RE: problems with TLS in openldap server/client

You need to configure the location of the client certificate on the LDAP client. Add TLS_CERT TLS_KEY to your ~/.ldaprc file. -- Howard Chu Chief Architect, Symas Corp. Director, Highland Sun http://www.symas.com http://highlandsun.com/hyc Symas: Premier OpenSourc

ssl-0.9.7-beta 2 error (Help)

I've just complied openssl-0.9.7-beta2 and now I'm getting a error in SSH saying: EVP_CipherInit: set key failed for none I've search the web be nothing... any ideas? Thanks __ OpenSSL Project

Re: handshake failure in SSL_read occasionally

Thanks Lutz for the helpful information. Could this be an IIS configuration issue? Mike >From: Lutz Jaenicke <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> >Subject: Re: handshake failure in SSL_read occasionally >Date: Fri, 21 Jun 2002 16:51:

problems with TLS in openldap server/client

Hallo everybody! As you know openldap uses openssl, and I started to get feeling that they use it somehow wrong. Problem I somehow can not manage to make TLS server to authenticate TLS client. Could you please look in debug output of client and server below, probably, you will be able to say w

RSA_sign

Hi all, thanks for your help on DH stuff :-) Now I have a pb with RSA_sign(). I have a buffer and I want to sign it with my private key. So I generate a key: openssl genrsa -out key.pem 1024 then I have the following code: " rsa = RSA_new(); get_my_priv_RSA(&rsa); sigbuf = malloc(RSA_size

ANNOUNCE: "Network Security with OpenSSL" (+DC area SSL talk)

O'Reilly has just published our book, "Network Security with OpenSSL". First, the marketing speak: "Instead of getting bogged down in the technical details of how SSL/TLS works under the hood, this book focuses on the information that is necessary to use OpenSSL safely and effectively. The read

Re: handshake failure in SSL_read occasionally

Hi Lutz Thanks a lot for taking time reading my post and helping me figure out the problem. Maybe I am too stupid to figure out how to reply to your question from your message directly, so I choose to do it my way. Yes. error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure is the

Re: handshake failure in SSL_read occasionally

On Fri, Jun 21, 2002 at 10:18:51AM -0400, Zeng, Ming wrote: > Maybe I am too stupid to figure out how to reply to your question from your > message directly, so I choose to do it my way. > > Yes. error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure is > the only error my program kee

problem compiling openssl with debug info

Hallo, just want to inform you that config -d --prefix=bla-bla on SuSE 7.3 generates -lefence in EX_LIBS. It results in gcc -o openssl -DMONOLITH -I../include -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_EN

Re: Errors by compiling Apapache with mod_ssl

On Fri, Jun 21, 2002 at 03:02:46PM +0200, ?ernoevi? Michal wrote: > I can't compile Apache 1.3.24 with openssl-beta2, mod_ssl and mod_perl, but there is >no error with 0.96d version. Can anybody see some problems? Update to mod_ssl-2.8.9, which is adapted for OpenSSL 0.9.7 use. You will need it

OpenSSL in Windows 2000

Hi ... i'm new in OpenSSL. I tried to install the OpenSSL in windows 2000, and it seems working. After doing the ms\test ... it pass all the test. When i try this command : openssl ciphers -v, it gives the good result ... but, when i try with this : openssl ciphers -v 'ALL:!ADH:@STRENGTH' , i go

Errors by compiling Apapache with mod_ssl

Hi, I can't compile Apache 1.3.24 with openssl-beta2, mod_ssl and mod_perl, but there is no error with 0.96d version. Can anybody see some problems? Thanks. Michal Cernoevic Linux brnl01.pvt.cz 2.4.9-31 #1 Tue Feb 26 07:11:02 EST 2002 i686 unknown gcc --version 2.96 mod_perl-1.27 make[5]

Certificate creation with openssl.cfg days being ignored

Title: Certificate creation with openssl.cfg days being ignored I have a script that creates all my cert/key pairs for me. The thing though is when creating a self-signed CA it does not read the number of days from the openssl.cfg. Is there a way to put in the openssl.cfg how many days the CA

Re: Error 02001002.

Hello Henri, Friday, June 21, 2002, 10:15:57 AM, you wrote: HvR> Hi all, HvR> I run a mailserver that supports openSSL (eXtremail). I have generated a HvR> key and certificate with the following command: HvR> openssl req -new -newkey rsa:1024 -nodes -keyout key.pem -out cert.pem HvR> -x509 -co

Re: MDC2 inconsistancy

Rich Salz wrote: > Try doing > echo "foo bar baz" | od -c > on both machines and see if you get different output. Ok I just did and it's the same: ff@leo:~> echo "foo bar baz" | od -c 000 f o o b a r b a z \n 014 [ff@partyticket ff]$ echo "foo bar baz" | o

Error 02001002.

Hi all, I run a mailserver that supports openSSL (eXtremail). I have generated a key and certificate with the following command: openssl req -new -newkey rsa:1024 -nodes -keyout key.pem -out cert.pem -x509 -config /usr/local/ssl/openssl.cnf I copied the key and certificate to /etc/ssl: dslrtr.

Re: handshake failure in SSL_read occasionally

On Fri, Jun 21, 2002 at 12:36:55AM +, Ming Zeng wrote: > I have a multithreade application which uses OpenSSL to get contents from > HTTPS server (here an IIS server). The HTTPS server requires client side > certificate. > > My program uses: > SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY

Re: Please disregard my plea for help I figured everything out.

Thanks, I figured everything out.  Have a good one! Dan! - Original Message - From: Dan Nelson To: [EMAIL PROTECTED] ; [EMAIL PROTECTED] ; [EMAIL PROTECTED] ; William F. Slater, III ; Jimmie Jones ; [EMAIL PROTECTED] ; [EMAIL PROTECTED] Sent: Friday, June 21, 2002 12:0