Re: Using a proxy to my advantage

2001-09-16 Thread Pablo J. Royo
To use the CONNECT method you will have to enable what ports will be allowed by the proxy.This is done in a different way in each proxy server so if you want something that is the same on all servers you can also use SOCKS,described in RFC 1928,1929.The code to do it is at http://www.codeguru.co

Custom v3 extensions

2001-09-16 Thread Michael Czapski
Hello All,   The client piece, in the client/server application I am developing, issues a programmatic certificate signing request.  The reason for issue and a list of PC Ids for which the certificate is to be issued are provided outside the request itself.  The server, acting here as a C

RE: Base64 encode/decode

2001-09-16 Thread Daniel Garcia
Is it possible to decode a base64 string( in this case a CSR), change some plain characters such as the State value, and then encode it again? I'm trying to do this with PERL using the MIME:Base64 module. However, everytime i encode it again the CSR seems to become corrupt because 'openssl r

build failure (still!)

2001-09-16 Thread Marchelm Bomers
I am still trying to build OpenSSL on a Compaq Alphaserver 2100, Tru64 Unix 5.0A, but keep running into mysterious errors (to me anyway, since I'm only a "dumb" Sys Admin). Is there anyone out there with experience in this area who could impart some wisdom? Below are details of the error/s that

Re: beginner question.

2001-09-16 Thread rival
On Mon, 17 Sep 2001, Dr S N Henson wrote: > > > [EMAIL PROTECTED] wrote: > > > > Hello, > > > > I got a problem related to EVP primitives, and i can't find where the > > problem is. > > > > in the docs, it says : > > "..EVP_DecryptInit(), EVP_DecryptUpdate() and EVP_DecryptFinal() are the > > co

Re: beginner question.

2001-09-16 Thread Dr S N Henson
[EMAIL PROTECTED] wrote: > > Hello, > > I got a problem related to EVP primitives, and i can't find where the > problem is. > > in the docs, it says : > "..EVP_DecryptInit(), EVP_DecryptUpdate() and EVP_DecryptFinal() are the > corresponding decryption operations. EVP_DecryptFinal() will retu

Re: Cert Quest & Commands ?

2001-09-16 Thread Dr S N Henson
Averroes wrote: > > Hi Steve, > > Here is a pkcs12 fomat file in attached document. > I reproduced all steps below with at the beginning, a serial number "00" > in serial file. > Your problem is that '00' in the serial file: this is confusing Netscape. The reason for this is that the issuer

beginner question.

2001-09-16 Thread rival
Hello, I got a problem related to EVP primitives, and i can't find where the problem is. in the docs, it says : "..EVP_DecryptInit(), EVP_DecryptUpdate() and EVP_DecryptFinal() are the corresponding decryption operations. EVP_DecryptFinal() will return an error code if padding is enabled and the

Re: Cert Quest & Commands ?

2001-09-16 Thread Dr S N Henson
Averroes wrote: > > > This time, I managed to import the Certificate since I got > the successful message, but nothing appeared in my browser. > No user Cert and No Root-CA Certificate. > > Unbelievable !!! > One other thing. Netscape can exhibit bizarre behaviour if its key/certificate datab

Re: Cert Quest & Commands ?

2001-09-16 Thread Averroes
Hi, Sebastian Paul Avarvarei wrote: > > That's why you see the same name: Netscape checks what CA has signed the client >certificate you import. If the CA name is not on the list of signers it knows, it >will add it there. Because you (probably) use the same commonName for the CA and the >cli

Re: Cert Quest & Commands ?

2001-09-16 Thread Averroes
Hi Steve, Here is a pkcs12 fomat file in attached document. I reproduced all steps below with at the beginning, a serial number "00" in serial file. Password of the pckcs12 file: steve User Key and Req: openssl req -newkey rsa:1024 -keyout \ ./member/averroesKey.pem -out ./member/averroesReq.pe

Re(2): Cert Quest & Commands ?

2001-09-16 Thread Sebastian Paul Avarvarei
Averroes (9/17/2001 7:25 PM): >What I want to say: after importing my user's cert in pkcs12 format >in my Netscape Comm browser, I got an user cert plus server cert, >moreover with the same name!! As Dr. S N Henson very well pointed out, don't use the same field details (especially not the com

Re(2): Cert Quest & Commands ?

2001-09-16 Thread Sebastian Paul Avarvarei
Hi, Of course you can (or should, actually) do that. I wast just talking about the pre-defined list of CAs that the browser trust. Sorry if I wasn't clear. English is not my native language. Best regards, Sebastian Michael Sierchio (9/16/2001 6:48 PM): >Sebastian Paul Avarvarei wrote: > >>