Re: ASN1_TIME

2001-08-07 Thread Martin Sjögren
On Tue, Aug 07, 2001 at 11:40:19PM +0100, Dr S N Henson wrote: > Peter Shannon wrote: > > > > Hi Martin, > > > > On Tuesday 07 August 2001 12:06, you wrote: > > > Is there a way to get out the 'timestamp' from an ASN1_TIME structure so I > > > can compare it with other times? Yes I know there ar

entry 1: bad serial number length (1)

2001-08-07 Thread Daniel Suen
Hi all, When I do a sign operation, I get the error: entry 1: bad serial number length (1) What does this mean? My command is, openssl ca -in my-certreq.pem The error occurs right after I completed the CA's passphase. I could sign one certificate without problem, but this is the second one I

Re: SSL Parameters

2001-08-07 Thread Eric Rescorla
"Larry Ellis" <[EMAIL PROTECTED]> writes: > I am trying to evaluate whether SSL (specifically openssl), would be a suitable >choice in securing my application. I am having trouble finding the best combination >of algorithms and parameters that will serve my needs. Here are the rules: > > 1. I

SSL Parameters

2001-08-07 Thread Larry Ellis
I am trying to evaluate whether SSL (specifically openssl), would be a suitable choice in securing my application.  I am having trouble finding the best combination of algorithms and parameters that will serve my needs.  Here are the rules:   1. I'd like to have a key-pair only on the server

Re: ASN1_TIME

2001-08-07 Thread Dr S N Henson
Peter Shannon wrote: > > Hi Martin, > > On Tuesday 07 August 2001 12:06, you wrote: > > Is there a way to get out the 'timestamp' from an ASN1_TIME structure so I > > can compare it with other times? Yes I know there are _cmp functions but I > > want to be able to use < and >... > > > > Martin >

Re: Convert pkcs12 to pkcs8 format

2001-08-07 Thread Dr S N Henson
Harshad Ravindra Sovani wrote: > > Hi all! > > Is there a way to convert a certificate from pkcs12 to pkcs8 format? > No since neither is a certificate format as such. PKCS#12 files can contain certificates but PKCS#8 is for private keys only. If you want to convert a private key contained in

How to make OpenSSL binary small ???

2001-08-07 Thread Raghav
hi Openssl-gurus, The size of the openssl binary on different platforms is around 1.5mb to 2 mb. Is there a possible way of reducing the size? Using macros for removing various digest/encryption algorithms such as NO_MD5,NO_SHA etc. does not solve the problem as most of the static foorprint

Verifying at any point in the chain

2001-08-07 Thread Shaughnessy, Ian
I'm working with someone else's code here, and I'm trying to figure out how to implement verification anywhere in a cert chain. For example: asd CA | lkjh CA | webserver I want to be able to verify against the lkjh CA, not the asd CA, and lkjh is halfway down the chain. I tried just ta

Re[2]: Feature or bug in 96b ?

2001-08-07 Thread email
Hello Jeffrey, Tuesday, August 07, 2001, 11:38:13 PM, you wrote: JA> Did you recompile your application for 0.9.6b? 0.9.5a is not binary JA> compatible with the newer release. Now i checked it once again, replaced all .h files with new onces, recompiled library (i do it as static lib), recompi

RE: integrating OpenSSL with W3C libwww

2001-08-07 Thread Himanshu Soni
I beleive libwww already comes with an SSL module that uses OpenSSL. Checkout library/src/ssl Himanshu Soni ValiCert INc. -Original Message- From: Weidong Min [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 07, 2001 12:19 PM To: [EMAIL PROTECTED] Subject: integrating OpenSSL with W3C li

integrating OpenSSL with W3C libwww

2001-08-07 Thread Weidong Min
Hi, Does anyone have any experiece of integrating OpenSSL with W3C libwww or know any web site with content of this issue? Thanks. //weidong __ OpenSSL Project http://www.openssl.org User

Support for hardware

2001-08-07 Thread Jared Crane
I am looking into the engine version of the software and have a question about how it works with hardware accelerators. My concern is how will ssl behave if I build for an accelerator and for some reason there isn't one, it breaks or it is no longer available? Please send any replies to me as I

Re: Feature or bug in 96b ?

2001-08-07 Thread Jeffrey Altman
Did you recompile your application for 0.9.6b? 0.9.5a is not binary compatible with the newer release. > Hello openssl-users, > > I use openssl pretty long time, but only in "simple mode". Recently , > installed version 96b (major release) and found that my application > become to crash. I chec

Feature or bug in 96b ?

2001-08-07 Thread email
Hello openssl-users, I use openssl pretty long time, but only in "simple mode". Recently , installed version 96b (major release) and found that my application become to crash. I checked it and found that crash happens in RSA_check_key function when i pass public key to it. I installed v. 95a and

Re: Building latest SNAP

2001-08-07 Thread Lutz Jaenicke
On Tue, Aug 07, 2001 at 06:13:46PM +0100, Noel O'Kelly wrote: > Am trying to build openssl-SNAP-20010731 but getting an error message when > it gets to compiling /crypto/lhash. > > The message is Error: immediate operand illegal with absolute jmp. Please provide the full error message (maybe th

Building latest SNAP

2001-08-07 Thread Noel O'Kelly
Am trying to build openssl-SNAP-20010731 but getting an error message when it gets to compiling /crypto/lhash. The message is Error: immediate operand illegal with absolute jmp. Have tried a previous (18/07/2001) snapshot but got the same result. Have also tried it with the no-asm option for

Re: SSL_accept error handling

2001-08-07 Thread Lutz Jaenicke
On Tue, Aug 07, 2001 at 05:28:25PM +0100, Garrard Cole wrote: > I have an SSL-enabled POP server using OpenSSL 0.9.4. running on Windows NT > using non-blocking socket i/o. 0.9.4 is quite old, a lot of bugs have been fixed since the release of 0.9.4. Please upgrade to 0.9.6b. > One particular cu

SSL_accept error handling

2001-08-07 Thread Garrard Cole
I have an SSL-enabled POP server using OpenSSL 0.9.4. running on Windows NT using non-blocking socket i/o. One particular customer has their POP client (Eudora 5.1) setup to check mail every minute. After about an hour or so, the customer receives a connection failure and the server log shows the

Re: ASN1_TIME

2001-08-07 Thread Rich Salz
> Hope this helps, also hope I didn't miss any built in functions which do the > same thing. No, unfortunately, you can *set* a time from a time_t, but there is no clean way to *get* a time_t from a time. /r4 -- Zolera Systems, Your Key to Online Integrity Securing Web services: XML, SO

RE: SSH Solaris Install(SSL,ZLIB)

2001-08-07 Thread HUBER Frederic (stagiaire)
Thank you -Message d'origine- De: Richard A. Hogaboom [mailto:[EMAIL PROTECTED]] Date: mardi 7 août 2001 14:40 À: [EMAIL PROTECTED] Objet: SSH Solaris Install(SSL,ZLIB) http://www.sun.com/blueprints/0701/openSSH.html has an article on SSH installation with a subsection on building Open

Re: ASN1_TIME

2001-08-07 Thread Peter Shannon
Hi Martin, On Tuesday 07 August 2001 12:06, you wrote: > Is there a way to get out the 'timestamp' from an ASN1_TIME structure so I > can compare it with other times? Yes I know there are _cmp functions but I > want to be able to use < and >... > > Martin I'm writing some Python wrappers at the

Certificate CommonName

2001-08-07 Thread Ron Hariski
I am building my own Certificates (I am th CA). When I build the certificate the CN consists of hostname and Email. How do I make the CN consist of only the hostname. __ OpenSSL Project http://www.

No Subject

2001-08-07 Thread Paul Hutchinson
 

Re: FW: installation problem on Win2K/Apache

2001-08-07 Thread Martin B. Nielsen
I would suggest you take a look at this site instead: http://tud.at/programm/apache-ssl-win32-howto.php3 Hint: the mod_ssl.so file is a unix-shared-object. You are looking for some kind of *.dll file. Regards Martin Bøjer Chris Leesch wrote: > > hi, > > I'm trying to get modssl up on a win2k

DES Encryption

2001-08-07 Thread Shobhit Kanaujia
Hello Everyone, I am using the following command in the apps directory: openssl enc -des -in -p -out The data in the output file looks something like: Salted__^D\xb9DR^M^]^Y\xc9salt=04B944520D1D19C9 key=F49B83F91A301AA6 iv =78D2F3BE66DFF605 \x92\xdb\xedsZ\xe1\x82\x9e\xae^D^_t\x9e|\

SSH Solaris Install(SSL,ZLIB)

2001-08-07 Thread Richard A. Hogaboom
http://www.sun.com/blueprints/0701/openSSH.html has an article on SSH installation with a subsection on building OpenSSL 0.9.6b with cc and gcc on Solaris 8,7,6. This might be useful for other UNIX builds as well. I obtained this link from http://sun.systemnews.com/system-news/jobdir/submitted

Re: AIX 4.3.3ML8, XLC, openssh2.9p2,openssl-0.9.6b

2001-08-07 Thread Lutz Jaenicke
On Mon, Aug 06, 2001 at 05:25:41PM -0500, John Marquart wrote: > This is an ssh compilation problem, but since it breaks in the > configure script while trying to find the openssl libraries, I have copied > both lists. > config.log.snip--- > configure:4376: checking for OpenSSL dir