(OpenSSL library error follows) - in Apache 2.0.35

2002-05-06 Thread MegaZone
When I try to connect via https:// I get this in my log: (servername obscured by me, sorry, policy, et al) [06/May/2002 21:07:05 21504] [info] Connection to child 2 established (server [server]:443, client 192.32.224.59) [06/May/2002 21:07:05 21504] [info] Seeding PRNG with 136 bytes of entro

OpenSSL with mod_ssl in Apache 2.0.35

2002-05-06 Thread MegaZone
Hello, The platform is Solaris 8. I've installed OpenSSL 0.9.6c, and then Apache 2.0.35 using ./configure --prefix=/local/webhome/apache-2.0.35 --enable-mods-shared="ssl" I can start Apache without SSL, but when I try to use SSL I receive this message: [malarkey:/local/webhome/apache/conf]458

RE: Default_crl_days

2002-05-06 Thread Andrew T. Finnell
Chris, Yeah that is what I've had to do. Although I had a default_days set at 365 , creating a CA seemed to ignore this value. All the other certificates picked it up fine though. - Andrew T. Finnell Active Solutions L.L.C [EMAIL PROTECTED] > -Original Message- > From:

RE: Default_crl_days

2002-05-06 Thread Chris Cleeland
On Mon, 6 May 2002, Andrew T. Finnell wrote: > Nope we have our own script that just uses the openssl tool. > Basically we do .\openssl req -config openssl.cfg -newkey > dsa:dsaparam.pem -x509 -nodes -out cacert.pem -keyout cakey.pem In our > openssl.cfg file the only thing near 30 days is

RE: Default_crl_days

2002-05-06 Thread Andrew T. Finnell
Neff, Nope we have our own script that just uses the openssl tool. Basically we do .\openssl req -config openssl.cfg -newkey dsa:dsaparam.pem -x509 -nodes -out cacert.pem -keyout cakey.pem In our openssl.cfg file the only thing near 30 days is the default_crl_days which is why I t

TLS AND S/MIME

2002-05-06 Thread Mark W. Webb
Has any work been done for the TLS libraries to parse/open a s/MIME message? -- Mark Webb Software Engineer Dolphin Technology 1300B Floyd Ave Rome, NY 13440 Phone: (315) 334-4892 x222 Fax: (315) 339-4846 Email: [EMAIL PROTECTED] __

RE: Default_crl_days

2002-05-06 Thread Neff Robert A
Sorry, I'm assuming a Windows environment, and the default file would be testss.bat, not makess.bat. Sorry for the confusion. Rob -Original Message- From: Neff Robert A [mailto:[EMAIL PROTECTED]] Sent: Monday, May 06, 2002 3:54 PM To: '[EMAIL PROTECTED]' Subject: RE: Default_crl_days An

RE: Default_crl_days

2002-05-06 Thread Neff Robert A
Andrew, If you are using the makess.bat file to generate your CA cert, I would look at that and check for a param called -days in the X509 command. This also may show you why your certs are expiring. Hope that helps, Rob -Original Message- From: Andrew T. Finnell [mailto:[EMAIL PROTECTED

Default_crl_days

2002-05-06 Thread Andrew T. Finnell
We are having a problem with our certificates becoming invalid in 30 days for our custom application. I looked at the openssl.cfg file we use when creating our self-CA and certificate/key pairs and the only thing that stands out to me is default_crl_days being set to 30 days. Could someone tell me

dynamic library name collisions - help

2002-05-06 Thread John Bihlmeyer
Sorry forgot to add a subject field Hello, I am new to this forum and would like to ask if anyone here can help me with a concern that I have. We are using the libcryp library as a dynamic library. My question and concern is when we refresh the library on a system older products may stop running.

RE: SSL_connect(..) returns SSL_ERROR_SYSCALL

2002-05-06 Thread Max-Ph. Blickenstorfer
Sorry to bother - I printed the error to a file as described in the faq and finally get the following error: 1300:error::.\crypto\bio\b_sock.c:131:host=https ==>> in the source I found [he=BIO_gethostbyname(str);] returns zero, mean lookup failed ? However - still digging on... Regards Max

SSL_connect(..) returns SSL_ERROR_SYSCALL

2002-05-06 Thread Max-Ph. Blickenstorfer
I try to connect to a server from an application using openssl. My steps so far: SSL_load_error_strings(); SSL_library_init(); // init random number generator *** could be done better // just creating 1k of random chasracters and re-read them // for now we just need to make it working

error 7 at 0 depth lookup:certificate signature failure

2002-05-06 Thread Anand Rao
Hi, I was testing OpenSSL 0.9.6a on a Solaris 8 test machine. Everything went fine but when i tried to "self-sign" the CSR, i get the following error. error 7 at 0 depth lookup:certificate signature failure Could you kindly help us with this ? Thanks in anticipation anand rao begin:vcard n:

REMOVE

2002-05-06 Thread Chris Rutledge
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]