Repeated SSL Record header

2001-03-15 Thread ET Tan
As I've understood from RFC, record header shouldn't be repeated in one handshake record. For example, the Server Hello handshake record should only be having one record header. This handshake record contains 4 handshake messages that are: 1. server_hello 2. certificate 3. certificate request (op

Re: Netscape 6.01 and SSL: crash?

2001-03-15 Thread Surya N Viriyala
Yes, I also tried Netscape 6.x on Solaris 7 (Intel) & https connections crash. Netscape 6 is totally screwed up. I personally think Netscape 6.x still needs a lot of work. suri. __ OpenSSL Project

Re:warning: overflow in ....

2001-03-15 Thread Satoshi Seto
To: Ricardo Stella Thank you for your advice. My compiler is gcc 2.95.2(pre-compiled binaries of public-domain Solaris application). I tried your advice. But warnig message did not clear. I am going to try to search the solutions from some archive. Thank you!

Re: Netscape 6.01 and SSL: crash?

2001-03-15 Thread zhu qun-ying
Don't use Netscape 6.01! Use Mozilla in stead (latest milestone is 0.8). It is much more stable and with features that Netscape does not have. -- (~._.~) Öì Ⱥ Ó¢ ¦¶ ¸s ­^ (Qun-Ying) (65) 874-6643 ( O ) ()~*~() (_)-(_)[EMAIL PROTECTED] * [EMAIL PROTECTED]

Re: PEM pass phrase

2001-03-15 Thread dobos_s
yes "Patrick Li" <[EMAIL PROTECTED]>

Re: Netscape 6.01 and SSL: crash?

2001-03-15 Thread yhzhao
Hi I use Netscape 6.01 on win2000 connect to IIS is ok, to openssl s_server is ok. but to another program based on openssl lib is crash. i guess not the SSL but the https implementation is not stable, because it put the following message on brower HTTP/1.1 500 Internal Server Error Server: Micro

PEM pass phrase

2001-03-15 Thread Patrick Li
Hi, When creating a client certificate using command "CA.pl -newreq", it prompts for entering a PEM pass phrase before generating the newreq.pem file. What is the usage/purpose of this password? It seems to me that it is the password for accessing data (like private key?) in the newreq.pem file

Re: problems doing connections with ssh

2001-03-15 Thread Surya N Viriyala
ps -aef | grep ssh If sshd doesn't show-up, it isn't configured to start sshd automatically after reboot. Hence the problem. Either start sshd manually each time after reboot or put startup scripts. suri. __ OpenSSL Project

problems doing connections with ssh

2001-03-15 Thread Carlos Santana
I just install openssh on a red-hat machine, I was doing slogin to it fine, but I reboot the machine and I ca not longer do ssh to that machine it gives a message: "Secure connection to 'host' refused"   What could it be? Does it have to be related to the firewall? or I have to open the port

problem run test after installing ssleay 0.8.1b

2001-03-15 Thread Philip Wang (EMX)
Title: problem run test after installing ssleay 0.8.1b Hi, I am new to openssl and I install ssleay 0.8.1b on to NT4, the compiler is VC++6. Following is what I encounter. >perl Confirure VC-WIN32 >nmake -f ms\ntdll.mak (everything is fine so far) >cd ms >test and get the following error

REMOVE

2001-03-15 Thread Mitchy1M
__ Get your own FREE, personal Netscape Webmail account today at http://webmail.netscape.com/ __ OpenSSL Project http://www.openssl.

Re: Need help with certificates

2001-03-15 Thread Lutz Jaenicke
On Thu, Mar 15, 2001 at 03:20:19PM -0500, Darrin Powell wrote: > -- [root@powell apps]# telnet mail.uiop.net > 143 Trying 192.168.2.49... > Connected to powell (192.168.2.49). > Escape character is '^]'. > * OK powell IMAP4rev1 v12.264 server ready > * BYE Autologout; idle for too long > Connecti

Re: Need help with certificates

2001-03-15 Thread Darrin Powell
On Thu, 15 Mar 2001, you wrote: > On Thu, Mar 15, 2001 at 12:54:47PM -0500, Darrin Powell wrote: > >I am trying to setup IMAP with SSL suport. I have installed the latest > > verion of IMAP and Openssl on my linux 7.0 box. I can connect via IMAP > > using netscape without SSL and it works fin

Re: Two-way authentication

2001-03-15 Thread Insh_Allah
Hi Carlos, - Original Message - From: "Carlos Serrão" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, 14 March, 2001 20:57 Subject: Two-way authentication > Hi all, > can someone provide please a working example of a two-way authetication > program using OpenSSL ? Sorry,

Bugs in openssl.spec file.

2001-03-15 Thread JJohnson
Hi, I am trying to build a useable version of openssl using the specfile included with the source distribution. Everything builds fine, and the rpms are created but there are problems related to the /usr/lib/libcrypto* and /usr/lib/libssl* files. -rwxr-xr-x root root 894

Re: Crypto Hardwares and LDAP Support

2001-03-15 Thread Ranga
Are there standard interfaces that allow plug and play of different crypto modules (Hardwares, crypto softwares, etc - basically CSPs)? Also, I am looking for an answer for this question : Is OpenSSL integrated with directory (LDAP) services like getting the CRLs, Certificates, etc from a dire

Re: OCSP stuff required ...

2001-03-15 Thread Dr S N Henson
Aslam wrote: > > Hi, > > I downloaded the openssl-0.9.6, and I compiled it, and after that I'm not > having the OCSP app. > Can any one give a reson for this. Does OpenSSL supports OCSP ? > The OCSP code is not in OpenSSL 0.9.6 it is only in the current development version, so try that instead

Re: Problems with real Certificate File

2001-03-15 Thread Dr S N Henson
Claudio Higashi wrote: > > Hi all, > > I'm using Apache 1.3.12 / mod_ssl 2.6.5 / OpenSSL 0.9.5a under Solaris > 8. > I sent my Certificate Signing Request (CSR) to a CA (certisign) and > received my real Certificate (CRT) File to use. > But before to put it under Apache, I tried to see it's deta

Re: Need help with certificates

2001-03-15 Thread Lutz Jaenicke
On Thu, Mar 15, 2001 at 12:54:47PM -0500, Darrin Powell wrote: >I am trying to setup IMAP with SSL suport. I have installed the latest > verion of IMAP and Openssl on my linux 7.0 box. I can connect via IMAP > using netscape without SSL and it works fine when I try it with SSL it cannot > fin

Need help with certificates

2001-03-15 Thread Darrin Powell
I am trying to setup IMAP with SSL suport. I have installed the latest verion of IMAP and Openssl on my linux 7.0 box. I can connect via IMAP using netscape without SSL and it works fine when I try it with SSL it cannot find the server. I followed the procedures for the certifiactes, but I a

Re: How do I get the remote IP after BIO_do_accept?

2001-03-15 Thread Greg Stark
Just note that the IP address is not authenticated and thus is untrusted. Whether this matters or not depends on what you are doing with it. _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _ - Original Message - Fro

RE: wildcard certificates

2001-03-15 Thread Rigamonti, Cesare
Lots of thanks, great link! -Original Message- From: Greg Stark [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 15, 2001 10:36 AM To: [EMAIL PROTECTED] Subject: Re: wildcard certificates Chaz, Creation should be no problem; see (http://www.mail-archive.com/openssl-users@openssl.or

Problems with real Certificate File

2001-03-15 Thread Claudio Higashi
Hi all, I'm using Apache 1.3.12 / mod_ssl 2.6.5 / OpenSSL 0.9.5a under Solaris 8. I sent my Certificate Signing Request (CSR) to a CA (certisign) and received my real Certificate (CRT) File to use. But before to put it under Apache, I tried to see it's details with the openssl command (see below)

Re: Vc++ workspace for openssl

2001-03-15 Thread Greg Stark
If you look carefully in the INSTALL.W32 file (look under Tweaks:), you will see how to do it. _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _ - Original Message - From: "Eli Zvik" <[EMAIL PROTECTED]> To: <[EMAIL

Re: wildcard certificates

2001-03-15 Thread Greg Stark
Chaz, Creation should be no problem; see (http://www.mail-archive.com/openssl-users@openssl.org/msg15592.html) for a discussion of some other issues that may arise. _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _ ---

Re: Netscape 6.01 and SSL: crash?

2001-03-15 Thread Greg Stark
Hubert, I'm not sure exactly what your question is because you have given so little information. At a minimum, please include all the version information of the software in question and all error information from the "crash". My guess is that you believe that you are connecting to a version o

wildcard certificates

2001-03-15 Thread Rigamonti, Cesare
Is it possible to create wildcard certificates using openssl? Chaz Rigamonti Technical Support Engineer Intel Corporation http://support.intel.com/ (503)264-7154 fax (503)264-1750 __ OpenSSL Project

Netscape 6.01 and SSL: crash?

2001-03-15 Thread Hubert Froehlich
Hi there, we tried the (newest) Netscape 6.01 on a Linux (SuSE 6.x and 7.0 distributions) platform connecting to a SSL-encrypted document on an Apache Webserver. The result was a crash. We guess that the SSL implementation is not stable yet. Is there anybody who shares my experience? Is there

Re: Crypto Hardwares and LDAP Support

2001-03-15 Thread Steven A. Bade
On Thu, Mar 15, 2001 at 10:43:54AM -0500, Ranga wrote: > Hi, > > I am trying to find out if OpenSSL supports CryptoHardwares that perform >cryptographic operations, stores private keys etc > > like IBM 4758? Can different CSPs (Cryptographic Service Providers) plug and play >into OpenSSL? >

Re: warning: overflow in ....

2001-03-15 Thread Ricardo Stella
What compiler are you using ? Also, you probably want to use -fPIC for a config option. Finally, note that Solaris 8 does not have a random/urandom device. Search the archive for possible solutions (an old SUN package, or ANDIRand) My .02... Satoshi Seto wrote: > > Hellow. My name is Satosh

Re: How to reduce size of OpenSSL LIB file

2001-03-15 Thread Johan Adolfsson
I'd love to see a list of the minimum algorithms to: (or a maximum list of algorithms to exclude:-) * Run https with a the majority of browsers (RSA, DES, 3DES, SHA-1 and RC-4 is my guess) * Run openssh * Get a libcrypto that supports both https and openssh /Johan - Original Message

Crypto Hardwares and LDAP Support

2001-03-15 Thread Ranga
Hi, I am trying to find out if OpenSSL supports CryptoHardwares that perform cryptographic operations, stores private keys etc like IBM 4758? Can different CSPs (Cryptographic Service Providers) plug and play into OpenSSL? Next question is : Is OpenSSL integrated with directory (LDAP) servi

OCSP stuff required ...

2001-03-15 Thread Aslam
Hi, I downloaded the openssl-0.9.6, and I compiled it, and after that I'm not having the OCSP app. Can any one give a reson for this. Does OpenSSL supports OCSP ? Thanks Aslam __ OpenSSL Project

Re: How to reduce size of OpenSSL LIB file

2001-03-15 Thread Greg Stark
Kim, You can modify the do_masm.bat file in the ms\ directory. You need to tell the perl script util\mk1mf.pl which cryptogrpahy to eliminate. Here is a fragment that could be in do_masm.bat showing one way to do it. SET SKIPS=no-rc5 no-bf no-cast no-idea no-ripemd no-dh no-dsa perl util\mk1

Re: What is OpenSSL Engine ?

2001-03-15 Thread Steven A. Bade
the engine is a design architecture to allow the use of hardware crypto devices On Thu, Mar 15, 2001 at 10:10:20AM -0500, Aslam wrote: > Hi, > > What exactly is the difference between a OpenSSL and OpenSSL Engine ? > > > Thanks > > Aslam > > ___