From: "Kenneth R. Robinette" <[EMAIL PROTECTED]>
That was a serious case of not reading the subject line, wouldn't you
say, Ken?
Matt, could you show us a log of your attempt to compile OpenSSH, so
we may see what's actually giong wrong?
support> How are you getting the Kerberos headers in the
Hello,
I am indeed using Apache 1.3.12 with openssl 0.9.6. Here summarize what I did
after the compilation of Apache with openssl :
(1) Generate CA' certificate :
# CA.pl -newca
Making CA certificate ...
Using configuration from /usr/local/openssl/openssl.cnf
Generating a 1024 bit RSA private k
Steve,
> You need to send the certificate as MIME type
> application/x-x509-ca-cert
> see:
How do you convert the certificate (PEM format) to
this format?
>
>
http://home.netscape.com/eng/security/comm4-cert-download.html
Thanks,
Mohan
--- Dr S N Henson <[EMAIL PROTECTED]> wrote:
> dm wrote
Hi Sumanta:
No, John is right. WinZip 8.0 will not handle it. It's too darn "smart".
(Darn falutin' software!!! ) For a Win32 platform, you should use
WinZip 7.0.
Step #2 (be forewarned, you're going to groan!!!) You're simply missing
the "z" flag in your tar command, e.g.:
mkdir ~/tmp
Hi,
I am working on doing client authentication. I
could successfully import the certificate in the
browser and could authenticate the client.
My question is: How does the browser get the private
key? Shouldn't it be needing that for authentication?
Isn't that there is some challenge thrown b
Got the following error during "make test." Does that mean I should
not install openssl until the issue is solved? The build itself seemed
to finish without any errors or warnings.
-- begin error message --
./randtest
assertion "md_c[1] == md_count[1]" failed: file "md_rand.c",
To Whom Ever Cares,
I just finished compiling openssl 0.9.6 on win2k server and NT 4.0 server
No problems. Used ml.exe assembler and Visual Studio 6.0
Heres what I did:
1a) downloaded openssl-0.9.6.tar.gz. Double clicked the file and used
winzip 7.0 to extract the file in the c:\openssl-0.9.6
dm wrote:
>
> Hi,
>Is it possible to add a Root CA certificate to
> Netscape Communicator browser?
> I am the root ca in this case and what I want is that
> Communicator should validate the server cert issued by
> me (without any warnings it should validate through
> the root CA cert). How ca
Patrick Li wrote:
>
> Hi,
>
> I am trying to match the cipher suite supported by OpenSSL (listed out by
> the command openssl ciphers -tlsv1) to the cipher suite specified in the TLS
> Protocol version 1 IETF RFC 2246. But they seemed to be using different
> naming conventions. The cipher sui
From: [EMAIL PROTECTED]
Date sent: Wed, 7 Feb 2001 19:58:24 -0500 (EST)
To: <[EMAIL PROTECTED]>
Copies to: <[EMAIL PROTECTED]>
Subject:Compiling OpenSSH w/OpenSSL & KerberosIV
Send reply to: [EMAIL PROTECTED]
Hi,
I am trying to get sendmail STARTTLS working, and have gotten to the
point where I need a certificate.
This is completely new to me, and I have followed three different sets
of directions, and always come up with the same error message when I
finally go to sign my own certificate. ( I am j
An RSA private key, in addition to containing the private key components,
contains the components of the associated RSA public key. A public key
consists of the following components:
n, e
A private key consists of the following components:
n, e, d, p, q, dmpq, dmq1, iqmp
So, when
OpenSSL Folks (sorry about crosspost),
It seems that the des.h header in OpenSSL is incompatible with my MIT
kerberos des.h, at least on Linux. I'm seeing various conflicting types
(bit_64, des_key_sched, &c).
I'm using a VALinux/Redhat 7 system with KerbIV and KerbV libraries
installed, using
Hi,
I am trying to match the cipher suite supported by OpenSSL (listed out by
the command openssl ciphers -tlsv1) to the cipher suite specified in the TLS
Protocol version 1 IETF RFC 2246. But they seemed to be using different
naming conventions. The cipher suite name used in OpenSSL is not fo
Hi,
Is it possible to add a Root CA certificate to
Netscape Communicator browser?
I am the root ca in this case and what I want is that
Communicator should validate the server cert issued by
me (without any warnings it should validate through
the root CA cert). How can I do it?
I could manage
Mark Swarbrick wrote:
>
> Lots of luck to you - I tried to get it to compile on NT - spent weeks on
> it. Couldn't get it to work and couldn't find anyone with an answer. I
> finally gave up and compiled it on Linux and it works perfect on that
> platform.
>
That's strange. I can only find one
Lots of luck to you - I tried to get it to compile on NT - spent weeks on
it. Couldn't get it to work and couldn't find anyone with an answer. I
finally gave up and compiled it on Linux and it works perfect on that
platform.
Julie Ruiz wrote:
> Please could someone help me with the problem when
Yes, this exactly what happened. I renamed the filename, and tried with
WinZip, and it worked. Anyway I was using GNU tar, but there also the name
was the problem.
Thanks,
Sumanta.
> -Original Message-
> From: Hudson, Henrik H. [SMTP:[EMAIL PROTECTED]]
> Sent: Wednesday, February 07, 200
Hello-
A) Your OS absolutely destroyed the file name (let me guess, IE or Netscape
on M$?). Rename the file to
what it is supposed to be: openssl-0.9.6.tar.gz
B) Winzip should work if it is renamed to the right name. If it still
doesn't work..then on Solaris, if the tar you are using is not
I thought the tar file should be called openssl-0_9_6_tar.gz if you
downloaded it from the openssl site.
On unix you can extract the file using these commands.
gunzip openssl-0_9_6_tar.gz
tar -xvf openssl-0_9_6_tar
Hope this help
- Original Message -
From: Dutta, Sumanta <[EMAIL PROTEC
Thanks for the response. I tried with WinZip 8.0, assuming its downward
compatible, but doesn't work. How can I do it under Sun Sparc OS v5.6. I
tried with "tar xvf". Again, could you please redirect me to any instruction
site for OpenSSL setup.
Regards,
Sumanta
> -Original Message-
> Fr
Julie Ruiz wrote:
>
> Please could someone help me with the problem when I am compiling de
> OpenSSL, it is urgent
> What I am doing wrong???
> Can you help me with the installation???
>
> I am trying to install the OpenSSL but it
> fails.
> I am working on Windows NT Workstation 4.0 so I i
On Wed, 7 Feb 2001, John Douglass wrote:
> Is anyone playing around with certificate renewals?
>
> I'm trying to figure out how to accomplish this given:
>
> 1) Certificate is installed in the browser already
> 2) I have the certificate (SPKAC) file on the CA
> 3) I have the signed public key
Hello Luke2,
** this message is generated automatically **
your email is rated as SPAM. We have reported your SPAM activity and
we reported your spam to several antispam-companies to protect them
against you.
This process is done automatically. Do not try to reply to this
message, you are banne
Hi everybody,
my english is not so good, but i try to explain my
problem.
i connect to a server with my client-application.
All works fine
if i set had verification off.
if i set the verification, the servercertificat was
bad (verification-
error 19). i think
the problem is that i have
Please could someone help me with the problem when I am compiling de
OpenSSL, it is urgent
What I am doing wrong???
Can you help me with the installation???
I am trying to install the OpenSSL but it
fails.
I am working on Windows NT Workstation 4.0 so I installed the Mingw32
package. GNU mak
Hi Greg,
Many thanks, you seem to have a good handle on this and have explained well.
I'll give this a whirl but watch your inbox for more help!!
Regards,
Gareth
-Original Message-
From: Greg Stark [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 06, 2001 7:25 PM
To: Dicks, Gareth M;
Hi
I wonder if it is possible to make the following script use my client
sertificate, or do I have to do it in some other way? I have tryed to read
the examples, doc's and man pages, but I don't understand them 100%.
I got some files with X509 certificates, that i am suppose to use, but i
am no
The Crypt::SSLeay works OK. Unfortunately Activestate don't seem to have a
version of IO-Socket-SSL for the WIN32 platform (only linux and solaris) so
I think we may have to look at something other than PERL.
Thanks for your help
Bill Stennett
-Original Message-
From: [EMAIL PROTECTED
DUe to a malformed lib.so it didn't work. in apache_1.3.14+openssl_1.42 it appears
the apxs script gets broken.
I have it running now.
I also have a sample script from a friend who helped me and I'll start going thru ot
tomorrow.
... still don't know why apxs broke. I'll look into that to
Title: Untitled Document
ÁÔÐÇÈËÊÂÐÅÏ¢¿ìµÝ£º2001Äê2ÔÂ7ÈÕ
Èȵ㹤×÷
| ÈËÊÂÐÂÎÅ
| ÇóÖ°°Ù¿Æ
| ÈËʰ¸Àý
Èȵ㹤×÷
TOP 5
Raymond.
We may be doing similar things and it may be useful to sahre knowledge.
On Wed, Feb 07, 2001 at 09:08:16AM +0100, Elisee NGAN TAMBA wrote:
>
> Go to http://www.openca.org
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of LI CHEUK F
32 matches
Mail list logo