I'm writing a book...

2002-03-27 Thread Mike Schiffman
Hi. I'm writing a book on open source network security tools and I'm covering a portion of OpenSSL and I have a few questions for those of you who are "seasoned" OpenSSL users / developers. I'll ask them in order of stupidity... ;) 1) The evp(3) interface (all of the EVP_ functions) refers to a

Re: Csslsocket

2002-03-27 Thread M.Srikanth
Where did u find the Windows SDK ?? IF u cud gimme the link i would be grateful to u.. as i wud also like to try to install it and then c. On Wed, 27 Mar 2002, Pablo J Royo wrote: > Hi : > > I did exactly the same and it gave me the same error. > I have read you have to install Windows SDK to

Re: Csslsocket

2002-03-27 Thread Pablo J Royo
Hi : I did exactly the same and it gave me the same error. I have read you have to install Windows SDK to get the right libs and headers (schannel.dll) installed in your machine in order to compile, but I did that and errors were the same. I hope you'll share the solution if you solve this. -

Csslsocket

2002-03-27 Thread M.Srikanth
Has ne one used the Csslsocket . I found the links in www.codeproject.com and downloaded the demos. but i cud not compile them. in case ne one has done this kindly help me. srikanth __ OpenSSL Project

How to use OpenSSL on Win2000?

2002-03-27 Thread Chuck Roberts
How do I get OpenSSL to work on a Win2000 client, which will be using MSAccess 2002 to connect to a mysql server (also using SSL) via the internet? What are the minimum required switches for the "openssl s_client" command? Could someone give me an example? How do I setup OpenSSL on Win2000? Do I

Does it work!

2002-03-27 Thread Zamangoer, Ferruh
Hi all, I want to know if openssl on my server works. I have do following Steps: First I have create a with the command: openssl req -new -x509 -nodes -days 730 -out server.pem -keyout server.pem Than I have make some changes in my slapd.conf to include the Certificates: TLSCertificateFile

Re: certificate verification and Sub CAs

2002-03-27 Thread Harald Koch
> This problem arises because of the structure behind the PKI. If your > root CA cannot be trusted, you should also not trust the certificates > issued by its sub-CAs. It's not that I don't trust the Root CA; I don't trust other sub-CAs of the Root CA, A minor but important point. The Root CA mig

Re: certificate verification and Sub CAs

2002-03-27 Thread Lutz Jaenicke
On Thu, Mar 21, 2002 at 03:43:00PM -0500, Harald Koch wrote: > So I'm attempting to verify a certificate with OpenSSL 0.9.7 snapshot > (various versions). I trust my own CA, who's certificate is issued by a > Root (self-signed) CA that I do not wish to trust, because it has also > issued a CA cert

extract CN and dNSName

2002-03-27 Thread Shane Titus
If anyone could help me it would be well appreciated.  I am trying to extract the Common Name and the dNSName from a certificate.  I was attempting this using the X509_get_ext_d2i(x, NID_commonName or NID_subject_alt_name, NULL, NULL);.  I can't seem to get it working.   Thanks   Shane Titus

Re: binaries

2002-03-27 Thread Paul E. Prak
Hi Andrew, I like to have a certificate for my http-server and to create certicate for members of my team. The platform i am currently running on is win98se (dutch version) Talking about a fee? Maybe at a later stage for now i don't know. Regards, Paul - Original Message - From: "Andre

Re: creating shared libs on hp-ux 11

2002-03-27 Thread Chad Elliott
Hi Rob, I'm not sure if this matters anymore, but I was able to create shared libraries on HP-UX with openssl version 0.9.6c. Creating a shared library on HP-UX 11.00 is a two step process. First, all of the object files must be collected into a single relocatable object. /usr/ccs/bin/ld -r -o

RE: binaries

2002-03-27 Thread Andrew T. Finnell
What kind of platforms are we looking to have this on? I have somewhat access to a large set of machines including the following: Compilers: -- Visual C++ 6.0 Visual C++ .NET SunCC 5.2 gcc (of course.. ) Platforms: -- Windows NT 4.0 Windows 2000 Windows 2000 Advanced Server Wi

Trusted certificate

2002-03-27 Thread Alexander . Ganishev
Hi, Could you please explain me how to add certificate to trusted certificates and what should I wrote in openssl.conf? Thank you for your time, Alexander Ganishev __ OpenSSL Project http://www.

Re: A question!

2002-03-27 Thread Robert Joop
On 02-03-26 14:29:47 CET, chenhaiyong wrote: > Dear webmaster: who? > When I use the openssl command: > > openssl req -config filename -new -x509 -days > 365 -key ca.key -out ca.crt > > to create a self signed certificate(ca.key is the > file where the CA's private key is pu

Re: binaries

2002-03-27 Thread Richard Levitte - VMS Whacker
A note on this: if someone wants to produce OpenSSL binaries in a consistent way and put them out somewhere, I'd be happy to link to them or the directory they're in. Note that consistently means that there should be some kind of note saying exactly how the binaries were produced and what is requ

force renegociate

2002-03-27 Thread Vincent RICHARD
Hello, I've got Apache and SSL (openSSL, modSSL) running on W2000server Two virtual host: -on 443, with certificate client require -on 8080, with certificate client optional.   I'd like my server to ask the client's certificate each time he goes from on virtual host to another, but it's not

steps to creat the required certificates and keys

2002-03-27 Thread Ajit, Kumar (IE10)
Hi, I am struggling to authenticate my client (It's not a browser) to the Apache web server. Anybody, please write me the command sequences I need to execute to create all the needed certificates and the key files. Thanks & regards Ajit

Re: Problem with string type for CN when trying to sign csr

2002-03-27 Thread Robert Joop
On 02-03-27 11:15:51 CET, Gerd Schering wrote: > Hi, > > I have the following problem: > I want to sign a request which contains as CN a string like > CN=SomeTest@SomeTeam@[EMAIL PROTECTED] > > > When trying to sign the csr, i get: > > Check that the request matches the signature > Signature o

Problem with string type for CN when trying to sign csr

2002-03-27 Thread Gerd Schering
Hi, I have the following problem: I want to sign a request which contains as CN a string like CN=SomeTest@SomeTeam@[EMAIL PROTECTED] When trying to sign the csr, i get: Check that the request matches the signature Signature ok The Subjects Distinguished Name is as follows [...] commonName

Re: Confusion between a CA cert and a self signed CA cert

2002-03-27 Thread Haikel
Hi yassir, Only root CAs have self signed CA certificates. This CA certificate is signed with the private key associated to the public key it icludes. If a root CA signs a new certificate for a subCA, the new certificate is a CA certificate because it was signed by a private key owned by a diff

RE: settings for making a local CA

2002-03-27 Thread Amol Natu
Check out: http://www.linuxdoc.org/HOWTO/SSL-Certificates-HOWTO/ Amol -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of amit limaye Sent: Wednesday, 27 March, 2002 10:50 AM To: [EMAIL PROTECTED]; Bhavin Shah; [EMAIL PROTECTED] Subject: settings for maki

unable to get local issuer certificates

2002-03-27 Thread Ajit, Kumar (IE10)
Hi, What is the meaning of "unable to get local issuer certificates" (error code 20), during Certification Verification? thanks Ajit __ OpenSSL Project http://www.openssl.org User Support Mailing Li

settings for making a local CA

2002-03-27 Thread amit limaye
ne ideas how can i set a new local CA on my machine -SIGTERM amit On Wed, 27 Mar 2002, Bhavin Shah wrote: > Hi Amit, > > I cannot exactly solve the particular problem which you mention, but you can > go through the directory: > /apps > > This directory contains a number of applications t