RE: selfsigned certificate

2002-08-11 Thread Tim Coote
A potential fly in the ointment here is that this article claims that the fix is *only* for https with IE. I thought that your (and my) problem was with IMAPS and Outlook. If it works or not, do pls report back to reduce the number of dead ends being chased. This fix is clearly not being distribu

copying an EVP_PKEY

2002-08-11 Thread benson
Title: Message I want to keep a key pair in shared memory. I clearly can't keep an EVP_PKEY in there, since it uses pointers which won't be the same from process to process. Is there some straightforward 'dehydrate this EVP_PKEY to a blob API'?  

Re: patches for security advisory of 30th July [URGENT]

2002-08-11 Thread Jeffrey Altman
You might do better if you didn't post HTML to a text based mailing list. The patches posted to this mailing list come from an OpenSSL team member. They are similar to the patches that were incorporated into the current distributions of 0.9.6e and 0.9.7-beta3. The patches utilize the OpenSSLDie

Re: patches for security advisory of 30th July [URGENT]

2002-08-11 Thread Sumeet Singh
Its funny how nobody is replying to this email - not even in the negative. I will try one last time :). Can any representative of openssl reply to the enclosed email ? In fact can *anybody* reply please ? I would really appreciate that. Sumeet Singh wrote: Hi all,     This

Re: [ANNOUNCE] OpenSSL 0.9.6g released

2002-08-11 Thread Jeffrey Altman
Richard wrote: > > The trouble with such a scheme would be that the algorithm itself > would still exist in the library, and can then potentially be used, > just by a change in the INI file. Under those conditions, the > algorithm is still there, even if not currently used (it's still > usable,

Invalid ELF header

2002-08-11 Thread Adam Lewis
I'm running RedHat 7.3 with openssl-0.9.6g. I had openssl installed as the rpm install from the CD and uninstalled it and installed 0.9.6g from source. When I try to run mutt or another app that depends on openssl (that was installed RPM) I get the following error. If I'm not mistaken, /lib/lib

compiled openssl?

2002-08-11 Thread madhatter
Is there a way can get a precompiled copy of openssl as I am having some problems compiling as I am not that good with perl? -David --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.381 / Virus Database: 214 - Release

Re: [ANNOUNCE] OpenSSL 0.9.6g released

2002-08-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 10 Aug 2002 22:05:18 -0400, "Thomas J. Hruska" <[EMAIL PROTECTED]> said: For everyone concerned: I will comment on the binary builder proposals when I have more time than I have right now. The following need immediate commenting: shinelight> >One thing th

Re: Finding the openssl.cnf file

2002-08-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 10 Aug 2002 10:57:48 -0400 (EDT), Dan Kalowsky <[EMAIL PROTECTED]> said: dank> I did some searching online and didn't find any mention of this, so if dank> it's somewhere archived, please point me there. dank> dank> I'm trying to fix a bug in the PHP --wit

Re: Re: Re: './config no_RC5 no_IDEA' yields compile error

2002-08-11 Thread Michael Kobar
Mark - I have never seen this problem in the release tarballs. The major place we hit this is in cygwin, which (depending on the setting used when installing cygwin) may automagically unpack/untar all your source code into CR/LF files! The only way I have ever seen it on a Linux system was wh

Help with SSL_accept

2002-08-11 Thread Ken Hoo
I have some code that runs fine with 096 but with 097beta2, it creates the following error: 9144:error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:s3_pkt.c:459: I'm pretty sure this come from a call I made to the SSL_accept function. In both cases however, SSL_set