Re: Self signed cert

2002-05-30 Thread Riaan Kruger
On Thu, 2002-05-30 at 15:26, Darrin Powell wrote: > I have setup a self signed cert for my linux email server. When I > connect it says the cert is not valid. Did I do something wrong with the > signing of the cert? Or does it have to be provided by a cert provider > such as thawte to be valid? Ei

Re: CRL Retrieval?

2002-05-30 Thread Harald Koch
> What support will be available in future releases (0.9.7?) of OpenSSL for > retrieving and caching CRL's from CRL Distribution points? What protocols > will be supported? HTTP, HTTPS, FTP, LDAP? Um, your code? Last time I checked, 0.9.7 had limited support for CRLs. The CRLs have to be preloa

SV: Format of RSA public key ?

2002-05-30 Thread Hellan,Kim KHE
>RSA_public_decrypt() does return 35 bytes of something that I don't >know what is. Maybe a hash and some information about the hash algorithm? >I don't know how to "decode" this returned binary blob? >One should know signature details. It's hard to guess what >is 35-bytes-size object. It's not S

CRL Retrieval?

2002-05-30 Thread Nebergall, Christopher
What support will be available in future releases (0.9.7?) of OpenSSL for retrieving and caching CRL's from CRL Distribution points? What protocols will be supported? HTTP, HTTPS, FTP, LDAP? Thanks, Christopher Nebergall __ Ope

Re: SV: Format of RSA public key ?

2002-05-30 Thread Vadim Fedukovich
On Thu, May 30, 2002 at 03:35:51PM +0200, Hellan,Kim KHE wrote: >... > > I have been looking at the RSA_public_decrypt() function, but I'm not quite sure >how it works. > > How can I verify a signature without specifying what was signed in the first place? > > >Public key is normally used to rec

Re: Self signed cert

2002-05-30 Thread Bernd Matthes
Darrin Powell wrote: > > I have setup a self signed cert for my linux email server. When I > connect it says the cert is not valid. Did I do something wrong with the > signing of the cert? Or does it have to be provided by a cert provider > such as thawte to be valid? > Hi! What do You want to

Self signed cert

2002-05-30 Thread Darrin Powell
I have setup a self signed cert for my linux email server. When I connect it says the cert is not valid. Did I do something wrong with the signing of the cert? Or does it have to be provided by a cert provider such as thawte to be valid? Thanks -- Darrin Powell System Administrator LSSi, Corp.

SV: Format of RSA public key ?

2002-05-30 Thread Hellan,Kim KHE
> Great! > It works fine. When I got your mail I was just getting ready to test this function. > This public key I have loaded, shall be used to verify a signature. > I have the signature as a 128 byte binary blob. > > I have been looking at the RSA_public_decrypt() function, but I'm not quite su

What's workaround for config file problem?

2002-05-30 Thread Vladislovas Razas
I need to create self-signed certificate but I run into the problem exactly described in FAQ section:   4. Why can't I create certificate requests?   What can I do about it??? Please help if you can, I am really stuck here.   The docs explanation would be: The following messages are freque

Re: SV: Format of RSA public key ?

2002-05-30 Thread Vadim Fedukovich
On Thu, May 30, 2002 at 02:09:38PM +0200, Hellan,Kim KHE wrote: > Hi Vadim > > Great! > It works fine. When I got your mail I was just getting ready to test this function. > This public key I have loaded, shall be used to verify a signature. > I have the signature as a 128 byte binary blob. > >

SV: Format of RSA public key ?

2002-05-30 Thread Hellan,Kim KHE
Hi Vadim Great! It works fine. When I got your mail I was just getting ready to test this function. This public key I have loaded, shall be used to verify a signature. I have the signature as a 128 byte binary blob. I have been looking at the RSA_public_decrypt() function, but I'm not quite sure

RE: PRNG not seeded

2002-05-30 Thread Hussain, Shahid
try running prngd, if u don't have it installed, you can get it from sunfreeware.com and to install it, just type pkgadd -d and the package name of prngd. once it is finished adding the package, make sure the following directory exists /var/spool/prngd. then run the following command /usr/loc

Re: SV: Format of RSA public key ?

2002-05-30 Thread Vadim Fedukovich
On Thu, May 30, 2002 at 08:59:59AM +0200, Hellan,Kim KHE wrote: > Hi Vadim > > I should have been more specific. > I know it is modulus and public exponent, but what I'm looking for is some OpenSSL >function to load this key into a EVP_PKEY structure. > > Any ideas? d2i_RSAPublicKey() and EVP_

Re: structure of data.

2002-05-30 Thread Shalendra Chhabra
can u give the code/? On Thu, 30 May 2002 venkats wrote : >Sir, >I worte one ssl clent hello message and want to test with the >SSLDump >developed by u. But iam not getting response. I thought the data >i sent is >not in correct formet. Can u please help me in that. U please >inform in >which

Re: PRNG not seeded

2002-05-30 Thread Jason Royes
[EMAIL PROTECTED] wrote: >Dear Sir, > >I have installed OPENSSL on OSF1 V4.0 (Digital Unix) and I am trying to >run the demos/bio programs saccept and sconnect. > >I run saccept localhost:8900 and all is fine. > >When I run sconnect localhost:8900, I receive the following message: > >SSLEAY_RAND_

RE: structure of data.

2002-05-30 Thread Oleg Tyschenko
Hi! You can have a look at: http://www.netscape.com/eng/ssl3/traces/trc-clnt-ex.html It helps me to create and trace the structures. Also, RFC 2246 should be useful. Good luck. Oleg Tyschenko > -Original Message- > From: venkats [mailto:[EMAIL PROTECTED]] > Sent: Thursday, May 30, 2002

REMOVE

2002-05-30 Thread Phani Kumar V V S R
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

structure of data.

2002-05-30 Thread venkats
Sir, I worte one ssl clent hello message and want to test with the SSLDump developed by u. But iam not getting response. I thought the data i sent is not in correct formet. Can u please help me in that. U please inform in which structure i should send data to the server. I had written that program

Re: linker problems

2002-05-30 Thread trl
I'm not sure what this has to do with OpenSSL. At any rate, this is normal behaviour, the hints file is used by the run-time linker. You need to use the -L flag manually, or add it in your Makefile, or however. On Wed, May 29, 2002 at 12:52:17PM -0700, isaac flemmin wrote: | Hello, | | This is

How to remove oneself from this list [was: REMOVE]

2002-05-30 Thread Richard Levitte - VMS Whacker
In message <3F74C35362DAD511B1710008C7B98BA50100D15A@THYMAIL> on Wed, 29 May 2002 21:04:38 +0300, "FARUK AYDIN (EBI Bsk.- Veri Ilet. Sistem Prog.)" <[EMAIL PROTECTED]> said: I've seen a number of these messages lately. Please, you all got a welcoming message when you signed on. It describes h

Re: Code that worked now fails; expired certs? Expired signatures? Which is it?

2002-05-30 Thread Lutz Jaenicke
On Wed, May 29, 2002 at 04:16:48PM -0700, Bob Steele wrote: > > --- > > depth=2 /C=US/O=VeriSign, Inc./OU=Class 1 Public Primary Certification > Authority > verify return:1 > > depth=1 /O=VeriSign, Inc./OU=VeriSign Trus

REMOVE

2002-05-30 Thread Nick Farrow
REMOVE __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Win32 how to specify where is openssl.cnf

2002-05-30 Thread Vladislovas Razas
Hi everyone,   I have a problem with CA.PL under Win32. It doesn't find my configuration file openssl.cnf. I think I tried to put it almost everywhere. I've set HOME enviroment variable but it still says :   F:\OpenSSL\openssl-0.9.6c\apps>ca.pl -newreq Using configuration from /usr/local/ssl/