RE: basic constraints extension

2001-12-26 Thread Bruenner, Joerg
> can please anybody help me with using this extension? I try to create and sign a > certificate. I define basicConstraints=CA:true, and that's ok. When I add > (pathLengConstraint:0) I receive an error message that this name is unknown. What > can I do to make it work? Try pathLengthConstra

Re: basic constraints extension

2001-12-26 Thread Averroes
Hi, > "Schor, Bella" wrote: > > HI, > > can please anybody help me with using this extension? I try to create and sign > a certificate. I define basicConstraints=CA:true, and that's ok. When I add > (pathLengConstraint:0) I receive an error message that this name is unknown. > What can I do to

Question on SSL_dup...

2001-12-26 Thread Sankaran Narayanan
I am adding TLS support to one of our servers, and for some legacy reasons i need to share the main SSL pointer across several threads. in the dispatcher thread i use SSL_dup and then allow the worker threads to free the dup'ed SSL object when it is done... however, SSL_write's on the dup'ed obje

Re: PEM_read_RSAPublicKey

2001-12-26 Thread Ricardo Guerra
thanks :) pubKey is supposed to be used to decrypt a string previously encrypted with the privateKey (rsa_private_encrypt).. by the way... is it possible? i have seen some code and openssl itself to encrypt using public key and decrypt using the private key... El Miércoles 26 Diciembre 2001 1

Re: Seems to be a bug with EVP_get_cipherbyname(p)

2001-12-26 Thread Dr S N Henson
> chris mollis wrote: > > > so far so good (I hope).. when I use the function > PEM_Read_PrivateKey(fp, null, null, null) to construct the key, it > always returns null. When I debugged it, I found that > EVP_get_cipherbyname() called in PEM_get_EVP_CIPHER_INFO() always > returns NULL when pass

Re: PEM_read_RSAPublicKey

2001-12-26 Thread Dr S N Henson
Ricardo Guerra wrote: > > hi all, > > i've been having trouble with this pice of code, i get a segmentation fault > when reading the public key, this is the way i generated both private and > public keys. > > priv Key: openssl genrsa -out priv.key 1024 > pub Key: cat pub.key | openssl rsa -pubo

PEM_read_RSAPublicKey

2001-12-26 Thread Ricardo Guerra
hi all, i've been having trouble with this pice of code, i get a segmentation fault when reading the public key, this is the way i generated both private and public keys. priv Key: openssl genrsa -out priv.key 1024 pub Key: cat pub.key | openssl rsa -pubout > pub.key does anyone have any idea

RE: X509 extensions checking.

2001-12-26 Thread Alexey Kobozev
Hi! > Err start again :-) Oops, sorry, I didn't see thread about it. > Purpose checking is done automatically in the newer releases of OpenSSL > as part of the client certificate verify process, including checking >extendedKeyUsage. > > Several checks take place, currently documented in the x

Re: X509 extensions checking.

2001-12-26 Thread Dr S N Henson
Alexey Kobozev wrote: > > Hi, All! > > Suppose I have a SSL server and I want to check the purpose of > the client certificate, which means that I need to check the > enhancedKeyUsage contents. What I've done is enumerated the > X509 extensions by X509_get_ext_count() and X509_get_ext(), > found

Re: 40 / 56 bit encyption

2001-12-26 Thread Ricardo Guerra
hi all, i've been having trouble with this pice of code, i get a segmentation fault when reading the public key, this is the way i generated both private and public keys. priv Key: openssl genrsa -out priv.key 1024 pub Key: cat pub.key | openssl rsa -pubout > pub.key does anyone have any idea

X509 extensions checking.

2001-12-26 Thread Alexey Kobozev
Hi, All! Suppose I have a SSL server and I want to check the purpose of the client certificate, which means that I need to check the enhancedKeyUsage contents. What I've done is enumerated the X509 extensions by X509_get_ext_count() and X509_get_ext(), found the enhancedKeyUsage by OID X509_EXT

RE: 101-OpenSSL question..

2001-12-26 Thread Matthew Smith
Simple but stupid…Why don’t you just capture packets coming into a box…on the lower levels of the osi, modify the packet and send to the higher levels of the osi.. Why do you need to use OpenSSL… Let us know .. give me some more hints..     Regards, Matthew Smith (MCSE,CNE,CCNA,CCIE)

Re: 101-OpenSSL question..

2001-12-26 Thread Vadim Fedukovich
On Mon, 24 Dec 2001 [EMAIL PROTECTED] wrote: > > Hi expert guys,.. :) > > I'm starting a class project which requires handling a packet after > encryption it, and before transmi it to the IP layer. I want to to add a > header and modify the current IP address of the packet. > > The steps -- i

Re: Apache and SSL

2001-12-26 Thread Vadim Fedukovich
On Sat, 22 Dec 2001, Mike Brandonisio wrote: > Hi, > > I wanted to post an answer to a problem I had with Apache and SSL. It took > some time to figure this one out but here it is: > > PROBLEM: > When I installed Apache and setup a virtual server for my test web site the > standard HTTP requests

generating a certificate

2001-12-26 Thread deepak
hi i am very new to cryptography and i was trying my hands to generate a certificate using openssl but was not able to make one due to absence of any good tutorial. could some one provide a pointer to a detailed procedure in creating a certificate. I want to make a certificate for weblogic applic

certificate for IPsec & outlook

2001-12-26 Thread Vincent Chen
Dear all, I was able to create a certificate for my website successfully using openssl and this ssl-enabled website works fine so far. Recently, I tried to create certificate for IPsec and outlook but both failed. I import my CA's certificate to w2k. But my CA never appear in the list while conf

101-OpenSSL question..

2001-12-26 Thread abce1234
  Hi expert guys,..   :)   I'm starting a class project which requires handling a packet after encryption it, and before transmi it to the IP layer. I want to to add a header and modify the current IP address of the packet.    The steps -- in summery -- are as follow:   *