install of Net::SSLeay

2001-10-22 Thread Boex,Matthew W.
don't know if this is the right place for this question, sorry if it isn't... i am having problems installing Net::SSLeay on my machine. I am going through a proxy server, I didn't see anything in the Readme regarding them. Anyone install the module using a proxy server? matt _

FreeBSD /dev/random vs OpenSSL random lib

2001-10-22 Thread Tom Tang
Hello, This maybe a stupid question... How does FreeBSD's /dev/random compare to the OpenSSL random number library ? I ran ent and a few other random number testers on 5MB of data and the results while not the same, were pretty close. Anyone ? - Tom Tom Tang ClickArray Networks Ph

Re: Amateur Radio TrustedQSL HELP!!! DSA Certs HOW TO?

2001-10-22 Thread Dr S N Henson
Darryl Wagoner wrote: > > Greetings, > > I am heading the open source TrustedQSL project for Amateur Radio which > is a subproject of the ARRL Logbook of The World project. I would like > to use OpenSSL as the base for TrustedQSL and have done so with my > prototype. The problem is that none

Amateur Radio TrustedQSL HELP!!! DSA Certs HOW TO?

2001-10-22 Thread Darryl Wagoner
Greetings, I am heading the open source TrustedQSL project for Amateur Radio which is a subproject of the ARRL Logbook of The World project. I would like to use OpenSSL as the base for TrustedQSL and have done so with my prototype. The problem is that none of the docs cover the X.509 routines.

Re: Cross Certification

2001-10-22 Thread Peter Sylvester
> > The US Government has a project to do this for some of their (Defense > Dept?) PKI's. I forget the name. Put a new mega-root and have everyone > cross-certify with that root. You still get full paths everywhere, but > it's O(2N) instead of O(N**2) certifications. Bridge CA. ___

Problem with SSL_read

2001-10-22 Thread Juan Carlos Sáez de la Fuente
Dear friends, I have a problem with SSL_read() function. It returns a value 0 and the subsequent call to the SSL_get_error() function returns a value SSL_ERROR_SYSCALL. What happens ? Could anybody help me ? Thanks in advance. Juan Carlos Sáez begin:vcard n:Sáez de la Fuente;Juan Carlos tel

Re: how to replace expired CA certificate

2001-10-22 Thread Ruby Cruiser
I had the same problem... until when I realised that the password I used was wrong... check u'r passwd if its the same... just incase. --- Sarath Chandra M <[EMAIL PROTECTED]> wrote: > Hi, > Recently I generated a CA certificate using > openssl and installed it on > a iPlanet webserver. > Th

No start line

2001-10-22 Thread Andrew Finnell
Title: Message Could someone tell me what the usual cause of a PEM_read_bio:No start line error is? I am getting this and i think it's causing some problems in my application. Thanks.   -Andrew T. FinnellSoftware EngineereSecurity Inc(321) 394-2485  

SSL_connect on Non-Blocking Socket under Windows

2001-10-22 Thread Rabellino Sergio
Dear list users, i'm going to code a tls-telnet module for teraterm under windows socket 2.x, using the Non Blocking version of the sockets. Supposing that I can't never revert the socket to "blocking", there's someone that has the right solution for doing the SSL_connect either with tls or sslv3

Re: Cross Certification

2001-10-22 Thread Rich Salz
> How chaining is different then cross-certification ?. Chaining is a single link from an End Entity up to a root, or trust anchor: A --> CA1 --> CA2 --> ... --> Root (where a-->b means "B has signed the certificate for A") Cross-certification is when you have multiple chains that inter

Re: Cross Certification

2001-10-22 Thread Rich Salz
Why cross-certify? Imagine two organizations, each with their own root, that have now merged. /r$ -- Zolera Systems, Your Key to Online Integrity Securing Web services: XML, SOAP, Dig-sig, Encryption http://www.zolera.com _

Message modified (beginner)

2001-10-22 Thread Andrea Viscovich
Hi, I would like to generate some certificate to use with outlook express. I used this (under winnt cygwin) ./CA.pl -newca ./CA.pl -newreq ./CA.pl -signreq ./CA.pl -pkcs12 "My Test Certificate" Even tried verify, OK. Then imported into outlook, everithing ok. Sending email to myself I obtain an m

Re: Generate a certficate request

2001-10-22 Thread Dr S N Henson
"Seier, Margitta (RAG INFORMATIK)" wrote: > > Hello team, > when I try the command, I get an error: > E:\Oracle\iSuites\Apache\open_ssl\bin>openssl req -new -key key.pem -out > csr.pem [snip] > 238:error:04075070:rsa routines:RSA_sign:digest too big for rsa > key:.\crypto\rsa > \rsa_sign.c:114: >

Generate a certficate request

2001-10-22 Thread Seier, Margitta (RAG INFORMATIK)
Hello team, when I try the command, I get an error: E:\Oracle\iSuites\Apache\open_ssl\bin>openssl req -new -key key.pem -out csr.pem -config openssl.cnf Using configuration from openssl.cnf Enter PEM pass phrase: You are about to be asked to enter information that will be incorporated into your c

RE: Cross Certification

2001-10-22 Thread Tariq Habib
I would like to add to the original question. How chaining is different then cross-certification ?. If cross-certification means then two CAs sign each other then how we can scale to a scenario of more than two CAs in a fully meshed cross-certification model ?. Thanks for a help. Tariq Habib