RE: Problems with installation

2002-04-25 Thread Lynn Gazis
I take it you're on Solaris. You need to use either Sun's SUNWspro C compiler, or gcc, and, whichever one you use, it should come in your path before /usr/ucb/cc. In fact, remove /usr/ucb from your path altogether when building OpenSSL; you don't want to be using anything there. If you have fur

RE: How to generate a dsa key?

2002-04-25 Thread Aslam
Check out following: EVP_PKEY* create_key(int key_type, int key_size, char* file) { EVP_PKEY* key = NULL; RSA*rsa = NULL; DSA*dsa = NULL; BIO*bio_key = NULL; charkey_file[256] = ""; if(! (key

How to generate a dsa key?

2002-04-25 Thread Lidia Castillejo
Sorry i see in dsa.h file :) Regards, lidia __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

How to generate a dsa key?

2002-04-25 Thread Lidia Castillejo
Hi, I would generate a dsa pair keys and store in pem files (private.pem /public.pem) from the openssl api. I see in pem.h file and i find: int DSA_generate_key(DSA *a); DSA * DSA_generate_parameters(int bits, unsigned char *seed,int seed_len,

Re: Important Message Concerning Your Membership Account. 4/23/2002 6:30:09 PM

2002-04-25 Thread Claus Assmann
On Thu, Apr 25, 2002, Nick Simicich wrote: Maybe we can create a new list: how to manage a mailing list? This stuff comes up now and then, esp. if some idiot creates a loop or other idiots turn on their "out of office" garbage replying to mailing lists. > At 10:28 AM 2002-04-25 +0200, Richard L

Using filter BIO's and MD5

2002-04-25 Thread Jerry Napoli
Hello, I'm trying generate a base64 encoding of an MD5 hash of a string using a chain of filter BIO's attached to a memory BIO sink. When I extract the data from the memory BIO (after performing a BIO_write followed by a BIO_flush), it appears that only the base64 encoding is performed. When I

Re: Small problem with OpenSSL Client / Win32 VC++ / 3 byte junk data

2002-04-25 Thread Johann Müller
u, forget this, I figured I was just to dumb to read the HTTP 1.1 specs for chunked transfer mode. so the "junk" actually is the length info for the "chunks" :-) thus no problem with OpenSSL and i hope you had a good lough :) ___

RE: nmake problem on win2000

2002-04-25 Thread Erik Ulrichts
Hi, This problem has been mentoned before. In the mailing lists from openssl the following is proposed : replace : #include unistd.h with #include #ifndef MSDOS #include #else #include typedef int pid_t; #endif Regards, Erik Ulrichts Hypertrust NV Belgium [EMAIL PROTECTED] -Origi

CRLs in multilevel CAs

2002-04-25 Thread Volker Bott
Hi, I am using openssl-0.9.7-pre1 to create a mutilevel CA including the appropritate CRLs, e.g. root CA --> level 1 CA (here: level 1 CA 1) --> user certs. I want to create a revocation list for level 1 CAs (signed by the root CA) and a revocation list for user certs (signed by level 1 CA 1).

nmake problem on win2000

2002-04-25 Thread Chuo HUANG(CMS)
Hello!I encountered a problem (might be a silly one you think) when I install 0.9.6c. My system is windows 2000, ActivePerl-5.6.1.631-MSWin32-x86.msi, and MSVC++ 6. Please see below. C:\>cd D:\openssl-engine-0.9.6c D:\openssl-engine-0.9.6c>perl Configure VC-WIN32 D:\openssl-engine-0.9.6c>ms\

Re: Important Message Concerning Your Membership Account. 4/23/2002 6:30:09 PM

2002-04-25 Thread Nick Simicich
The point is that th At 10:28 AM 2002-04-25 +0200, Richard Levitte - VMS Whacker wrote: >In message <[EMAIL PROTECTED]> on Wed, 24 Apr >2002 18:45:33 -0400, Nick Simicich <[EMAIL PROTECTED]> said: > >njs> It looks like the Received headers are filtered at the openssl >njs> listserv - > >Nope. S

Re: Key strength confusion

2002-04-25 Thread Srikanth_Chakravarthy
Hi, Please check if you are using the RC4/RC2 cipher suite. In that case, "Note that for RC4 and RC2 ciphers, the phrase "40-bit encryption" means the keys are still 128 bits long, but only 40 bits have cryptographic significance. " Regards, Srikanth Stuart Parker <[EMAIL PROTECTED]> on 2

Key strength confusion

2002-04-25 Thread Stuart Parker
Hi there, I have a site which is reporting the https connection as 40-bit with some browsers and 128-bit with other browsers. I am aware that Microsoft uses a proprietary mechanism to step up a connection to 128 from 40 bit if the browser can handle it, but Netscape also indicates it i

Verisign & openssl

2002-04-25 Thread Roelf Schreurs
Hi I followed the following procedure: perl CA.pl -newreq copy request and get ID from verisign in the format of -BEGIN CERTIFICATE--- fdk -END CERTIFICATE- But what do I need to do to finish the cetificate? If I create a self signed certificate, it's got a lot more detail than j

Re: trustway pkcs11 engine for openssl

2002-04-25 Thread Richard Levitte - VMS Whacker
Uhmmm, we got the message. Several times. Do you *really* think you'll get wuicker responses by repeating it every day? Some folks are meaner than me and simply filter people who repeat their emails too much... I've got the first copy marked in my inbox. I'm sure have that as well. Please be

dlopen: Cannot map library libssl.so

2002-04-25 Thread Bossi Camille
Hello, I'm installing apache_1.3.24, modssl-2.8.8-1.3.24 and openssl-engine-0.9.6c on Compaq Tru64 UNIX V5.1A (Rev. 1885). I configured and compiled everything fine with tese commands: OPENSSL: ./config --prefix=/users/bossi/openssl --openssldir=/users/bossi/openssl shared make MODSSL: ./config

Fw: trustway pkcs11 engine for openssl

2002-04-25 Thread afchine madjlessi
Based on openssl-engine-0.9.6c, we have developed a new engine which allowsopenssl applications and Apache-mod_ssl servers to use through a PKCS#11interface the security functions provided by the Bull trustway cc2000 cryptographiccard, taking advantage of key storage in secure memory and acc

Re: Important Message Concerning Your Membership Account. 4/23/2002 6:30:09 PM

2002-04-25 Thread Lutz Jaenicke
On Thu, Apr 25, 2002 at 10:28:42AM +0200, Richard Levitte - VMS Whacker wrote: > In message <[EMAIL PROTECTED]> on Wed, 24 Apr 2002 >18:45:33 -0400, Nick Simicich <[EMAIL PROTECTED]> said: > > njs> It looks like the Received headers are filtered at the openssl > njs> listserv - > > Nope. See

Re: Important Message Concerning Your Membership Account.4/23/2002 6:30:09 PM

2002-04-25 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 24 Apr 2002 18:45:33 -0400, Nick Simicich <[EMAIL PROTECTED]> said: njs> It looks like the Received headers are filtered at the openssl njs> listserv - Nope. See your own message (or this one) as an example :-). njs> it is impossible to tell where this

Re: CA error

2002-04-25 Thread Lutz Jaenicke
On Wed, Apr 24, 2002 at 04:18:49PM -0300, Jay States wrote: > I am use learning and testing CA's. I have tried to create a > self-signed CA certificate using the following: > > openssl req -new -x509 -days 365 -key sample.key -out sample.crt > > and this is the error message that I get. I re-b

[Fwd: Memory leak in TLS client side app]

2002-04-25 Thread Krishnaswamy R.
Hi all, This is a resend of a previous message. Any pointers or tips will be very much appreciated. thanks, Krishna Original Message Hi all, I have written a TLS client using the OpenSSL library. It uses memory BIOs as the input/output BIOs to the SSL connection. The code f

CA error

2002-04-25 Thread Jay States
I am use learning and testing CA's. I have tried to create a self-signed CA certificate using the following: openssl req -new -x509 -days 365 -key sample.key -out sample.crt and this is the error message that I get. I re-built openssl and openssh, but I still get this error. What am I doing