RE: Decryption wrong when seeking into a file.

2002-03-12 Thread David Schwartz
On Mon, 11 Mar 2002 17:37:43 -0500, Bailey, Lorenzo wrote: >lol. Yes , there would be a one-to-one mapping. The data is semi-sensitive. >However, I gave up trying to allow a user to use the original 'seekg' method >for file streams. You are right , if I tried to encrypt\decrypt data a byte >out o

Re: Off-Topic: Wildcard Certificates

2002-03-12 Thread Vadim Fedukovich
On Tue, 12 Mar 2002, Philipp [iso-8859-1] Gühring wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi, > > I read somewhere, that wildcard certificates are generally possible. > (With the exception that not every implementation might like it) > > What about a certificate for *.com, *.

Re: starting new ssl session on existing ssl socket

2002-03-12 Thread Vijo Cherian
This can be done. vijo. On Mon, Mar 11, 2002 at 10:09:58PM -, krish K wrote: > Hi, > > I have to start a new ssl session on previous ssl socket. > Can this be done? Are there any problems I may get into? > > Here is what I need to do: > > 1. start a session > 2. send/receive some data >

Off-Topic: Wildcard Certificates

2002-03-12 Thread Philipp Gühring
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I read somewhere, that wildcard certificates are generally possible. (With the exception that not every implementation might like it) What about a certificate for *.com, *.org or *.net ? I guess, I will have to try, whether any of the certific

Re: Unable to find an RSAREF shared library (librsaref.so)

2002-03-12 Thread Michael Sierchio
dirk van der Giesen wrote: > But... what has the fact that freeBSD has openSSl > build in to do with this errormessage? The one in the base system is built properly ;-) Meaning that it doesn't use any of the rsaglue crud that we used to use in order to circumvent patent restrictions. > Do you

Re: Unable to find an RSAREF shared library (librsaref.so)

2002-03-12 Thread Tim Pushor
The fact is that your copy of OpenSSL is linked against RSARef which as I understand, is much less optimized (read slower) than OpenSSL's RSA implementation, and was only ever used (AFAIK) to satisfy a legal requirement as far as patent protection goes, which is now a non issue. Why would you wan

Re: Signing a server cert... And getting it to work...

2002-03-12 Thread Huibert Kivits
Hi Brandon, Have you imported the public root certificate into your browser before trying to connect to the webserver? Otherwise, your browser won't recognize the certificate. Best regards, Huibert Quoting Brandon Amundson <[EMAIL PROTECTED]>: > Hello again. > > I am having the worst time

Signing a server cert... And getting it to work...

2002-03-12 Thread Brandon Amundson
Hello again. I am having the worst time trying to get a new server cert to allow ssl connections to our new site. I am going to explain everything I have done in hopes that someone will see what I am doing wrong and let me know. >1. I created a server cert request on IIS 6.0, prepare

Re: Unable to find an RSAREF shared library (librsaref.so)

2002-03-12 Thread dirk van der Giesen
Ok Tim Michael, thanks, But... what has the fact that freeBSD has openSSl build in to do with this errormessage? Do you mean it has already a CRS file generated somewhere for somebody to sign, and generated my own private key at installing Every openssl (even the one in usr/bin) version gives

unable to write 'random state' problem.

2002-03-12 Thread mehdi jabal ameli
hello, when i connect to my site and request a certificate , it was create for me but following error exist in apache log file: unable to write 'random state' I set RANDFILE in apache conf. and openssl.conf to /dev/urandom 1024. but ny problem was exists yet. would you tell me how can I solve this

RE: OpenSSL 0.9.7-stable-SNAP-20020310

2002-03-12 Thread Jeffrey Altman
> > From: Kenneth R. Robinette [mailto:[EMAIL PROTECTED]] > > Sent: Monday, March 11, 2002 8:36 AM > > > > As a followup to my previous note, kssl.c also requires the > > following to be added at or near line 98: > > > > #ifdef krb5_rc_initialize > > #undef krb5_rc_initialize > > #endif > > ..

Re: EAGAIN error in SSL_read

2002-03-12 Thread Vijo Cherian
Try SSL_get_error(3) man page. See openssl/demos/tunala/ for sample code. vijo. On Mon, Mar 11, 2002 at 04:32:52PM -0800, [EMAIL PROTECTED] wrote: > Hi, > > I am searching the openssl source code now but I thought I should also > post a question here. I use SSL_read() on nonblocking socket. S

Re: Unable to find an RSAREF shared library (librsaref.so)

2002-03-12 Thread Tim Pushor
IIRC RSARef was RSA Labs reference implementation library. You needed it inside the US because the RSA algorithms were patented and it could have been illegal to use OpenSSL's. The patent has since expired and you no longer need RSARef. FreeBSD 4.4 has OpenSSL build in, why are you using the port

Re: Unable to find an RSAREF shared library (librsaref.so)

2002-03-12 Thread Michael Sierchio
dirk van der Giesen wrote: > I try to create a CA for Verisign to sign on freeBSD > 4.4 which has openssl installed in /usr/local/ssl OpenSSL is part of the base system in 4.4, how did you get it in /usr/local? You neither want nor need RSAREF. Use the version in /usr/bin. __

Unable to find an RSAREF shared library (librsaref.so)

2002-03-12 Thread dirk van der Giesen
Dear Users I try to create a CA for Verisign to sign on freeBSD 4.4 which has openssl installed in /usr/local/ssl First i had the some kind of problem with the config file (openssl.cnf) which it couldn't find and i solved like this: "openssl req -new -nodes -keyout private.key -out public.csr -

RE: OpenSSL 0.9.7-stable-SNAP-20020310

2002-03-12 Thread Michael Wojcik
> From: Kenneth R. Robinette [mailto:[EMAIL PROTECTED]] > Sent: Monday, March 11, 2002 8:36 AM > > As a followup to my previous note, kssl.c also requires the > following to be added at or near line 98: > > #ifdef krb5_rc_initialize > #undef krb5_rc_initialize > #endif > ... A style note: the

Problem with mkcert

2002-03-12 Thread Paolo Rossi
I've compiled and installed openssl-0.9.7-stable-snap-20020226, and tried to use ..\demos\x509\mkcert.c   I've compiled and installed mkcert.c, using the ..\out32dll\*.lib in order to build it. Next I copied the ..\out32dll\*.dll onto ..\demos\x509\debug (the directory of mkcert.exe)   When

Re: Help !!!

2002-03-12 Thread Steve Wirth
> I must mention that this little program works good when linked with static > library, but not with dynamic (crash) > I recognized that problem is with such macros like PEM_load_PrivateKey or > EVP_SignFinal. For example another functions like ERR_load_crypto_strings or > ERR_error, ERR_error_st

Re: Help !!!

2002-03-12 Thread Bogusław Brandys
As I said I can make OpenSSL DLL's using Borland C++ 5.5. Can someone help me finish this work ? I think there is still one problem : a few macros and functions don't work, but they don't work either when linking program with DLL's created with VC++ when using Borland compiler .(first lib files mu

Reappearing messages - Crypto question - how to obtain correct size of plaintext message when decrypting - standard???

2002-03-12 Thread Mads Rasmussen
Sorry, I don't know what is going on but I noticed that a message I have send some days ago reappeared today. Might be our wonderful exchange server, I don't know. I just want to apologize and at the same time greet the persons who took the time to answer. Thanks, Mads Rasmussen ___