Re: problems connecting to peer

2001-08-21 Thread Michal Trojnara
Dustin Swint wrote: > Aug 21 16:57:05 pearl stunnel[9253]: SSL_connect: error:24064064: > random number generator:SSLEAY_RAND_BYTES:PRNG not seeded Read: http://www.stunnel.org/faq/troubleshooting.html#ToC18 Best regards, Mike _

[Off-topic] Re: Alpha history -- WAS: OpenSSL on itanium

2001-08-21 Thread Bryan-TheBS-Smith
[ I guess we're getting off-topic here. I'll make one more go of it for "informational purposes" (I have a EE and worked at an IC design firm for 2 years), but let's take it _off-list_ after this. Please reply off-list. ] chirs charter wrote: > Nice observations. The alpha is gone now? Basical

RE: OpenSSL on itanium

2001-08-21 Thread Steven Reddie
You know that DEC's been discontinued (bought by Compaq)? I read that Compaq is selling (sold?) the Alpha to Intel right now. um = micrometer (millionth of a meter) which is the track width of the microprocessor. I thought 0.15um was state of the art, but it seems that it's now 0.13um. 0.35um

Re: OpenSSL on itanium

2001-08-21 Thread chirs charter
Nice observations. The alpha is gone now? When did DEC discontinue it? Lastly in the measurement what does "um" stand for? Thanks --- Bryan-TheBS-Smith <[EMAIL PROTECTED]> wrote: > Diarmuid Oneill wrote: > > When I download and build OpenSSL (which works > fine!) and run the > > openssl speed rsa

Re: read X509 certificate from DER format file using d2i_X509

2001-08-21 Thread Dr S N Henson
dirk laurijssen wrote: > > Hi, > Altough mentioned in the faq http://www.openssl.org/support/faq.html#PROG3 , I can't >seem to get the DER-certificate loaded appropriately into the X509-struct. > [stuff deleted] > > int > validate_ssl (int ok, char *ip, char *protocol, char *subject, > cha

SSL_CTX 's app_verify_callback .... what for is this..??

2001-08-21 Thread Aslam
Hi, I have a doubt about SSL_CTX 's app_verify_callback member variable. What for is this ? It seems that it this is set by using SSL_CTX_set_cert_verify_callback(SSL_CTX* ctx, int(*cb)(), char* arg), then cb() get called instead of X509_verify_cert(). Aslo what it looks that the int(*cb)() does

Re: SV: Microsoft IIS backup key format

2001-08-21 Thread Dr S N Henson
"Hellan,Kim KHE" wrote: > > You state in the 'rsa' manual pages that you consider implementing an option > to handle '.key' files without having to manually edit them. > Is this still considered in future OpenSSL releases or has it been dropped? > Yes it should be implemented in a future versio

Creating PEM's

2001-08-21 Thread H. Neal Cropper
I work for a small company and we need to have the ability to generate pem's for ourselves and our customers we have no problem using Thawte or any other CA but all I seem to be able to generate using IIS is .cer files not .pem files .   If anyone knows how to create .pem files in micros

Re: Microsoft IIS backup key format

2001-08-21 Thread derek
I was just playing with this yesterday... I generated a CSR for thawte and imported the cert and verified it all worked in IIS5 and then export everything for use with Apache-mod-ssl 1.3.20. I was able to run the exported private key file through the pkcs12 util in openssl and then edit the fi

Re: openssl-python for openssl-0.9.6b

2001-08-21 Thread Nalin Dahyabhai
On Fri, Aug 17, 2001 at 06:33:50PM -0400, John Aldrich wrote: > Anyone know where I can get a version of openssl-python that's compatible > with the above version of openssl? To upgrade KDE to version 2.2 I have to > upgrade openssl, but I can't do that because there isn't an equivalent > versi

Re: Please reconfigure majordomo to not set Reply-To (was: Failedto clean virus file Emanuel.exe)

2001-08-21 Thread Mark H. Wood
On Tue, 21 Aug 2001, Lance Paine wrote: > I'm in agreement, there is a reason that most mailers have a "Reply-All" or > "Reply-Group" function after all. Don't munge Reply-To! Well, if it's *replacing* Reply-to: on incoming mail, that's definitely broken. However it is perfectly reasonable for a

Install trouble [bsock_c, EADDRINUSE]

2001-08-21 Thread Björn Szwierczinski
Hi, I'm having trouble installing Openssl on a intel pentium with Suse Linux 7.1 (for 386). I've got a nasty error: b_sock.c:599: `EADDRINUSE' undeclared (first use in this function) I know a bit of programming, but not enough to declare this on my own. Is something inherently wrong with my

SV: Microsoft IIS backup key format

2001-08-21 Thread Hellan,Kim KHE
>>"Hellan,Kim KHE" wrote: >> >> Does anyone know what format the key backup file from a MS IIS webserver is? >The exported stuff is NET format with some extra rubbish in there. Check >out the 'rsa' manual page for some hints on extracting the private key. >I think its possible to import two file

Re: REPOST: Read from uninitialized memory

2001-08-21 Thread Lutz Jaenicke
On Mon, Aug 20, 2001 at 12:33:58PM -0700, Patrick Li wrote: > I am trying to investigate some random failure of the SSL client program > that I wrote in openssl. I ran it under PURIFY and it pointed out that my > program has performed uninitialized memory leak in HASH_UPDATE function > (details s

Re: Microsoft IIS backup key format

2001-08-21 Thread Dr S N Henson
"Hellan,Kim KHE" wrote: > > Simple question. > Does anyone know what format the key backup file from a MS IIS webserver is? > If yes...anyone know of a tool to parse/create such a file? > The binary backup file contains both the private key and the belonging > certificate, but it is not P

Microsoft IIS backup key format

2001-08-21 Thread Hellan,Kim KHE
Simple question. Does anyone know what format the key backup file from a MS IIS webserver is? If yes...anyone know of a tool to parse/create such a file? The binary backup file contains both the private key and the belonging certificate, but it is not PKCS#12. My guess is, that the key pr

Re: private key

2001-08-21 Thread Dr S N Henson
Fiel Cabral wrote: > > I'm writing a program that uses openssl to read the > private key from a ASN1.DER encoded file. The openssl > API outputs the following: > > 17752:error:0D080071::lib(13) :func(128) > :reason(113):a_int.c:191: > 17752:error:0D09D082::lib(13) :func(157) > :reason(130):d2i_r

No Subject

2001-08-21 Thread Admin
Hi   We own a website www.fexin.com . We have purchased SSL certificate from Verisign and installed it on our web server. This certificate has been expired in july 2001. Can we now use OpenSSL to create a SSL Certificate and then install it on web server ? We have downloaded openssl-0.9.6b.ta

Re: Strange bug in connecting to server

2001-08-21 Thread SujithV
Hi "sslclient.h" missing.. don't u mind sending that file. Best regards, sujith __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Autom

Re: Netscape 6 Client Hello

2001-08-21 Thread Jean-Marc Desperrier
"Draelos, Timothy J" wrote: > I have imported a "Personal" certificate that I > created with openssl. It appears to work (i.e., says "Import successful"), > but the certificate never shows up in the Personal certificates list. I can > import into the "Intermediate CA" and "Trusted Root CA" certif

good step in certificate request creation ?

2001-08-21 Thread stephane Verschelde
Hello, could someone help me in resolving the following problem ? I create a new certificate request with X509_REQ_new() I give it the key with X509_REQ_set_pubkey(req,pkey) I set the version X509_REQ_set_version(req,0L) I use X509_NAME_add_entry_by_txt(.) to add entries and then I sign it X

Build failure

2001-08-21 Thread Marchelm Bomers
Hi all Today (Aussie time) I attempted to build/install OpenSSL on a system which I administer (Compaq Alphaserver 2100, Tru64 Unix 5.0A), but met with failure as described below. Initial configuration ok. Compile of sha_dgst ok (as per suggestion in FAQ file) Latter part of build failed seeming

Strange bug in connecting to server

2001-08-21 Thread Carsten Rhod Gregersen
Hi, I'm trying to create an library for transfering special info between an client and a webserver. But I have run into some strange problems. I can connect to all kinds of webservers but one is allways failing. I've debugged with returning the sslstate within the program, giving me: Before