Re: SQL DB instead of index.txt

2002-01-28 Thread Bear Giles
(Slightly OT, but it is important to anyone looking at storing these objects in a relational database.) > with postgres 7.1 the 8k limit is gone anyway. Yes and no. What 7.1 added - and why I don't support older versions - is TOAST support that tells the database server that it's okay to move t

Re: SQL DB instead of index.txt

2002-01-28 Thread Keary Suska
on 1/28/02 9:10 AM, [EMAIL PROTECTED] purportedly said: >> why not use an existing database abstraction layer such as libdbi or ODBC? > > Too abstract - queries are done with SQL statements. That's not a > problem with a RDBMS backend, but requires a lot of extra code with > everything else. E

Re: SQL DB instead of index.txt

2002-01-28 Thread David Lang
with postgres 7.1 the 8k limit is gone anyway. On Sun, 27 Jan 2002, Bear Giles wrote: > Date: Sun, 27 Jan 2002 19:23:55 -0700 (MST) > From: Bear Giles <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: Re: SQL DB instead of index.txt > > > A simple question, bu

need help with the openssl command.

2002-01-28 Thread "Sandström, Mikael"
Title: need help with the openssl command. Hi I got a old and a new crt file... Now I want to know if the old one really is 128bit crypto. If it's possible.. What do I type using openssl command ? // Micke

Re: SQL DB instead of index.txt

2002-01-28 Thread Bear Giles
> > I can think of multiple > > common storage formats: text files, DBM files, LDAP, RDBMS. > > why not use an existing database abstraction layer such as libdbi or ODBC? Too abstract - queries are done with SQL statements. That's not a problem with a RDBMS backend, but requires a lot of extra

Does the crypto library support this?

2002-01-28 Thread Scott
I asked this question and didn't get a response, maybe I didn't ask it correctly. Please help if you can. I am looking for functions that support the Feige-Fiat-Shamir proof of identification protocol Zero-Knowledge Test/Protocol). We are working on a smartcard project. Feige-Fiat-Shamir group

About UTF8String

2002-01-28 Thread Tomoaki Misaki
hello, I am using openssl-0.9.6b. I have a question. OrganizationName is PrintableString usually, but can make me UTF8Sting? Can you put DirName in issuerAltName? Thanks, Tom __ OpenSSL Project ht

Re: SQL DB instead of index.txt

2002-01-28 Thread Richard Levitte - VMS Whacker
From: Marko Asplund <[EMAIL PROTECTED]> aspa> On Sun, 27 Jan 2002, Bear Giles wrote: aspa> aspa> > ... aspa> > Long term, it would be best to create an abstraction layer that aspa> > would allow any backend to be used. I can think of multiple aspa> > common storage formats: text files, DBM file

RE: OpenSSL ported to VxWorks?

2002-01-28 Thread Prashant Kumar
Hello Ganesh, For Vxworks you should include . Vxworks doesn't have a "times" function, however, Vxworks has a "time" function. Also, Vxworks has "random" and "srandom" function. About "Time_F" function in "apps" directory, I have not ported this directory. I have ported only the "ssl" and "cry

Re: SSL.PM question

2002-01-28 Thread Ron . Flolid
Thanks for the response and your suggestion was essentially what I had added to the SSL.pm module to get around the problem. I guess that my wording of the problem made it appear that I was asking the significance of the "uninitiated variable", but I was really trying to understand why the SSL.pm

RE: PKCS12 import faulire

2002-01-28 Thread Alvaro Egea
Hello, Thanx. My problem is, I think, during IE export process, or during Microsoft Root CA generation. I cannot modify the parameters for the root CA so I cannot change or see anything. OpenSSL does not have problems, I can create CAs, and client certs... package, import... whatever you want. Bu

RE: SSL connection without certificate and private key?

2002-01-28 Thread Shaw, George
You can use Anonymous Diffie-Hellman cipher, which is excluded from the default cipher list. But beware ... this will not stop a man-in-the-middle attack. You should look at the set cipher functions in the manual pages. G. -Original Message- From: Petr Knez [mailto:[EMAIL PROTECTED]]

RE: OpenSSL Key Generation GUI for Windows

2002-01-28 Thread Richard Koenning
At 09:09 28.01.2002 -0500, you wrote: > I was under the impression that on windows OpenSSL uses >RAND_screen which will obtain random data from the screen and mouse events? >Shouldn't you use that? Exactly this function (in crypto/rand/rand_win.c) i had on my mind, but i was too lazy

Re: SQL DB instead of index.txt

2002-01-28 Thread Marko Asplund
On Sun, 27 Jan 2002, Bear Giles wrote: > ... > Long term, it would be best to create an abstraction layer that > would allow any backend to be used. I can think of multiple > common storage formats: text files, DBM files, LDAP, RDBMS. But > that's definitely not a 0.9.7 task! why not use an ex

RE: OpenSSL Key Generation GUI for Windows

2002-01-28 Thread Jeffrey Altman
> I was under the impression that on windows OpenSSL uses RAND_screen > which will obtain random data from the screen and mouse events? = > Shouldn't > you use that? OpenSSL uses a combination of method including walking the Process and Thread tables; importing network state information; wa

RE: OpenSSL Key Generation GUI for Windows

2002-01-28 Thread Andrew Finnell
Title: RE: OpenSSL Key Generation GUI for Windows     I was under the impression that on windows OpenSSL uses RAND_screen which will obtain random data from the screen and mouse events? Shouldn't you use that? - Andrew T. Finnell Software Engineer eSec

Re: PKCS12 import faulire

2002-01-28 Thread Aleix Conchillo
Hi Alvaro, I had a similar problem with netscape. When i generated the certificates, i initialized the certificates serial number file (ca.srl) to 00 and netscape correctly exported the user certificate, but not the ca. i repeated all steps again without reseting ca.srl to 00 and then it

PKCS12 import faulire

2002-01-28 Thread Alvaro Egea
Hi all, I have a problem with PKCS#12 Import procedure in Netscape Navigator. During the development tasks I have created my own CA using OpenSSL, everythig went ok (Client Cert for IE and Netscape). The certification process is done only for one of the browsers (IE) and then the certificate is

SSL conection without certificate and private key?

2002-01-28 Thread Petr Knez
Hi, can I establish SSL conection without certificate and private key? I need only secure conection without authentication. I have tried this but SSL_accept return this error: (1) error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher. Thanks, Petr

Re: OpenSSL Key Generation GUI for Windows

2002-01-28 Thread Richard Koenning
At 12:55 27.01.2002 +, you wrote: >I'm thinking of writing a small GUI application that implements just the 2 >following functions of: > >*Create a self-signed certificate >*Create a private key > >First, is there such an application already around (I can't find any), and >secondly, would a ra

Re: 0.9.7-dev ncipher bugfixes

2002-01-28 Thread Richard Levitte - VMS Whacker
From: Toomas Kiisk <[EMAIL PROTECTED]> vix> $ nfkminfo -k vix> [vix@eebik vix]$ nfkminfo -k vix> Key summary - 1 keys: vix> AppName embedIdent b6621954138bf0e41553115f2c402ed802c1bdb1 vix> vix> How do I load this key with openssl? Operator card does not vix> have a passphrase.