compilation failure on win32 (win2kpro)

2001-05-01 Thread ForestDweller
b_print.c fails to compile: All references to LLONG fail to compile with c2632 #if HAVE_LONG_LONG //#define LLONG long long //causes error c2632 #define LLONG long //change to 'long' from 'long long' #else #define LLONG long #endif //error c2632 http://msdn.mi

Re: newbie: 64bit, 512 or 1024 ?

2001-05-01 Thread Joseph Ashwood
In all honesty I would recommend against getting a 64-bit certificate. And I would recommend just as strongly against a 512-bit certificate. There's 2 large reasons for this. First the 64-bit, the RSA DES Challenge III taught us that using second rate, 3 year old technology, in a relatively poorly

newbie: 64bit, 512 or 1024 ?

2001-05-01 Thread John Peters
I want to order a $125 64bit thawte certificate. I see almost everyone using 1024 to generate the private key, but it says on the thawte website that 1024 is for the 128bit certificates. Does it matter if use 512 or 1024 to generate the private key? Regards John Peters _

how to get Session ID

2001-05-01 Thread Carlo Villongco
Hello, I'm going to do a load balancer using ssl session IDs for host affinity how do I get the session ID without doing an SSL handshake? thanks Carlo __ OpenSSL Project http://www.openssl.org

RE: Generating keys on Sol 7

2001-05-01 Thread Andre Steenkamp
Ok, solved it After running the openssh package the following commands need to be run -- ssh-keygen -b 1024 -f /usr/local/etc/ssh_host_key -N '' and ssh-keygen -d -f /usr/local/etc/shh_host_dsa_key -N '' thanx Andre -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]O

Is the ip address stored in an x509 certificate?

2001-05-01 Thread Joe Julian
I have Cyrus imap set up with openssl, and everything seems to be working... but... MS Outlook (and express) complains that "The server you are connected to is using a security certificate that does not match it's Internet address." I think this might be due to the fact that this machine has 3 NI

RE: Generating keys on Sol 7

2001-05-01 Thread Andre Steenkamp
Hi Ok, it seems I don't need openssl??? I just need ssh, scp and sshd. ssh and scp are working from this box but without sshd running I cannot scp or ssh to this box. I ran ssh-keygen to /usr/local/etc/ssh_host_key and then sshd this is the result I got # sshd error: Could not load host key:

Re: Generating keys on Sol 7

2001-05-01 Thread Hans-Joerg Hoexer
Hi, On Tue, May 01, 2001 at 11:22:47AM -0700, Andre Steenkamp wrote: > However I would like the server ssh and scp to work as well -- this machine > is on a private lan with no access to the internet so I believe it needs > keys and certificates local only to itself. > > when I try to generate t

RedHat Private and Public Key Pair Generation

2001-05-01 Thread Kate . Green
Hi John, I noticed your email and thought the attached word document would be helpful. Thanks, Kate (See attached file: SSL-RedHat.doc) From: "j.cooney1" <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: <[EMAIL PROTECTED]> >Subject: how to generate SSL keys?? >Date: Tue, 1 May 2001 01

Generating keys on Sol 7

2001-05-01 Thread Andre Steenkamp
Hi Folks I installed openssl, ssh and scp on a Sun box using packages created for the purpose. the client ssh and scp work fine when communicating with other machines in my network. However I would like the server ssh and scp to work as well -- this machine is on a private lan with no access to

Re: Newbie alert.. How do I..?

2001-05-01 Thread Mads Toftum
On Tue, May 01, 2001 at 04:38:15PM +0200, Søren Erland Vestø wrote: > Hi, > I'm currently developing an application where I need to secure the > communication between the client and the server. Someone then said to me: > "Why don't you try OpenSSL". So, I have taken a look. Unfortunately I find

tracing SSL_read() and SSL_write()

2001-05-01 Thread George Lind
Is the callback function that I set with BIO_set_callback only called during the handshake? I would like to trace not only the verification but all SSL_read and SSL_write data that I send during a session. If the callback function is not called at these times how do you trace these calls? Thanks,

Re: Newbie alert.. How do I..?

2001-05-01 Thread Tat Sing Kong
I generally re-post this onto the newgroup every couple of weeks, but here's a newbie document: http://www.consegna.co.uk/exchangeCentre.html Hope this helps. Tat. Søren Erland Vestø wrote: > > Hi, > I'm currently developing an application where I need to secure the > communication between t

Re: Newbie alert.. How do I..?

2001-05-01 Thread j.cooney1
Sorry this isn't a solution, but just to let you know I want to do exactly the same thing, but have also found the lack of basic instructions a real hinderance. So if I get any breakthroughs I will mail them to you. Would also appreciate it if you could do the same for me!! regards, john.

Re: HTTPS

2001-05-01 Thread aqilist
Hello yitzpick, ysn> hi, ysn> i'd like to know how to do GET / POST requests over HTTPS. Actually, HTTPS is simply the HTTP over SSL. So just use ssl_read & ssl_write to implement HTTP Protocol. :) ysn> there's some demos/bio example, ysn> but doesn't compile on Linux. ysn> __

Newbie alert.. How do I..?

2001-05-01 Thread Søren Erland Vestø
Hi, I'm currently developing an application where I need to secure the communication between the client and the server. Someone then said to me: "Why don't you try OpenSSL". So, I have taken a look. Unfortunately I find the documentation to be... sparse in lack of a better word. Has anyone mad

Re: multiple trusted authorities

2001-05-01 Thread Greg Stark
You could put them all in one file, and provide that filename as the second argument to SSL_CTX_load_verify_locations(). You could also put each trusted root certificate in its own file in a directory devoted just to these files, and point to this directory with the third argument to SSL_CTX_load_

multiple trusted authorities

2001-05-01 Thread George Lind
How do I let my server accept certificates from multiple trusted authorities? Do I combine the certificates into one big file? Thanks, George __ OpenSSL Project http://www.openssl.org User Support

Re: does s_server accept PUT command?

2001-05-01 Thread Vadim Fedukovich
Patric, an apache module from http://www.webdav.org may fit your test environment (if used with mod_ssl or apache_ssl). Described behaviour is likely covered by rfc2518 (WEBDAV), section 8.7.1 Please note PUT method have nothing to do with this list. good luck, Vadim On Mon, 30 Apr 2001, Patric