrik H.
Hello- A) Your OS absolutely destroyed the file name (let me guess, IE or Netscape on M$?). Rename the file to what it is supposed to be: openssl-0.9.6.tar.gz B) Winzip should work if it is renamed to the right name. If it still doesn't work..then on Solaris, if the tar you are using is not

Re: Unable to extract the downloaded tar

2001-02-07 Thread Patrick Li
I thought the tar file should be called openssl-0_9_6_tar.gz if you downloaded it from the openssl site. On unix you can extract the file using these commands. gunzip openssl-0_9_6_tar.gz tar -xvf openssl-0_9_6_tar Hope this help - Original Message - From: Dutta, Sumanta <[EMAIL PROTEC

RE: Unable to extract the downloaded tar

2001-02-07 Thread Dutta, Sumanta
Thanks for the response. I tried with WinZip 8.0, assuming its downward compatible, but doesn't work. How can I do it under Sun Sparc OS v5.6. I tried with "tar xvf". Again, could you please redirect me to any instruction site for OpenSSL setup. Regards, Sumanta > -Original Message- > Fr

Re: Compiling problems on Windows NT

2001-02-07 Thread Dr S N Henson
Julie Ruiz wrote: > > Please could someone help me with the problem when I am compiling de > OpenSSL, it is urgent > What I am doing wrong??? > Can you help me with the installation??? > > I am trying to install the OpenSSL but it > fails. > I am working on Windows NT Workstation 4.0 so I i

Re: Certificate Renewal

2001-02-07 Thread John Douglass
On Wed, 7 Feb 2001, John Douglass wrote: > Is anyone playing around with certificate renewals? > > I'm trying to figure out how to accomplish this given: > > 1) Certificate is installed in the browser already > 2) I have the certificate (SPKAC) file on the CA > 3) I have the signed public key

Re: 20 Million Fresh E-Mail Addresses

2001-02-07 Thread Boris
Hello Luke2, ** this message is generated automatically ** your email is rated as SPAM. We have reported your SPAM activity and we reported your spam to several antispam-companies to protect them against you. This process is done automatically. Do not try to reply to this message, you are banne

Server Certificate verification

2001-02-07 Thread Frank Roeding
Hi everybody,     my english is not so good, but i try to explain my problem. i connect to a server with my client-application. All works fine if i set had verification off. if i set the verification, the servercertificat was bad (verification- error 19). i think the problem is that i have

Compiling problems on Windows NT

2001-02-07 Thread Julie Ruiz
Please could someone help me with the problem when I am compiling de OpenSSL, it is urgent What I am doing wrong??? Can you help me with the installation??? I am trying to install the OpenSSL but it fails. I am working on Windows NT Workstation 4.0 so I installed the Mingw32 package. GNU mak

RE: can I obtain certificate expiry dates using openssl?

2001-02-07 Thread Dicks, Gareth M
Hi Greg, Many thanks, you seem to have a good handle on this and have explained well. I'll give this a whirl but watch your inbox for more help!! Regards, Gareth -Original Message- From: Greg Stark [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 06, 2001 7:25 PM To: Dicks, Gareth M;

Client certificate from perl script

2001-02-07 Thread Knut Olav Bøhmer
Hi I wonder if it is possible to make the following script use my client sertificate, or do I have to do it in some other way? I have tryed to read the examples, doc's and man pages, but I don't understand them 100%. I got some files with X509 certificates, that i am suppose to use, but i am no

RE: PERL and secure Sockets

2001-02-07 Thread Bill Stennett
The Crypt::SSLeay works OK. Unfortunately Activestate don't seem to have a version of IO-Socket-SSL for the WIN32 platform (only linux and solaris) so I think we may have to look at something other than PERL. Thanks for your help Bill Stennett -Original Message- From: [EMAIL PROTECTED

my posts for help getting DSO and mod_blah running

2001-02-07 Thread terr
DUe to a malformed lib.so it didn't work. in apache_1.3.14+openssl_1.42 it appears the apxs script gets broken. I have it running now. I also have a sample script from a friend who helped me and I'll start going thru ot tomorrow. ... still don't know why apxs broke. I'll look into that to

猎星人事信息快递--个人版

2001-02-07 Thread news
Title: Untitled Document ÁÔÐÇÈËÊÂÐÅÏ¢¿ìµÝ£º2001Äê2ÔÂ7ÈÕ Èȵ㹤×÷ | ÈËÊÂÐÂÎÅ | ÇóÖ°°Ù¿Æ | ÈËʰ¸Àý Èȵ㹤×÷ TOP 5

Re: Resources about setting up CA?

2001-02-07 Thread terr
Raymond. We may be doing similar things and it may be useful to sahre knowledge. On Wed, Feb 07, 2001 at 09:08:16AM +0100, Elisee NGAN TAMBA wrote: > > Go to http://www.openca.org > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of LI CHEUK F