Re: 2 quick questions

Billy, This question probably belongs on -users, so I'll reply there. I'm only going to answer the second part. Hey, BIO's are not always so hard! Suppose you have your certificate in buffer 'cert_buf' and it is 'cert_len' bytes long. Then BIO *cert_bio = BIO_new_mem_buf( cert_buf, cert_len)

Re: ????????--???

Title: Re: --??? What is this crap? From: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 13 Feb 2001 23:17:58 +0800 To: <[EMAIL PROTECTED]> Subject: --???   ?2001?2?14? | | |     TOP 5 ---?1

Re: ranlib errors?

From: Dan Kegel <[EMAIL PROTECTED]> dank-bbench> Today I noticed an odd error coming from 'make install': dank-bbench> dank-bbench> installing libcrypto.so dank-bbench> /usr/bin/ranlib: /home/dank/di/stage/lib/libcrypto.so: File format not recognized dank-bbench> dank-bbench> $ file /home/dank

Using fds in place of temp files

Being able to pass passwords via file descriptors is great when calling openssl from another application. However, it would be nice if file descriptors could be passed -anywhere- a file was expected, perhaps by prepending an ampersand. For example, in a Perl script or from a MUA, i could create tw

Re: egd on AIX

On Fri, Feb 23, 2001 at 11:53:11AM -0600, Ricardo Santos Quintero wrote: > I have been reading docs and I still haven't found the way to make > openssl works on my AIX box. AIX does not has a /dev/random, so my system > isn't able to generate a pool of ramdom data. I found in the openssl docs

ranlib errors?

I just switched from openssl-0.9.4 to 0.9.6; it seems to have easier support for shared libraries, which is nice. Today I noticed an odd error coming from 'make install': installing libcrypto.so /usr/bin/ranlib: /home/dank/di/stage/lib/libcrypto.so: File format not recognized $ file /home/dank/

RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board

There's a known issue with the openssl speed test when running the OpenSSL 0.9.6 engine version with Cryptoswift on Solaris; it will be addressed in a future release. The situation which is causing a routine in the speed test to be interrupted does not occur in Apache, so you should still be able

Re: Protocol messages

Tat, This is an SSLv2 backward compatible hello message carried in an SSLv2 record layer. The first byte 0x80 has the high bit set to1, which signals that the length of the record should be computed from the remaining 7 bits of the byte and the next byte, thus the length of the record is 0x5b

Re: echoping 4.1 released : a tool to test SSL servers

Hi there, Before I reply - why the cross-posting? There's been a lot of cross-posting between mod_ssl-users and openssl-users - are there good reasons for it? I can only assume that subjects fit for both lists at the same time probably involve people who are on both lists anyway ... On Wed, 14 F

OpenSSL Enging and nCipher

I just compiled and installed OpenSSL 0.9.6 Engine on Solaris 7 and am now trying to get it to work with my nCipher box. I was trying to do the speed test with engine flag to see if my setup was working but got an error saying the engine flag was invalid. I then man'ed speed only to find out

egd on AIX

Hi. I have been reading docs and I still haven't found the way to make openssl works on my AIX box. AIX does not has a /dev/random, so my system isn't able to generate a pool of ramdom data. I found in the openssl docs that I can work with egd to generate the pool so I installed egd and

Re: virtual memory exhausted

From: Geoff Thorpe <[EMAIL PROTECTED]> geoff> Richard, you're comparing us to car dealers? Gee ... thanks ... Only very figuratively, trust me. :-) -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \

Re: virtual memory exhausted

Hi there, On Fri, 23 Feb 2001, Richard Levitte - VMS Whacker wrote: > (this is to be compared to talking with your car dealer. You won't > get an answer by just calling them and say "there's something wrong > with my car, tell me how I get it right") Richard, you're comparing us to car dealers

Protocol messages

According to my SSL book, a clientHello looks like this: (decimal values) 22 3 0 13 0 But what I get from my SSL client is this: (in hex) 80 5b 01 03 01 00 42 ... Which looks nothing like the book says, but it works anyway. Then with my Netscape LDAP client, the cipher and compr

No Subject

  Ted Gilchrist Network Administrator NACCO Industries, Inc.  

Converting ascii certificate to binary

Hello I am pulling a CRL from a directory via LDAP. The CRL is coming back as {ASN}3080. How can I convert this with the openSSL tools to be able to call _getLastUpdate(x) and _getNextUpdate(x)? Thanks D. __ OpenSSL P

encrypts fine on AIX, same function NOT on linux.

Hi, I am building a piece of software with authentication. I have a server node and a client node. The server runs on SuSE linux 7.0 , the client runs AIX 4.3.3.0. the software is made with gnu c++. I have a function in which a certificate(self-made) is being generated. The certificate I am us

Re: virtual memory exhausted

how much ram is in the redhat 6.1 system? how much swap? have you compiled anything else ?? say XFree86 or a kernel?? --jason __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board

Thanks for the diagnostic program. With the delivery by Sun an other program called cstest located in /opt/SUNWconn/sunsecure/vts/bin. This program has other options, but finally returns similar output. csdiag showed that when running openssl speed rsa1024 -engine cswift, the card processed 144

Openssl-0.9.6 Test rsa using engin cswift card on Sun Solaris2.7 gives an error.

I am in the process of testing Apache1.3.17 / Reverse Proxy via SSL using mod_ssl-2.8.0-1.3.17 with openssl-0.9.6-engine. We use the Rainbow CryptoSwift card as hardware accelerator installed on Sun Ulta60 sparc. After installing openssl ./config shared - -prefix=/usr/local/ap17e/openssl - - o

Re: virtual memory exhausted

>Well, if you gave us a bit more detail, as in exactly what way you >have tried to use it and things like, I think we might have a little >chance to actually tell you... Aaaah telling it to others all the time.. The problem was caused by ulimits, and perhaps some other stuff. I raised ulimits

Re: DH_generate_parameters and primes

Hi Greg, Both client and server DH_compute_key return '8' (the correct secret size), but the server (which happens to compute the shared key after the client) still calculates a shared key different from the client. Are there any common pitfalls I should be looking at? I've checked my ntohs

Re: virtual memory exhausted

From: "B." <[EMAIL PROTECTED]> ouwerkerk92> I've tried to install openssl-0.9.6 on a few boxes. Went fine on ouwerkerk92> Slackware but not so good on Redhat (6.1). They both use gcc 2.91.66 ouwerkerk92> ouwerkerk92> The Redhat box comes with a 'virtual memory exhausted' message. ouwerkerk92>

recognize end user certificate

All, I have this file : -BEGIN CERTIFICATE- MIIDDTCCAfWgAwIBAgIQMDAwMDk3NTQ4Nzg5MjAwMDANBgkqhkiG9w0BAQUFADBV .. FzbT9dOSjeYe1g/iET+7loA= -END CERTIFICATE- Is there a way (using "openssl x509 ... " I suppose) to recognize if this certificate is an end user certificate o