Re: License Issue

2001-03-06 Thread David Schwartz
Since OpenSSL does not exist as an entity that requires contributors to sign over their legal interests in their contributions, it is my opinion that each contributor retains their legal interest in their contributions. By contributing it to OpenSSL, one can argue that they've consented to th

Re: enhancement request: 0.9.6 error message quality when RAND fails

2001-03-06 Thread Lutz Jaenicke
On Tue, Mar 06, 2001 at 11:57:01AM -0800, Dan Kegel wrote: > Here's a lengthy description of a situation where > a better error message would be nice. See below. > I have a program that was working fine with OpenSSL 0.9.4 > on both Linux and Solaris. I updated to OpenSSL 0.9.6 > and it still wor

License Issue

2001-03-06 Thread Kenneth R. Robinette
Just as a point of reference, who is OpenSSL. Is it a corporation, a public trust, a private company or what? If we had a license issue, and I wanted our attorney to clarify any license issues, where does he go? Would any agreement made be legally binding? If so, under the laws of what cou

enhancement request: 0.9.6 error message quality when RAND fails

2001-03-06 Thread Dan Kegel
Here's a lengthy description of a situation where a better error message would be nice. I have a program that was working fine with OpenSSL 0.9.4 on both Linux and Solaris. I updated to OpenSSL 0.9.6 and it still works fine on Linux, but failed on Solaris. The program uses nonblocking I/O. The

SSL_ERROR_SSL generated in SSL_connect

2001-03-06 Thread Toby Shepheard
Hi, I've implemented a basic SSL client in C on Solaris using openssl. I've also written some wrapping code, so now I can compile it as a .so object to integrate with another piece of software (Vignette StoryServer 5.5) When run as a standalone program, everything is fine. However, when I compil

Re: Thumbprint of Digital ID

2001-03-06 Thread Sandipan Gangopadhyay
Thanks, Greg. I was afraid of this. I wanted to hash the public key and use that as a part of the DN as specified in the CSR. I shall now try this with openssl dgst. If I hash the certificate, I cant include that in the certificate (in the DN) as the hash will change (circular dependency) !!! I

Re: Thumbprint of Digital ID

2001-03-06 Thread Greg Stark
It is the hash of the entire DER encoded certificate.   You can calculate it using the 'openssl' utility via:   openssl dgst -sha1 -c < cert.der _Greg StarkEthentica, Inc.[EMAIL PROTECTED]_     - Original Message -

For win32 DEVELOPERS and users

2001-03-06 Thread lucian
Hello again! It seems that my pains with OpenSSL (and yours) got out. The given examples work! Finally i have found a Visual C++ project that compile OpenSSL and examples with no errors. I tested in this night and things seems to work fine. Here is the link where i found useful project: http://www

RE: LIBEAY32.dll Access Violation

2001-03-06 Thread Dale Peakall
> I have problems with Libeay32.dll which crashes when > I use SSL in multiple threads. The code that the thread executes > is always the same. Everything works well if there is only one thread, > but when there is several threads it crashes. > I get following message: > Unhandeled exception in

Re: make a ssl .pem cert

2001-03-06 Thread Scott Taggart
Here's the commands I am doing to create a self-signed cert and generate a .h file that Ican include in my application (replace $(SSL_EXE) with ./openssl, as appropriate): $(SSL_EXE) req -config $(CONF_FILE) -new $(RAND_KEY_FILE) -keyout \ $(CERT_PRIV_KEY_FILE) -out $(CERT_REQ_FILE) $(S

LIBEAY32.dll Access Violation

2001-03-06 Thread Teemu Piiroinen
Hi again...   I have problems with Libeay32.dll which crashes when I use SSL in multiple threads. The code that the thread executes is always the same. Everything works well if there is only one thread, but when there is several threads it crashes.   I get following message:   Unhandeled e

Re: License Questions

2001-03-06 Thread Greg Stark
Just as a point of reference, RSA Security's BSAFE toolkit at some point in the past evidently used some part Eric Young's libdes package, which has a very similar license. The BSAFE manuals properly gave credit as per the license, but products that used BSAFE didn't contain any references at all

Re: Manuals for CA and self certificate setup

2001-03-06 Thread Greg Stark
Why not RSA? In theory, you could create and use DSA-signed certificates which contain DSA or DH parameters, but there is very little support for these in existing software. _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _

RE: Secure Telnet

2001-03-06 Thread Michael Wojcik
> From: Rodney Thayer [mailto:[EMAIL PROTECTED]] > Sent: Monday, March 05, 2001 6:01 PM > given the recent noise about "the S word" (ssh, which may or may > not be a trademark in some places), I think the whole question of > SSH vs. Telnet with TLS should be reconsidered. > > What's the state of