RE: Basic OpenSSL Client w/Pthreads

2002-05-13 Thread Nick Gaugler
You are correct, it was timeouts. My pthread application was overloading the SSL server and it wasn't returning within the timeout, so that is why I kept receiving "Error with sockets". I have an additional question related to SSL_write on a non-blocking IO. What is the proper method to check

openssl make test failure

2002-05-13 Thread sridhar Kondoji
Hi all, Iam using Sun workstation with solaris version 8. I have successfully did a make but 'make test' fails It says bc doesnot work properly (SunOStest failed) and finally it says no working bc found. What could be the reason? Iam stuck at this point help me out. Iam new to Unix and also to

Unable to load

2002-05-13 Thread Leandro Silveira de Paula
Hello... I'm tryng to compile a Open SSL 0.9.6 in a AIX 4.3.3, and i received the following message: risc# ./openssl req -new -nodes -keyout private.key -out public.csr Using configuration from /usr/local/ssl/openssl.cnf unable to load 'random state' This means that the random number generator

error: SSL_CTX_use_PrivateKey_file

2002-05-13 Thread LIM SENG CHOR
Hi, I encountered the following problem: STARTTLS=server, error: SSL_CTX_use_PrivateKey_file(/etc/mail/certs/MYkey.pem) failed anyone has any idea to overcome this problem? Thank you. __ OpenSSL Project

Re: Secret sharing & partial signature

2002-05-13 Thread Vadim Fedukovich
On Mon, 13 May 2002, Rakeshbabu Bobba wrote: > here is the link > > http://crypto.stanford.edu/~dabo/ITTC/dist-files/ittc-1.0.tar.gz > > rakesh > > On 13 May 2002, Aleix Conchillo wrote: > > > On Mon, 2002-05-13 at 19:34, Rakeshbabu Bobba wrote: > > > you might want to take a look at IITC proj

RE: Which product to buy?

2002-05-13 Thread Franck Martin
1) I had report of outlook XP carshing for same reasons I read somewhere that outlook is trying to get the cert above in the trust... I can't find anything else on the subject. Do you have an idea why does it hangs? 2) This is the reason why I sign my messages in clear text, so that any mail

RE: Which product to buy?

2002-05-13 Thread Franck Martin
In theory, you should be able to save the message and issue the following command: openssl smime -verify -in message.txt But I had various level of luck with this command... Let me know how does it work for you... And if anybody can make it work? Franck Martin Network and Database Development O

RE: The digital certificate disapear.....

2002-05-13 Thread Franck Martin
I can tell you, now it works... What about your configurastion? -Original Message- From: Franck Martin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 14 May 2002 10:21 To: '[EMAIL PROTECTED]' Subject: RE: The digital certificate disapear. I made a modification in my exchange server and

Token Auth + OpenSSL

2002-05-13 Thread Andrew T. Finnell
Hi, We have an existing application that uses OpenSSL for authentication and encryption between two of our custom built applications. We have this already deployed and one of our customers has asked if they can use a Hardware based Token + PKI Server to authenticate these applications. I

RE: unpadded triple DES

2002-05-13 Thread Dilkie, Lee
It's gross, and I do it, but just call EVP_ENCRYPT for both encrypt and decrypt operations. Don't bother with the EVP_FINAL at all.   You can't call EVP_DECRYPT because it always holds on to one block in case it needs to interpret the data for padding purposes. EVP_ENCRYPT, on the other hand,

The client certificate is untrusted or corrupt.

2002-05-13 Thread Richard . Lane
Hi, I have a .pfx certificate that is valid, which I have converted using the openssl utility, to a .pem for use in loadrunner stress testing software. Previously, I have successfully converted BT certificates using the same process. These are OSIS certificates, and differ from BT in that they r

Re: Which product to buy?

2002-05-13 Thread Franck Martin
Does anybody sell certificate that allow you to sign certificates? Will there be still a trust problem A signs B that signs C User X trust A and receives C, is C trusted too? If B expires, but C dates are still ok, and I renew B (with which opennssl command by the way) is C still va

Re: Which product to buy?

2002-05-13 Thread Dean Povey
>I like to buy a certificate from verisign or thawte that allows me to >sign other certificates. The test certificate produced have the >extension CA:FALSE. I'm not sure if I can sign anything with this kind >of certificate, please advise... No you can't sign anything with that. What you need is

Re: acknowledgement requirement

2002-05-13 Thread Jeremy Smith
Jim Sallans wrote: > Dear SSL Humans I think I want to unsubscribe now! Jeremy. -- >From June, my new e-mail address will be: [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Supp

HELP

2002-05-13 Thread shalen chhabra
1. Does some one has some examples with which I can learn how to write applications using openssl? 2. I want to embedd some logging utility in the OPENSSL code, Does some one has an idea, or already done this? Thanks Shalen _ Click below

openssl-0.9.6d fails under cygwin on Win2000 was Re:

2002-05-13 Thread Pavel Tsekov
Hello A?rtCorcoran", Saturday, May 11, 2002, 7:34:49 AM, you wrote: Arnc> Hi, I'm trying to compile openssl-0.9.6d on Win2000 under cygwin (latest cygwin). Arnc> The configure works fine, but it fails during make with the following: Arnc> make[3]: Entering directory `/d/acorcoran/apps/openssl/

unpadded triple DES

2002-05-13 Thread Bob McGrew
In my application (a variant on onion routing) I know that my data comes in 16-byte blocks, so there's no need for padding. Since I'm repeatedly encrypting data, it's very difficult to use PKCS padding, as that increases the length of the data at each encryption. How can I turn of

Re: acknowledgement requirement

2002-05-13 Thread Lutz Jaenicke
On Thu, May 09, 2002 at 01:34:43PM -0700, Jim Sallans wrote: > Dear SSL Humans, > > We would like to use your product in the development of our product. That said we >would like to know what, if any, type of acknowledgement of your product we would >need to place in our end user documentation

Re: Which product to buy?

2002-05-13 Thread Erwann ABALEA
On Mon, 13 May 2002, Franck Martin wrote: > I like to buy a certificate from verisign or thawte that allows me to > sign other certificates. The test certificate produced have the > extension CA:FALSE. I'm not sure if I can sign anything with this kind > of certificate, please advise... No. Thes