SSLRequireSLL applies on a single file ?

2001-04-06 Thread Xavier Marjou
Hello, I would just need to force use of SSL on a single web page inside a regular directory. When reading the documentation, it is not clear to me if I can do it with the Location block. Is the following configuration possible ? SSLRequireSLL Thanks, Xavier Marjou ___

Re: Need to sign Microsoft CA by openssl

2001-04-06 Thread Martin Leung
Hi Marat, I have signed a Win2K subordinate CA cert with openssl (v0.9.6) as root CA. The following extensions are used: subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always basicConstraints = critical,CA:true,pathlen:0 keyUsage = critical, cRLSign, keyCertSign nsCertType = sslCA, email

[to VincentLue]_ SSL doc requet

2001-04-06 Thread kim ki uk
Hi. I see the title of "SSL doc request" Mr. VincentLue want to send email personally. But i don't know what is Mr. VincentLue's email address. So I send the request of "SSL doc request" to mailing list. Please Send "SSL doc request" My email address is as follows. [ [EMAIL PROTECTED]]

Re: Is there a Telnet app?

2001-04-06 Thread Kenneth R. Robinette
Date sent: Fri, 06 Apr 2001 15:33:24 -0400 From: Steve Roche <[EMAIL PROTECTED]> Organization: Powerlan USA, Inc. To: [EMAIL PROTECTED] Subject:Is there a Telnet app? Send reply to: [EMAIL PROTECTED] Steve Depe

hi

2001-04-06 Thread 양동수
hi... i would like to receive mailing list ... thanks...

Is there a Telnet app?

2001-04-06 Thread Steve Roche
Does anyone know if there is a telnet application available that uses the latest version of the SSL toolkit? Thanks in advance, Steve __ OpenSSL Project http://www.openssl.org User Support Mailing

RE: OCSP memory leaks

2001-04-06 Thread heyun . x . zheng
To avoid crashes, you should first check the pointer to be cleaned. if it is NULL, do not free it any more. In your case, pOCSPBasic, pID may be already cleaned by previous clean ups. Hope this help. Heyun Zheng [EMAIL PROTECTED] -Original Message- From: tsk [mailto:[EMAIL PROTECT

Re: Client Authentication Windows NT

2001-04-06 Thread Oliver Bode
Thanks, I'm sure this will sort it out. It's the same problem we've experienced. Tell me on Win2000 and NT can you have client authentication that will check multiple root certificates? Oliver > Have a look in the archive: > http://marc.theaimsgroup.com/?l=openssl-users > > under the author 'Da

Re: OpenSSH doesn't configure with OpenSSL

2001-04-06 Thread Lutz Jaenicke
On Fri, Apr 06, 2001 at 12:50:47PM -0500, Hoopchuk Ross - rhoopc wrote: > I would greatly appreciate any help you can give me on this. I'm trying to > install OpenSSH on a Dec Alpha 1200. I think I have OpenSSL correctly > installed (based on the make test). During the configure for OpenSSH I get

RE: VAX Install problems

2001-04-06 Thread Bryan
Thanks. I don't really understand what that means though. I couldn't find any COMMON sections of the MD5_DGST.C code, so I commented out the following line from the [.CRYPTO.MD5]MD5_DGST.C: const char *MD5_version="MD5" OPENSSL_VERSION_PTEXT; And now it compiles and tests OK. Is this OK to do?

RE: VAX Install problems

2001-04-06 Thread Bryan
Thanks. I don't really understand what that means though. I couldn't find any COMMON sections of the MD5_DGST.C code, so I commented out the following line from the [.CRYPTO.MD5]MD5_DGST.C: const char *MD5_version="MD5" OPENSSL_VERSION_PTEXT; And now it compiles and tests OK. Is this OK to do?

Re: Encrypting Cookie data with server private key

2001-04-06 Thread Greg Stark
why do you want to do this? Do you know the difference between a private and public key? _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _ - Original Message - From: "Mevlana Sari" <[EMAIL PROTECTED]> To: <[EMAIL PR

beginner question

2001-04-06 Thread Xavier Marjou
Hello,   I have a question for which I can't find the response. Is open SSL executed in Apache process, or is it running in a separate process (such as a servlet engine for example) ?   Thanks, Xavier Marjou

Re: PRNG not seeded ERROR

2001-04-06 Thread Lutz Jaenicke
On Fri, Apr 06, 2001 at 11:34:48AM -0400, [EMAIL PROTECTED] wrote: > > Something like this may help you out: > > rand_buf = "0123456789ABCDEF0"; > RAND_seed(rand_buf, 17); > /* One or the other will do */ > RAND_add(rand_buf, 17, 17); First: fortunately it would not help out, si

Re: PRNG not seeded ERROR

2001-04-06 Thread Brian Hatch
> Something like this may help you out: > > rand_buf = "0123456789ABCDEF0"; > RAND_seed(rand_buf, 17); > /* One or the other will do */ > RAND_add(rand_buf, 17, 17); Seeding with a static stream is as worthless as no seeding at all. Try using something *random* for your RAND_se

Re: Encrypting Cookie data with server private key

2001-04-06 Thread Simos Xenitellis
I believe you could make modifications to the mod_usertrack Apache module. Link in openssl and use either the core RSA functions or smime. Technically, it looks rather straightforward. Good luck, simos > - Original Message - > From: "Mevlana Sari" <[EMAIL PROTECTED]> > To: <[EMAIL PROTE

OpenSSH doesn't configure with OpenSSL

2001-04-06 Thread Hoopchuk Ross - rhoopc
Hello All: I would greatly appreciate any help you can give me on this. I'm trying to install OpenSSH on a Dec Alpha 1200. I think I have OpenSSL correctly installed (based on the make test). During the configure for OpenSSH I get a "can't find OpenSSL" message. I found a patch in the FAQ for Op

Re: PRNG not seeded ERROR

2001-04-06 Thread carl . douglas
Something like this may help you out: rand_buf = "0123456789ABCDEF0"; RAND_seed(rand_buf, 17); /* One or the other will do */ RAND_add(rand_buf, 17, 17); "De Closmadeuc, Etienne" <[EMAIL PROTECTED]> on 04/06/2001 03:48:28 AM Please respond to [EMAIL PROTECTED] To: opens

Re: Encrypting Cookie data with server private key

2001-04-06 Thread Oliver Bode
You could try the smime function. http://www.openssl.org/docs/apps/smime.html I use the smime function to encrypt and decrypt credit card numbers and to send me encrypted receipts of transactions. However, you could just as easily use it to encrypt and decrypt cookies - if that's what you want to

RE: PRNG not seeded ERROR

2001-04-06 Thread Ellis, John E (Edward)
What about the error message "You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html " didn't you understand? The specified FAQ includes a lengthy dissertation about what the problem is and what you can do to fix the problem. J. Edward Ellis Battelle, Pacific Northwest Nation

Re: How to build openssl without certain license-encumbered algorithms ?

2001-04-06 Thread Greg Stark
RC4 is not license-encumbered but rather trademarked. However, to answer your question, add the no-* flags to the perl lines in the ms\do_masm.bat file. _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _ - Original Messa

openssl on a Sun Sparc Solaris 7 with ssh

2001-04-06 Thread Billigmeier, Chad
Hello all...I've been having a bit of trouble with ssh on a machine that I recently put openssl on...I was wondering if anyone had a similiar experience or could offer any suggestions... #!/usr/bin/perl# Chad.pm -package Chad;my $ref = {name    => 'Chad Alan Billigmeier',   title   => 'Assi

Re: Need to sign Microsoft CA by openssl

2001-04-06 Thread Dr S N Henson
"Marat S. Salimov" wrote: > > > Thank you for your answer Steve. Please correct me if I'm wrong. As I've got my plan >should be like this one: > -I take the latest release of OpenSSL's 'ca'. BTW which one? > -I upgrade my old OpenSSL's 'ca' with the last obtained > -I look for the options which

Re[2]: Need to sign Microsoft CA by openssl

2001-04-06 Thread Marat S. Salimov
-Original Message- From: Dr S N Henson <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Fri, 06 Apr 2001 12:54:32 +0100 Subject: Re: Need to sign Microsoft CA by openssl > > > > Noor Haizad Mohd Said wrote: > > > > Dear Marat, > > > > I also faced a problem same as you. I want to iss

Re: Need to sign Microsoft CA by openssl

2001-04-06 Thread Dr S N Henson
Noor Haizad Mohd Said wrote: > > Dear Marat, > > I also faced a problem same as you. I want to issue CA cert by signing a request >generated by Windows2000. I also tried to cross certify their CA certificate.Both of >them are failed. > The reasons that might happens are:- > > 1) For generat

Re: OCSP memory leaks

2001-04-06 Thread Dr S N Henson
Tat Sing Kong wrote: > > Anyone using the OCSP beta stuff in the snapshot of openSSL? I am > getting memory leaks for it, but when I do add the free'ing code it > crashes. Here's the sequence > > OCSP_REQUEST_free(pOCSPRequest); > OCSP_RESPONSE_free(pResponse); > > // Next line crashes > OC

Re: Crypt::SSLeay

2001-04-06 Thread Lutz Jaenicke
On Thu, Apr 05, 2001 at 04:51:26PM -0700, Marcus Carey wrote: > It does not matter which server I connect to I still get the warning. Ok, I just downloaded libwww-perl and found the offending message in it, but see below. > Date: Thu, 05 Apr 2001 23:21:19 GMT > Accept-Ranges: bytes > Server: Apa

RE: Client Authentication Windows NT

2001-04-06 Thread Dale Peakall
Have a look in the archive: http://marc.theaimsgroup.com/?l=openssl-users under the author 'Dale Peakall' and look for the subject 'Client Auth in IE'. - Dale. __ OpenSSL Project http://w

Re[2]: Need to sign Microsoft CA by openssl

2001-04-06 Thread Marat S. Salimov
Hi! I gues there isn't anyone who is able to answer and have free time for this. Anyway we'll dig and we'll have found the solution. P.S. Especially my thank for Noor - only one who've answered. We'll win! :-) -Original Message- From: Noor Haizad Mohd Said <[EMAIL PROTECTED]> To:

Re: OCSP memory leaks

2001-04-06 Thread Richard Levitte - VMS Whacker
From: Tat Sing Kong <[EMAIL PROTECTED]> tsk> OCSP_REQUEST_free(pOCSPRequest); tsk> OCSP_RESPONSE_free(pResponse); tsk> tsk> // Next line crashes tsk> OCSP_BASICRESP_free(pOCSPBasic); tsk> OCSP_CERTID_free(pID); I haven't looked closely at the code yet, so I may be wrong. However, it strikes me

Re: Encrypting Cookie data with server private key

2001-04-06 Thread Oliver Bode
Why do you wish to use public key encryption for this - why not just use a symetric encryption algorithm like blowfish or something? It just seems like an expensive way to do the same thing. Anyway, you could use http://www.openssl.org/docs/apps/smime.html for encryting and decrypting on the serv

OCSP memory leaks

2001-04-06 Thread Tat Sing Kong
Anyone using the OCSP beta stuff in the snapshot of openSSL? I am getting memory leaks for it, but when I do add the free'ing code it crashes. Here's the sequence OCSP_REQUEST_free(pOCSPRequest); OCSP_RESPONSE_free(pResponse); // Next line crashes OCSP_BASICRESP_free(pOCSPBasic); OCSP_CERTID

PRNG not seeded ERROR

2001-04-06 Thread De Closmadeuc, Etienne
Openssl is correctly installed. Here is the report : OpenSSL self-test report: OpenSSL version: 0.9.6 Last change: In ssl23_get_client_hello, generate an error message wh... OS (uname): AIX spirou 3 4 0055B8AA4C00 OS (config): 0055B8AA4C00-ibm-aix Target (default): ?

Encrypting Cookie data with server private key

2001-04-06 Thread Mevlana Sari
Hi I'm trying to write up a module which will encrypt cookie data with the server's private key. And another module which will decrypt this cookie data using the server's public key. Could you please provide hints and/or resources which might help with this. Thanks Mevlana Sari [EMAIL PROTECT