Re: Problems compling openSSL

2002-07-12 Thread Mark
Thus spake Craig Blanzy ([EMAIL PROTECTED]): > after running make i get a fatal error i ran make report after make and make test >they are to follow. I'm not sure if i should just attempt to install it and see what >happens or if i should hold off. SCO OpenServer 5.0.5 CC compiler > > i ran

Problems compling openSSL

2002-07-12 Thread Craig Blanzy
after running make i get a fatal error i ran make report after make and make test they are to follow.  I'm not sure if i should just attempt to install it and see what happens or if i should hold off.  SCO OpenServer 5.0.5 CC compiler   i ran ./config --prefix=/usr/local --openssldir=/usr/lo

making connections

2002-07-12 Thread contest.vix
Please, How can I do a SSL connection using a asymmetric cipher algorithm??? Thanks, Roger. __ AcessoBOL, só R$ 9,90! O menor preço do mercado! Assine já! http://www.bol.com.br/acessobol __

PHP failure compile with --openssl : e_os.h don't exist in OpenSSL-0.9.7b under Solaris 2.7

2002-07-12 Thread Michel Mac Wing
Hi, Solaris 2.7 PHP 4.2.1 configure PHP ./configure --prefix=/udd/mmacwing/usr/local/php-4.2.1/ --with-config-file-path=/udd/mmacwing/usr/local/php-4.2.1/ --with-apxs=/udd/mmacwing/usr/local/apache/bin/apxs --with-openssl=/udd/mmacwing/usr/local/openssl/ --with-mysql --enab

Re: Checking certs against CRLs

2002-07-12 Thread Kiyoshi WATANABE
> Is there some mechanism within the openssl library for checking a > certificate against a CRL? I expected to find a function that would > take a X509 *cert and an X509_CRL *crl as arguments, and give an > indication as to whether the certificate is listed in the CRL. I have > been unable to l

ASN1_STRING_to_UTF8 bugs?

2002-07-12 Thread Nebergall, Christopher
In function ASN1_STRING_to_UTF8 why do you check for NULL on |!*out|? Why can't the character pointer point to NULL? If I understand your function correctly it allocates the memory so NULL makes perfect sense. Maybe it should be |!out| so you know that |out| actually points to something? My te

Does SSL work with source and destination NAT?

2002-07-12 Thread Alejandro Rusell
Hello SSL gurus Sorry if this is not the forum where to ask this, but here it goes: In a schema like this, Net 1 DMZ Net 2 C --- R1 - R2 - S C: SSL client S: SSL server (only server certificate required) R1: R

Checking certs against CRLs

2002-07-12 Thread Brad Barfield
Is there some mechanism within the openssl library for checking a certificate against a CRL? I expected to find a function that would take a X509 *cert and an X509_CRL *crl as arguments, and give an indication as to whether the certificate is listed in the CRL. I have been unable to locate any s

Re: Possible Bug: RAND_pseudo_bytes, NT 4.0?

2002-07-12 Thread Matt Pauker
Turns out it was a problem with rand_win.c after all, involving a performance query from the registry. Commented it out and the problem went away. Sorry for answering my own question, Matt On Thu, 11 Jul 2002, Matt Pauker wrote: > Hi, > > I've encountered a possible bug with RAND_psuedo_bytes

Re: Developing with ssl.

2002-07-12 Thread Michael Staszewski II
Rodrigo, I just finished doing this myself, these are _some_ of the links that helped me along with postings to this mailing list. If you need to set the servers up yourself check out Stunnel.org and post to their mailing list also. I also used the book "SSL and TLS Essentials" by Stephen Thomas

Re: Newbie question, extending life of self-signed certs beyond 30 days.

2002-07-12 Thread Pascal Chauffour
Hi Zac, Try this command specifying explicitely the number of days: openssl req -config /etc/openssl.cnf -new -x509 -keyout newkey.pem -out newcert.pem -days 365