RESEND: Importing self-made CA's under RedHat Linux OS w/ Netscape

2001-03-05 Thread Auteria Wally Winzer Jr.
I'm having problems importing certs under RedHat Linux/Netscape 4.7. It bombs w/ invalid format, even though I've created *.p12 using pkcs12. Am I missing something? since this is UNIX do I copy the *.pem to *.p12? Thanks. - Wally Winzer Jr. BTW, importing pkcs12 into Windoze works as expected.

Manuals for CA and self certificate setup

2001-03-05 Thread Erick Perez - CriptoData Panama
I´m new to this list and found that in the OpenSSL site the manuals are far from complete. I need orientation in how to setup my Mandrake 7.2 Linux box as a CA and create my own certificates. Not using RSA but some other crypto . This will be used to secure web, pop and telnet sessions. thanks, E

Re: License Questions

2001-03-05 Thread David Schwartz
> My opinion: if you distribute the proxy code as a separate package and > the rest of your application doesn't call OpenSSL and your proxy and > application aren't bundled together in one distribution, then you can > get away with only acknowledging the use of OpenSSL in your proxy > distributio

2.8.1 install bug on win32

2001-03-05 Thread tjww
Hi, When I run configure.bat to patch apache with modssl, it show error msg > Global symbol "$first2" requires explicit package name at configure.bat line 269. > BEGIN not safe after errors--compilation aborted at configure.bat line 283. I am not family with perl, anybody who can tell me how t

Re: License Questions

2001-03-05 Thread Richard Levitte - VMS Whacker
From: Alex Graveley <[EMAIL PROTECTED]> My comments below are my opinions only. Do not go around saying it's official OpenSSL policy even though I am an OpenSSL developper. alex> 1) What constitutes "use"? static linking, dynamic linking, runtime alex> linking using dlopen(), all of the above?

Thumbprint of Digital ID

2001-03-05 Thread Sandipan Gangopadhyay
I used Xenroll and openssl to create a Digital ID on a Windows System. This is working fine. I can use it to sign emails.   My question is that when I view this certificate on IE or OE, Windows shows the digital ID's SHA1 Thumbprint.   This obviously is a hash, but of what ? The public key i

Fw: make a ssl .pem cert

2001-03-05 Thread Jim Hibbits
Hello group.  Newbie here.   I have the same question, but I'm on OpenVMS.  I can't get a cert file to pass muster, the cert file reads fail, and the SSL_accept fails.  Rather than put the details of the errors here, I'd think that I'd rather have a cookbook for a place to start, just so tha

Re: make a ssl .pem cert

2001-03-05 Thread Jim Hibbits
Hello group.  Newbie here.   I have the same question, but I'm on OpenVMS.  I can't get a cert file to pass muster, the cert file reads fail, and the SSL_accept fails.  Rather than spew the details of the errors, I'd think that I'd rather have a cookbook for a place to start, just so that the

Re: Doubt regarding BER encode(specific question)

2001-03-05 Thread chandu
Hello Dr. Henson, Thank u very much for all the replies... Now Iam perfectly clear about what I am doing. I have clearly understood the differences between the two encodings Thank u very much once again... Also thank u very much Mr. Greg for the nice pointer which explains the encodings...

make a ssl .pem cert

2001-03-05 Thread Scott Grayban
Ok I have Openssl compiled on my windows machine. And i want to make a ssl cert for my webserver's what is the process i need to go through make a self-signed cert in the .pem format? I have tried the examples but i didnt understand them so maybe someone can explain the steps i need to go th

Re: License Questions

2001-03-05 Thread David Schwartz
> It isn't any different at all. When a program is run on Solaris, and > links with a proprietary libc, it (or the person running it) is then > forced to comply with the license restrictions of that libc, and can be > held liable for its violation. Right. OpenSSL's license has six elements.

Re: Secure Telnet

2001-03-05 Thread Kenneth R. Robinette
Date sent: Mon, 05 Mar 2001 16:01:29 -0800 To: [EMAIL PROTECTED], [EMAIL PROTECTED] From: Rodney Thayer <[EMAIL PROTECTED]> Subject:Re: Secure Telnet Send reply to: [EMAIL PROTECTED] I agree, even though we support both t

Re: Secure Telnet

2001-03-05 Thread Rodney Thayer
given the recent noise about "the S word" (ssh, which may or may not be a trademark in some places), I think the whole question of SSH vs. Telnet with TLS should be reconsidered. What's the state of the art? STUNNEL with Telnet? At 04:01 PM 3/5/01 -0500, Michael T. Babcock wrote: >http://www.op

RE: Secure Telnet

2001-03-05 Thread Michael Wojcik
> From: Michael T. Babcock [mailto:[EMAIL PROTECTED]] > Sent: Monday, March 05, 2001 4:22 PM > Richard Levitte - VMS Whacker wrote: > > ... and SSH has issues. They are possible to go around, but you have > > to be aware of them. > I have had no issues using OpenSSH at all. Are you *aware* of

How to get from self-signed CA PEM cert to DER/BER?

2001-03-05 Thread Scott Taggart
I want to import my self-signed CA cert into NS/IE. I have created the CA cert by doing: ./openssl req -new -x509 -keyout CAkey.pem -out CAcert.pem I tried the following to go from the PEM format to DER but this did not work. Also, how to you convert from DER to BER, or does that later versi

Re: Secure Telnet

2001-03-05 Thread Michael T. Babcock
Richard Levitte - VMS Whacker wrote: > If by "secure" you mean "encrypted", there are alternatives. stelnet > or telnet-ssl is one alternative, Kerberos telnet is another. The > latter demands a bit more infrastructure, however... ssh requires almost no effort on the administrator's part to us

Re: License Questions

2001-03-05 Thread Alex Graveley
Hi, I am asking for clarification more than anything else. Given that I am not intending to redistribute OpenSSL or modify the OpenSSL library at all, could you explain some of the terms I've found confusing in the openssl license? 1) What constitutes "use"? static linking, dynamic linking, run

How to verify certificate witouth saving.

2001-03-05 Thread Petr Holub
Hi everybody, I have problem with verifing certificate. I'm sending temporary_certificate signed by user_certificate (that one I'm sending too) into my server. The user_certificate is signed by CA (my server has CA's certificate). I need to use the temporary

PKCS7_cert_from_signer_info with signed_and_enveloped p7...

2001-03-05 Thread Marco Donati
why the ''PKCS7_cert_from_signer_info'' function checks if the PKCS7 is signed but not signed_and_enveloped ? I need to extract the signer cert form a multi-signature AND multi-recipient PKCS7 (signed_and_enveloped with more than one SignerInfo and more than one RecipientInfo). What I've do

Problem with verification of a certificate

2001-03-05 Thread Petr Holub
Hi, I have a problem with verification of a certificate. I have temporary certificate signed from other certificate which is signed from my CA. I need to verify this temporary certificate. If I use openssl ver: OpenSSL 0.9.3a 29 May 1999, everything is ok. example: ./openssl verify -verbose -CA

remove

2001-03-05 Thread Elisee NGAN TAMBA
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Copy RSA key to memory

2001-03-05 Thread Vincent Ficet
Hi all. Apologies if the following code is weird, I am new to open-ssl, all suggestions welcome :-) I need to copy some private key information into memory, and I am using a BIO for this. Code is as follows : key=BIO_new(BIO_s_mem()); buffer=BUF_MEM_new(); BIO_set_mem_buf(key, buffer

Please try to run this openssl-RSA code on linux !

2001-03-05 Thread nl89071
Hi, Because I cant find the problem in this piece of source code and I would like to ask you for help. Would you please try to run this code on linux. I have run this source on AIX and it runs fine. When I run it on linux things dont work. I have Suse linux 7. Maybe you could help me find th