OpenSSL's make scripts + Cygwin's perl = Bad Mojo

2001-11-02 Thread Tofu Dog
This is a cautionary tale.  I'll sum up the moral at the beginning: "Don't try to compile OpenSSL on Windows from inside the Cygwin shell."   The problem, in a nutshell, is that Cygwin installs a Cygwin-friendly perl interpreter into cygwin/bin.  The reason this is an issue has is that mkdef

problem with SSL reconnection

2001-11-02 Thread ganesh kumar godavari
hi everyone, i am working on a ssl server, upon getting a request from the client, the server is succesfully serving the request. if i am going to use the same process for serving another request from the same/different client I get the following error during SSL_accept(): 10190:error:140D9

Re: openssl performance

2001-11-02 Thread Geoff Thorpe
On Monday 09 July 2001 13:52, Steven A. Bade wrote: > OK Stupid question Where can one find SWAMP??? There's a downloadable tarball at; http://www.geoffthorpe.net/crypto/ However, expect a heavily revamped version soon ... Cheers, Geoff __

Re: HOWTO...

2001-11-02 Thread Franck Martin
If the private key is given away, the the certificate is useless, and does not protect anything it signs. As you seem very smart, how do you renew a certificate with openssl when you are a CA? Cheers. On 02 Nov 2001 09:33:19 -0800, Michael Sierchio wrote:> > Franck Martin wrote: > > > > I ag

RE: Anyone using A Chrysalis Luna CA3 box?

2001-11-02 Thread Ryan Hurst
I briefly tried using the Eracom patch that was submitted with a LunaCA but was un-successful. I did not spend any time diagnosing but the framework was good enough to make it work it would just take some time which I did not have. Ryan -Original Message- From: Steven A. Bade [mailto:[EM

Re: RSA Encrypt / Decrypt Problem

2001-11-02 Thread Steven A. Bade
On Wed, May 30, 2001 at 01:24:06PM -0700, dnewbold wrote: > I'm pretty new to security, RSA, and OpenSSL. But I have encountered a > weird problem that I hope someone on this list > can explain. I have a demonstrable, repeatable, situation in which I can > encrypt a user data buffer with an RSA

Shared libs under Linux

2001-11-02 Thread Matthew Fleming
Netmeisters, I've just had some trouble building shared versions of the ssl libraries under Linux. I just did ./config shared make make test make install Make test reports no errors, but make install finishes with: installing libcrypto.so /usr/bin/ranlib: /usr/local/ssl/lib/libcrypto.so: File

Re: porting openssl to linux kernel

2001-11-02 Thread Andreas Sterbenz
Imran Badr wrote: > I think Eric Rescorla responded to a similar question sometimes ago that RSA > operation would be a limiting factor. But if you take that bottleneck away > then I think putting SSL handshake and record porcessing layers in kernel > space would be a next better thing to do beca

Re: HOWTO...

2001-11-02 Thread Michael Sierchio
> Franck Martin wrote: > > I agree with you. I will make the modification. Yes the CA root certificate should >be protected. No, you still don't have a clue -- you don't protect a certificate, it's essentially a public document. You protect the private key.

Mac OSX Server 10.1 (Darwin)

2001-11-02 Thread Dale Schell
Hi all, I am compiling libcurl for php on Mac OSX Server 10.1. I need libcurl to support ssl. When I try to ./config for openssl 9.6b I get this message. Operating system: Power Macintosh-whatever-Darwin This system (Darwin) is not supported. See file INSTALL for details. Is th

Re: License Question

2001-11-02 Thread Rich Salz
That part of the license doesn't actually add anything that wasn't already there under standard copyright terms. That part of the license is from the days when the codebase was SSLeay, the product of Eric and Tim. Years ago. AT the time, it was not uncommon for someone to "rip off" open source

Re: SSL_read() and select() problem.

2001-11-02 Thread Venugopal Panchamukhi
It's coming from the beginning. Right now i don't have the ssl_dump but shall send it to you once i get that. Thanks, Venu Eric Rescorla wrote: Venugopal Panchamukhi <[EMAIL PROTECTED]> writes: >    I've modified the client code in such a way that reading and writing > is done in a single thread.

License Question

2001-11-02 Thread Steven A. Bade
The last paragraph of the license says: * The licence and distribution terms for any publically available version or * derivative of this code cannot be changed. i.e. this code cannot simply be * copied and put under another distribution licence * [including the GNU Public Licence.] Coul

RE: Problem with installing Crypt::SSLeay

2001-11-02 Thread Feng, James
Josh, Thanks. After I installed gcc3, I have successfully installed SSLeay. Thanks again. > -Original Message- > From: Joshua Chamas [mailto:[EMAIL PROTECTED]] > Sent: Thursday, November 01, 2001 1:57 PM > To: Feng, James > Cc: [EMAIL PROTECTED]; Keary Suska > Subject: Re: Problem with

Follow-up

2001-11-02 Thread George Staikos
Thanks to everyone for pointing me to PEM_X509_INFO_read However I've noticed a very strange problem. If I call: ASN1_d2i_fp(X509_new, d2i_X509, fp, NULL); before I call PEM_X509_INFO_read(fp, NULL, myPemCallback, NULL), and the ASN1_d2i_fp call fails, the PEM_X509_INFO_read call _always_ fa

¿ªÍعØÏµ£¬ÈýÊ®¶øÁ¢

2001-11-02 Thread up30.com
Title: ÉϹØÏµÍ¨£¬½±ÉÌÎñͨ£¡       ÉϹØÏµÍ¨£¬½±ÉÌÎñͨ

Re: SSL_read() and select() problem.

2001-11-02 Thread Eric Rescorla
Venugopal Panchamukhi <[EMAIL PROTECTED]> writes: >I've modified the client code in such a way that reading and writing > is done in a single thread. But my basic problem was not cleared. When > i'm calling select() it is returning the read condition after which the > read_SSL() method is retu

build on HP9000/800

2001-11-02 Thread Michael Stach
Hi, I have trouble building openssl-0.9.6b on a HP A400 9000/800 with HP-UX 11i. The library builds without any warnings or errors but the "make test" does not run. "config -t" prints -- Operating system: 9000/800-hp-hpux11 Configuring for hpux-parisc

Re: SSL_read() and select() problem.

2001-11-02 Thread Venugopal Panchamukhi
Hi,    I've modified the client code in such a way that reading and writing is done in a single thread. But my basic problem was not cleared. When i'm calling select() it is returning the read condition after which the read_SSL() method is returning value 0. When i tried to find out the error usi

Re: HOWTO...

2001-11-02 Thread Franck Martin
I agree with you. I will make the modification. Yes the CA root certificate should be protected. However, if I use a certificate signed by the root CA, and I connect to the webserver, how do I install the root CA inside the browser without creating too much problem for the user so that the Cert

RE: porting openssl to linux kernel

2001-11-02 Thread John . Airey
Even if it were viable to put openssl in the kernel, I personally think that this would create more problems than it solves. For instance, any bug in the openssl code could potentially crash the kernel, rather than simply segfaulting. (I'm typing this in vmware, which has its own kernel modules an

Re: HOWTO...

2001-11-02 Thread Dr S N Henson
> Franck Martin wrote: > > I have just written a little HOWTO, to be able to handle certificates. > I'm happy to receive comments and suggestions to improve it. > An alternative location for the OpenSSL configuration file can be specified using the environment variable OPENSSL_CONF. The comman