Re: [offtopic] Importing openssl RSA keys to gnupg.

2002-05-14 Thread Augusto Marcacini
Hi, I've already done this with PGP for Windows. It works Ok and we can see the certificate common fields. I'd like to import X.509 certificates and private keys do gnupg also. But I think (not for sure) that gnupg doesn't support it. If anyone know how to do it and if it's possible, I also

Re: Large files with smime

2002-05-14 Thread Dr. Stephen Henson
On Tue, May 14, 2002, Girish Venkatachalam wrote: > Hi everyone, > Openssl smime is not able to handle big files ( We tried with a 500MB file). It >doesn't report any error message. > > On stepping through the source, we found that it's failing in OPENSSL_malloc. > That's not surprising. Th

Re: IP address

2002-05-14 Thread Sidney Fortes
Use host, nslookup became deprecated ex: [sidney@host sidney]$ host www.hotmail.com www.hotmail.com. has address 64.4.44.7 www.hotmail.com. has address 64.4.45.7 www.hotmail.com. has address 64.4.52.7 www.hotmail.com. has address 64.4.53.7 www.hotmail.com. has address 64.4.54.7 www.hotmail.com. h

Re: IP address

2002-05-14 Thread Chamby
nslookup and the URL - Original Message - From: "shalen chhabra" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 14, 2002 3:58 PM Subject: IP address > I want to know the IP Address of a site I connect to. > For example www.hotmail.com > How can I know it from a linux

IP address

2002-05-14 Thread shalen chhabra
I want to know the IP Address of a site I connect to. For example www.hotmail.com How can I know it from a linux terminal. Thanks (I am writing some progs so in between them I need this) _ Click below to visit monsterindia.com and review jobs

Re: RE: The digital certificate disapear.....

2002-05-14 Thread shalen chhabra
I have seen this Certificate Discussion goin on too long. SO I am also interested to know more about it, All I know is what a CA is. Also I donot know, why is OPenssl being given so much importance for certificate?? and how do I use this certificate if I have it? (just give me practical details,

create opensll, ssldump keyfile

2002-05-14 Thread Davidson, Stuart
The following ssldump trace records the following 'su' sequence and shows that an su from a non privileged account does not work. # su - dav $ id uid=4001 gid=401 +++ su from root to dav works OK +++ $ su - dav Password: su: Sorry +++ su from dav to dav does NOT work +++ $ Questions: 1. any ide

RE: create opensll, ssldump keyfile

2002-05-14 Thread Davidson, Stuart
2. when I try using the -k and -p arguments using the iPlanet cert7.db, ssldump gives the error: Problem loading private key Error: Couldn't create network handler 3. I think I need option (2) but I don't know how to convert the existing iPlanet key3.db, cert7.db or Microsoft Enterprise Certti

Re: Large files with smime

2002-05-14 Thread Pablo J Royo
Althougth no such a big files, we also create big PKCS7 files (tens of Mbytes) using detached PKCS7.I don´t know exactly if this is supported by OpenSSL now, but there is a "detached" attribute for files in PKCS7 routines, and working in PKCS7_verify(),PKCS7_init(),PKCS7_data() you can do it

RE: The digital certificate disapear.....

2002-05-14 Thread Erwann ABALEA
On 15 May 2002, Franck Martin wrote: > Because openssl is broken when handling smime and I need to know from > expert people what client works and how good it is when handling > certificates created by openssl.. Do you have an example of such S/MIME mail that can't be handled correctly by OpenSS

Re: create opensll, ssldump keyfile

2002-05-14 Thread Eric Rescorla
"Davidson, Stuart" <[EMAIL PROTECTED]> writes: > The following ssldump trace records the following 'su' sequence and shows that > an su from a non privileged account does not work. > > # su - dav > $ id > uid=4001 gid=401 +++ su from root to dav works OK +++ > $ su - dav > Password: > su: Sorry +

Cert for iPlanet webserver

2002-05-14 Thread carsten . schwant
I signed a request for a server-certificate. That should secure an iPlanet webserver. But when I try to install it in the webserver I get this message: Internal Error The administration server was unable to fulfill your request. Whats wrong with the certificate? Same certificate runs in IIS an

Re: Large files with smime

2002-05-14 Thread Erwann ABALEA
On Tue, 14 May 2002, Girish Venkatachalam wrote: > Hi everyone, > Openssl smime is not able to handle big files ( We tried with a 500MB file). It >doesn't report any error message. > > On stepping through the source, we found that it's failing in OPENSSL_malloc. > > However openssl enc works fin

Large files with smime

2002-05-14 Thread Girish Venkatachalam
Hi everyone, Openssl smime is not able to handle big files ( We tried with a 500MB file). It doesn't report any error message.   On stepping through the source, we found that it's failing in OPENSSL_malloc.   However openssl enc works fine with files larger than 2 GB.   There is a bug in o

How do I change the public key in a DER file?

2002-05-14 Thread Par Ahren
Hi all! How do I change the public key in a DER file? I am using C but I can't se an easy way to do it... Best regards, -- Pär Ahrén, [EMAIL PROTECTED] GSM: +46-703-247367, Fax: +46(0)702-035519 begin:vcard n:Ahrén;Pär tel;cell:+46 (0)703 24 73 67 tel;fax:+46 (0)702 03 55 19 x-mozilla-html:TR

[OT] Re: Securing Telnet

2002-05-14 Thread dreamwvr
On Tue, May 14, 2002 at 12:49:16PM +0200, Thomas Nilsen wrote: > Is it possible to set up a SSH session on a linux host in DMZ which will forward any >SSH connections on a given port to the AIXs telnet port? There will be a couple of >users needing access, and we need to be able to have them log

Re: Securing Telnet

2002-05-14 Thread Bruce Ferrell
How about building SSH from source? There is a gcc for AIX 4.1 if you don't have the IBM compiler. Thomas Nilsen wrote: > > Sorry if this is a lame question, but I've not been able to find the answers to my >question anywhere else. > > We've been given the task of giving an external company

Re: Securing Telnet

2002-05-14 Thread Jeffrey Altman
You other option is to install a Secure Telnet Daemon on the AIX server. See http://www.kermit-project.org/telnetd.html for some options. > Sorry if this is a lame question, but I've not been able to find the answers to my >question anywhere else. > > We've been given the task of giving a

Securing Telnet

2002-05-14 Thread Thomas Nilsen
Sorry if this is a lame question, but I've not been able to find the answers to my question anywhere else. We've been given the task of giving an external company access to a AIX 4.1 box which only runs telnet. And since it looks like OpenSSH needs AIX 4.3 we are not able to nativly support S

RE: Which product to buy?

2002-05-14 Thread Mark H. Wood
On Tue, 14 May 2002, Franck Martin wrote: [snip] > Who can't see that this message is digitaly signed and do you know why? I can see that it is signed, but pine doesn't know what to do with an "Application/X-PKCS7-SIGNATURE" bodypart. -- Mark H. Wood, Lead System Programmer [EMAIL

RE: The digital certificate disapear.....

2002-05-14 Thread Franck Martin
Because openssl is broken when handling smime and I need to know from expert people what client works and how good it is when handling certificates created by openssl.. Moreover, I need to know what client is doing what. It seems that some clients make some internet connection to verify cert

Re: Unable to load

2002-05-14 Thread Umesh
Try this... for a quick solution create a file 'random_file' and type a few junk characters in it (save it :-)). Then... ./openssl req -new -rand random_file -nodes -keyout private.key -out public.csr this should solve your problem. Regards, Umesh Leandro Silveira de Paula wrote: > > Hello...

Re: Unable to load

2002-05-14 Thread Pavel Tsekov
Hello Leandro, Thursday, May 13, 2004, 10:25:39 PM, you wrote: LSdP> seeded:md_rand.c:501:You need to read the OpenSSL FAQ, LSdP> http://www.openssl.org/support/faq.html Have you done as suggested ? __ OpenSSL Project

RE: The digital certificate disapear.....

2002-05-14 Thread Erwann ABALEA
On Tue, 14 May 2002, Franck Martin wrote: > I can tell you, now it works... > > What about your configurastion? [snip] Why are you testing your stuff on the OpenSSL-Users mailing list? Can't you create your own mailing list for that purpose? Why sending unnecessary emails to everybody for somet

Re: openssl make test failure

2002-05-14 Thread Lars-Erik Englund
sridhar Kondoji wrote: > Hi all, > Iam using Sun workstation with solaris version 8. > I have successfully did a make but 'make test' fails > > It says > bc doesnot work properly (SunOStest failed) and finally it says no working > bc found. > > What could be the reason? Iam stuck at this point h