Re: server wouldn't accept client certificate

2001-09-17 Thread Eric Rescorla
Michael Sierchio <[EMAIL PROTECTED]> writes: > "Chen, Qiming" wrote: > > > > Hi, when I use ssldump to watch my server and client communication in linux, > > client sent certificate to server, but server always said: bad certificate. > > Anyone know how do I make a client certificate that server

IE & sample serv.cpp

2001-09-17 Thread 김형우
Hello. I found someone who suffers from same problem of me in the prvious mailing list messages. He asked some advice but I can't find any response. so I put this request again. =) I do need answers of this problem.. (ps . when i have modified IE's internet option about security, i can read & wr

Re: server wouldn't accept client certificate

2001-09-17 Thread Eric Rescorla
"Chen, Qiming" <[EMAIL PROTECTED]> writes: > Hi, when I use ssldump to watch my server and client communication in linux, > client sent certificate to server, but server always said: bad certificate. > Anyone know how do I make a client certificate that server will accept? > Thanks a lot! You need

??: How to load a P12 certificate?

2001-09-17 Thread YONG.YUE
Title: ??: How to load a P12 certificate?   i think u should initialize the openssl lib first.. -原始邮件-发件人: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]代表 Jordan C N Chong发送时间: 2001年9月17日 21:04收件人: [EMAIL PROTECTED]主题: RE: How to load a P12 certificate? Dear YongYue

Re: server wouldn't accept client certificate

2001-09-17 Thread Michael Sierchio
"Chen, Qiming" wrote: > > Hi, when I use ssldump to watch my server and client communication in linux, > client sent certificate to server, but server always said: bad certificate. > Anyone know how do I make a client certificate that server will accept? > Thanks a lot! The server sends a list o

server wouldn't accept client certificate

2001-09-17 Thread Chen, Qiming
Hi, when I use ssldump to watch my server and client communication in linux, client sent certificate to server, but server always said: bad certificate. Anyone know how do I make a client certificate that server will accept? Thanks a lot! Chen __

Obtaining IP Address

2001-09-17 Thread Andrew Finnell
Title: Obtaining IP Address     Dear OpenSSL followers,     Is there a way to obtain the host/ip address from an SSL *. It would help me greatly in my project if that was possible. Thanks! - Andrew T. Finnell Software Engineer eSecurity Inc (321)

Re: Netscape initial connection failure

2001-09-17 Thread Eric Rescorla
CJ Holmes <[EMAIL PROTECTED]> writes: > on 9/17/01 10:50 AM, Eric Rescorla at [EMAIL PROTECTED] wrote: > > >> I get the same error connecting from other client machines using Netscape > >> 4.7, but not if I use 4.7.5. There's clearly a bug in Netscape 4.7 and > >> earlier versions, but why is i

Re: Netscape initial connection failure

2001-09-17 Thread CJ Holmes
on 9/17/01 10:50 AM, Eric Rescorla at [EMAIL PROTECTED] wrote: >> I get the same error connecting from other client machines using Netscape >> 4.7, but not if I use 4.7.5. There's clearly a bug in Netscape 4.7 and >> earlier versions, but why is it just affecting our implementation of >> OpenSSL

STARTTLS patch for OpenSSL

2001-09-17 Thread Christopher Crowley
Hello - I tried to incorporate the starttls.c patch available for OpenSSL, without success. The patch was originally released : /* apps/starttls.c */ /* Copyright (C) 1995-1998 Eric Young ([EMAIL PROTECTED]) * This package is an SSL implementation written * by Eric Young ([EMAIL PROTECTED]). But

Certificate extensions

2001-09-17 Thread Pooja Aggarwal
I have couple of questions about X.509 v3 certificates in general. I have a system in which we were communicating keys using files/records. I now want to migrate to certificates. There are fields in the record which do not have a corresponding extension in X.509 spec. How can i encode them in a

names, IPs, server certs

2001-09-17 Thread Dilkie, Lee
Hi, I have a bit of a problem. My server is not always at the same IP address (and there are no DNS services available). And it has two IP addresses. I'd really like to have both IP addresses in the certificate, can this be done by adding an additional common_name to the openssl.cnf, ie. 0.co

Re: Netscape initial connection failure

2001-09-17 Thread Eric Rescorla
CJ Holmes <[EMAIL PROTECTED]> writes: > I get the same error connecting from other client machines using Netscape > 4.7, but not if I use 4.7.5. There's clearly a bug in Netscape 4.7 and > earlier versions, but why is it just affecting our implementation of > OpenSSL? That's a good question. > I

Re: Netscape initial connection failure

2001-09-17 Thread CJ Holmes
on 9/14/01 7:14 PM, Eric Rescorla at [EMAIL PROTECTED] wrote: > Just because the client sends a bogus CSS message, why would this > cause the server to do so? I'm wondering if you have a networking > problem. Did you collect these traces with a sniffer or via your > program? If you did so via you

Re: CERT with two IPs ????

2001-09-17 Thread Eric Rescorla
chirs charter <[EMAIL PROTECTED]> writes: > Hello, > I am using imaps to retrieve my mail. My IMAP server > has both a public IP address and a non-routable adress > that we use here on the local LAN. From outside the > network users at home are able to retrieve mail > without problem. However her

CERT with two IPs ????

2001-09-17 Thread chirs charter
Hello, I am using imaps to retrieve my mail. My IMAP server has both a public IP address and a non-routable adress that we use here on the local LAN. From outside the network users at home are able to retrieve mail without problem. However here on the LAN where we use the non routable address to r

RREMOVE

2001-09-17 Thread celikkan
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Creating pvk files

2001-09-17 Thread Ed Mangual
I have recently setup my own CA at my company for internal use only, the purpose of this is to be able to generate my own certificates for code signing and ssl server authentication. The problem I have ran into is in regards to creating the Software Publishing Certificates and pvk file for use wit

where can i find pkcs12_parse?

2001-09-17 Thread Candy Ho Pui Shan
Hello, Where can i find the resources and documentation for using C++ on openssl ar? Where can i find for the pkcs12 functions such as pkcs12_parse ar? thanks. candy. ___ Do You Yahoo!? Get your free @yahoo.com.hk address at

RE: compilation de openssl

2001-09-17 Thread lgazis
You need to set your path such that /usr/ucb/cc is not the first C compiler picked up.  You want either the Sun native C compiler in /opt/SUNWspro/bin, or else gcc.   Lynn Gazis -Original Message-From: laurent evain [mailto:[EMAIL PROTECTED]]Sent: Monday, September 17, 2001

Questions about NO_BIO and NO_STDIO

2001-09-17 Thread Tim Michals
All, I'm trying to build the cryptolib without file access(fopen, fclose, etc) and general tty. The main reason for this, trying to use a small embedded OS, that is very primitive and does not have a Unix file system interface. The certificate file will be stored in non-volatile ram. The appl

compilation de openssl

2001-09-17 Thread laurent evain
J'ai essayé de compiler l'openssl-0.9.06b sous solaris8 1/01 avec le compiler cc lorsque je lance la commande make ou make test Ci-joint le fichier d'erreur Je n'ai pas osé lancer l'installation (make install) Pourriez-vous m'aider à savoir d'ou vient cette erreur en sachant que j'a install

mod_sll

2001-09-17 Thread Victor Koval
Hi. Module mod_sll not start in windows NT/2000/XP : Syntax error on line 203 of c:/apache/conf/httpd.conf: Cannot load c:/apache/modules/mod_ssl.so into server: (126) The specified module could not be found: BUT in windows 9x it work fine!

RE: How to load a P12 certificate?

2001-09-17 Thread Jordan C N Chong
Title: ??: How to load a P12 certificate? Dear YongYue   I am sorry to bother you again. Thousand thanks for your help indeed. After testing your code, sadly it doesn't work. I have done two tests on the codes:   1. Put nothing (or some wrong password) at the password field during parsing

Netscape problems

2001-09-17 Thread eXtremail
Hi, Does anyone knows if there are problems with Netscape Messsenger (for Linux) and the OpenSSL API's? I have adapted a mail server to work with TLS, and with previous versions of Netscape worked fine, but not with the last one. It says something like protocol not supported when trying to S

No Subject

2001-09-17 Thread raghu
``The wise man doesn't give the right answers, he poses the right questions.'' __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated Li

Re: Trouble with HTTPS: and PERL

2001-09-17 Thread Sisyphus
- Original Message - From: "Marko Asplund" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, September 16, 2001 9:27 PM Subject: Re: Trouble with HTTPS: and PERL > On Sat, 15 Sep 2001, Sisyphus wrote: > > > I don't think LWP supports 'https' protocol. Note that '$req' is a > > '

Decode PKCS#12 into PKCS#11 attributes?

2001-09-17 Thread Candy Ho Pui Shan
Question: = How to import a p12/pfx certificate file in binary format into a cryptographic token using Visual C++ platform? input: p12 file processes: using cryptoki library e.g. C_CreateObject output: 3 objects (private/public keys, certificate) inside the cryptographic token. i.e. Ho